Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COMPAL/UWHhtRBdtMV8yOjwWQ2ulHVtRXk.roa
File: UWHhtRBdtMV8yOjwWQ2ulHVtRXk.roa (raw, json)
Hash identifier: ndxdngbumqfFtuPZYDhe8YU0f+uuLmcu6Vze3ETMpz0=
Subject key identifier: 51:61:E1:B5:10:5D:B4:C5:7C:C8:E8:F0:59:0D:AE:94:75:6D:45:79
Certificate issuer: /CN=791128256BB12B79908180ABC59F2CF8629889EF
Certificate serial: 0ADB
Authority key identifier: 79:11:28:25:6B:B1:2B:79:90:81:80:AB:C5:9F:2C:F8:62:98:89:EF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eREoJWuxK3mQgYCrxZ8s-GKYie8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/COMPAL/UWHhtRBdtMV8yOjwWQ2ulHVtRXk.roa
Signing time: Fri 01 Sep 2023 08:31:24 +0000
ROA not before: Fri 01 Sep 2023 08:31:24 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131680
IP address blocks: 103.122.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2779 (0xadb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=791128256BB12B79908180ABC59F2CF8629889EF
Validity
Not Before: Sep 1 08:31:24 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5161E1B5105DB4C57CC8E8F0590DAE94756D4579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:45:9b:e9:ae:68:00:df:6b:52:d0:ad:b1:
0b:c0:be:4d:43:bd:13:f4:d6:3f:36:7a:d3:3a:61:
5f:0e:c5:fb:a1:10:1f:f4:62:a6:6d:10:fc:5a:27:
57:6a:ef:9b:d4:7d:9e:30:38:10:50:53:8d:4e:8a:
43:2e:56:ac:5b:ea:04:95:58:b8:0c:b5:1a:e6:a6:
98:97:57:59:71:a5:b0:c1:f1:3d:5a:5c:07:1c:cf:
e6:3c:1d:59:4d:a4:70:56:06:74:f2:77:f3:71:f8:
63:82:86:49:5e:1f:29:5b:f6:09:78:cb:02:85:54:
d0:83:57:64:c8:5a:5f:4e:57:2b:83:d7:e6:65:47:
4f:22:b0:25:cc:33:14:2c:b1:2e:89:bd:64:97:58:
87:49:68:e0:15:40:22:75:08:cc:77:4a:58:e2:ca:
e3:09:f1:ab:6b:d6:5d:0f:95:34:3a:e5:82:d2:fb:
4a:74:96:b9:eb:ec:a0:78:76:8a:71:84:5d:e5:8c:
da:0f:d3:30:27:17:09:98:51:ae:2f:28:98:21:26:
d1:c8:0d:ef:48:b2:46:68:cf:f0:e7:c2:ce:23:b8:
c2:a7:0a:61:d1:d7:7a:de:cb:3f:63:ff:c6:3f:2c:
01:07:37:64:bc:6e:54:22:31:f6:b4:09:f4:68:a1:
2b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:61:E1:B5:10:5D:B4:C5:7C:C8:E8:F0:59:0D:AE:94:75:6D:45:79
X509v3 Authority Key Identifier:
keyid:79:11:28:25:6B:B1:2B:79:90:81:80:AB:C5:9F:2C:F8:62:98:89:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COMPAL/eREoJWuxK3mQgYCrxZ8s-GKYie8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eREoJWuxK3mQgYCrxZ8s-GKYie8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COMPAL/UWHhtRBdtMV8yOjwWQ2ulHVtRXk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.216.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:3c:ef:dd:26:77:f8:16:50:eb:06:a6:f9:ad:fc:ca:b0:10:
2f:be:47:6c:72:4c:db:48:8d:86:5d:26:16:3d:38:7c:7d:31:
4c:01:5c:78:3e:bb:ec:cc:e9:c8:8c:9f:dd:58:b1:ca:98:e3:
66:78:05:f3:cb:61:9c:6b:66:92:3d:7a:70:57:58:e7:ae:9d:
60:cf:79:0e:e7:1f:b5:c5:da:ec:3e:7d:ac:ac:92:8f:af:6b:
a2:47:04:2c:e2:0c:1c:b8:d7:04:c7:03:05:e5:c0:18:62:4d:
5a:34:74:f2:65:34:4b:1a:5e:a1:59:da:06:a0:69:2c:88:f7:
f3:1d:40:de:c4:64:8f:f2:f4:90:6e:17:81:7f:3e:2f:26:4b:
56:8d:32:ba:66:8b:01:af:39:68:a9:13:1a:dc:3b:c6:9a:77:
f2:0b:ba:01:4e:2e:ea:54:88:5f:ab:9f:99:ac:75:9c:9e:36:
7d:74:7f:e2:39:23:91:a8:9d:5e:20:25:b2:8f:d6:41:bd:05:
10:b1:6a:49:08:a2:ac:4e:34:c6:22:2c:3c:cf:33:dc:e8:53:
69:dc:75:b5:63:79:4d:5b:a3:59:ed:5f:02:26:47:3c:3a:c1:
17:d7:aa:20:72:1a:30:d1:41:b2:5d:58:21:5a:fd:d3:4a:bc:
28:9e:34:49
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCtswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzkx
MTI4MjU2QkIxMkI3OTkwODE4MEFCQzU5RjJDRjg2Mjk4ODlFRjAeFw0yMzA5MDEw
ODMxMjRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDUxNjFFMUI1MTA1REI0
QzU3Q0M4RThGMDU5MERBRTk0NzU2RDQ1NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCo3EWb6a5oAN9rUtCtsQvAvk1DvRP01j82etM6YV8OxfuhEB/0
YqZtEPxaJ1dq75vUfZ4wOBBQU41OikMuVqxb6gSVWLgMtRrmppiXV1lxpbDB8T1a
XAccz+Y8HVlNpHBWBnTyd/Nx+GOChkleHylb9gl4ywKFVNCDV2TIWl9OVyuD1+Zl
R08isCXMMxQssS6JvWSXWIdJaOAVQCJ1CMx3SljiyuMJ8atr1l0PlTQ65YLS+0p0
lrnr7KB4dopxhF3ljNoP0zAnFwmYUa4vKJghJtHIDe9IskZoz/Dnws4juMKnCmHR
13reyz9j/8Y/LAEHN2S8blQiMfa0CfRooSutAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUUWHhtRBdtMV8yOjwWQ2ulHVtRXkwHwYDVR0jBBgwFoAUeREoJWuxK3mQgYCr
xZ8s+GKYie8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09NUEFM
L2VSRW9KV3V4SzNtUWdZQ3J4WjhzLUdLWWllOC5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvZVJFb0pXdXhLM21RZ1lDcnhaOHMtR0tZaWU4LmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09NUEFML1VXSGh0UkJkdE1WOHlPandX
UTJ1bEhWdFJYay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn
etgwDQYJKoZIhvcNAQELBQADggEBAL88790md/gWUOsGpvmt/MqwEC++R2xyTNtI
jYZdJhY9OHx9MUwBXHg+u+zM6ciMn91YscqY42Z4BfPLYZxrZpI9enBXWOeunWDP
eQ7nH7XF2uw+faysko+va6JHBCziDBy41wTHAwXlwBhiTVo0dPJlNEsaXqFZ2gag
aSyI9/MdQN7EZI/y9JBuF4F/Pi8mS1aNMrpmiwGvOWipExrcO8aad/ILugFOLupU
iF+rn5msdZyeNn10f+I5I5GonV4gJbKP1kG9BRCxakkIoqxONMYiLDzPM9zoU2nc
dbVjeU1bo1ntXwImRzw6wRfXqiByGjDRQbJdWCFa/dNKvCieNEk=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org