Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DCTV/eakUGBEzbzNK7Qti6NgLjXiYsOw.roa
File: eakUGBEzbzNK7Qti6NgLjXiYsOw.roa (raw, json)
Hash identifier: 3UBvhoZHeYEiK36J12x5ZisN66BfZZwEwm2v5xnMm0E=
Subject key identifier: 79:A9:14:18:11:33:6F:33:4A:ED:0B:62:E8:D8:0B:8D:78:98:B0:EC
Certificate issuer: /CN=A6FE5D1C93127E4AAEFF100F3A5C330F2DD1ABC0
Certificate serial: 0B1D
Authority key identifier: A6:FE:5D:1C:93:12:7E:4A:AE:FF:10:0F:3A:5C:33:0F:2D:D1:AB:C0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/pv5dHJMSfkqu_xAPOlwzDy3Rq8A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DCTV/eakUGBEzbzNK7Qti6NgLjXiYsOw.roa
Signing time: Fri 01 Sep 2023 08:34:58 +0000
ROA not before: Fri 01 Sep 2023 08:34:58 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131607
IP address blocks: 27.0.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2845 (0xb1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6FE5D1C93127E4AAEFF100F3A5C330F2DD1ABC0
Validity
Not Before: Sep 1 08:34:58 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=79A9141811336F334AED0B62E8D80B8D7898B0EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:05:eb:e9:1a:ff:b1:f7:fc:80:72:14:48:d2:
80:ee:98:cb:9a:06:88:97:56:e5:1a:73:c9:57:59:
f1:52:55:02:a6:8e:de:6a:24:35:a7:59:5a:87:e9:
3f:bb:bd:56:f9:58:ad:e8:72:49:7c:cf:72:d0:d6:
7f:ee:a9:c0:8b:0a:92:f2:71:75:09:bd:46:da:94:
ce:b7:8a:05:9a:f0:52:28:3b:24:c7:94:99:e4:5d:
2a:19:cd:2a:ca:a0:6c:9a:be:5b:5d:99:88:e8:97:
5a:e2:cd:39:6e:eb:28:2b:8d:6a:70:e2:5b:e8:89:
80:8e:ef:78:a6:5d:01:33:9d:2b:3b:1a:05:e9:ff:
e0:bb:a5:85:1b:e7:8e:75:18:e3:49:ad:d1:1e:d8:
02:e6:50:61:45:99:6b:34:57:a3:c8:af:c6:de:b7:
f2:5a:a4:18:e9:db:b8:f4:59:b7:c5:5c:6b:1d:26:
d7:1e:bf:55:69:b3:51:7f:44:37:06:10:8d:c2:43:
cf:ab:71:df:7e:b7:c4:42:de:87:d7:bd:4a:f3:d2:
23:0a:08:4c:e5:35:e4:02:3e:ab:4e:cf:cb:4e:0f:
a0:f2:b9:61:e5:db:05:4f:e9:b1:1e:03:86:4f:ca:
03:3e:48:78:b3:6f:9e:3f:e7:ae:76:0d:f2:dc:54:
35:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A9:14:18:11:33:6F:33:4A:ED:0B:62:E8:D8:0B:8D:78:98:B0:EC
X509v3 Authority Key Identifier:
keyid:A6:FE:5D:1C:93:12:7E:4A:AE:FF:10:0F:3A:5C:33:0F:2D:D1:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCTV/pv5dHJMSfkqu_xAPOlwzDy3Rq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pv5dHJMSfkqu_xAPOlwzDy3Rq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCTV/eakUGBEzbzNK7Qti6NgLjXiYsOw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.0.152.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:b4:57:ab:5b:ad:cb:36:e3:d7:47:a6:9e:01:2c:65:5b:39:
85:f7:90:bd:46:05:a9:f6:35:b9:40:00:73:30:77:74:f0:10:
ea:da:69:b4:ff:a5:09:03:e5:4a:e8:54:1f:0f:64:d5:1c:ed:
b3:78:dc:38:c5:01:74:ae:bd:45:89:83:2f:8c:2d:5a:4a:49:
31:27:82:c8:0d:3b:99:51:0c:28:41:fe:a0:45:61:f0:92:13:
dd:45:6f:4a:a7:8a:c0:6f:c2:fd:01:85:77:6a:e6:cf:1b:df:
7c:98:0c:53:0f:88:f6:bd:33:36:f3:2e:14:5f:c6:28:ba:f9:
f6:f8:8c:b6:98:4b:40:4f:91:71:45:bf:13:55:c8:13:d6:b6:
b7:8d:69:8f:91:46:02:46:02:39:e5:9f:e3:71:7d:7a:43:dd:
aa:a0:7a:4c:95:8f:53:b8:85:39:2e:23:4e:e2:7e:5f:e0:61:
bb:ec:4e:21:3a:87:33:a2:6f:b5:2f:e4:72:c9:fe:39:88:90:
c6:4b:5c:60:b9:8f:e5:b9:46:4c:6a:69:07:aa:63:1d:0f:07:
80:de:35:d3:dd:cb:dc:54:cd:ad:04:c6:28:58:0c:29:d1:2b:
6c:fd:bc:19:20:46:b6:06:fb:18:ae:ca:f3:3f:ea:08:05:f0:
67:f9:f0:95
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCx0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTZG
RTVEMUM5MzEyN0U0QUFFRkYxMDBGM0E1QzMzMEYyREQxQUJDMDAeFw0yMzA5MDEw
ODM0NThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc5QTkxNDE4MTEzMzZG
MzM0QUVEMEI2MkU4RDgwQjhENzg5OEIwRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfBevpGv+x9/yAchRI0oDumMuaBoiXVuUac8lXWfFSVQKmjt5q
JDWnWVqH6T+7vVb5WK3ockl8z3LQ1n/uqcCLCpLycXUJvUbalM63igWa8FIoOyTH
lJnkXSoZzSrKoGyavltdmYjol1rizTlu6ygrjWpw4lvoiYCO73imXQEznSs7GgXp
/+C7pYUb5451GONJrdEe2ALmUGFFmWs0V6PIr8bet/JapBjp27j0WbfFXGsdJtce
v1Vps1F/RDcGEI3CQ8+rcd9+t8RC3ofXvUrz0iMKCEzlNeQCPqtOz8tOD6DyuWHl
2wVP6bEeA4ZPygM+SHizb54/5652DfLcVDVhAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUeakUGBEzbzNK7Qti6NgLjXiYsOwwHwYDVR0jBBgwFoAUpv5dHJMSfkqu/xAP
OlwzDy3Rq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRENUVi9w
djVkSEpNU2ZrcXVfeEFQT2x3ekR5M1JxOEEuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L3B2NWRISk1TZmtxdV94QVBPbHd6RHkzUnE4QS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0RDVFYvZWFrVUdCRXpiek5LN1F0aTZOZ0xq
WGlZc093LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAhsAmDAN
BgkqhkiG9w0BAQsFAAOCAQEAL7RXq1utyzbj10emngEsZVs5hfeQvUYFqfY1uUAA
czB3dPAQ6tpptP+lCQPlSuhUHw9k1Rzts3jcOMUBdK69RYmDL4wtWkpJMSeCyA07
mVEMKEH+oEVh8JIT3UVvSqeKwG/C/QGFd2rmzxvffJgMUw+I9r0zNvMuFF/GKLr5
9viMtphLQE+RcUW/E1XIE9a2t41pj5FGAkYCOeWf43F9ekPdqqB6TJWPU7iFOS4j
TuJ+X+Bhu+xOITqHM6JvtS/kcsn+OYiQxktcYLmP5blGTGppB6pjHQ8HgN41093L
3FTNrQTGKFgMKdErbP28GSBGtgb7GK7K8z/qCAXwZ/nwlQ==
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org