Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/0FAyT2Cg-Chmp0XRcoku76-GPxA.roa
File: 0FAyT2Cg-Chmp0XRcoku76-GPxA.roa (raw, json)
Hash identifier: cVRUpgP2J0jd6OAvkDcdCrpir8eqEhINDD5Xjbxyddg=
Subject key identifier: D0:50:32:4F:60:A0:F8:28:66:A7:45:D1:72:89:2E:EF:AF:86:3F:10
Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Certificate serial: 0B8E
Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/0FAyT2Cg-Chmp0XRcoku76-GPxA.roa
Signing time: Fri 01 Sep 2023 08:35:39 +0000
ROA not before: Fri 01 Sep 2023 08:35:39 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 198949
IP address blocks: 61.65.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2958 (0xb8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Validity
Not Before: Sep 1 08:35:39 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D050324F60A0F82866A745D172892EEFAF863F10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:58:1a:3e:e4:ff:f8:5f:fd:55:92:36:fd:30:
f5:c0:99:10:37:9c:84:3d:8b:51:7c:26:e1:90:63:
22:44:d7:e7:43:77:fe:2e:4e:a8:06:3c:6b:cb:5f:
e5:da:30:13:63:40:54:38:8f:75:dc:ad:02:44:17:
b4:9a:d4:9a:4d:99:63:eb:68:18:5a:ea:ac:b9:31:
68:f5:83:b2:eb:d1:9b:0e:0b:02:02:3a:68:51:f1:
15:9b:d6:93:fb:50:12:ca:7a:e6:57:bd:3f:b7:47:
19:6d:25:de:f8:d7:cd:9f:f6:4c:6f:dd:5e:a9:91:
c3:69:cd:28:dd:8d:4b:2e:b9:39:df:ea:36:55:e6:
5b:e9:5a:b1:f3:9b:eb:6d:bf:d6:32:7a:0e:a5:88:
e7:d5:62:a3:eb:f6:f4:21:cd:f3:c6:e9:30:fc:1e:
df:b3:d5:65:c5:23:cd:da:ca:2d:3c:c1:3f:31:58:
1d:a2:42:42:e9:ba:87:a4:f7:79:1b:aa:06:72:bc:
e6:bc:a8:83:8b:d8:4f:35:62:3c:54:e2:6a:d2:7a:
7a:5d:20:62:27:c3:0e:e7:8c:40:f3:bf:e1:7c:4e:
06:d2:3e:c1:f4:46:4e:03:08:38:ba:38:ec:8e:78:
13:69:e0:f7:9e:b2:7d:33:11:c4:49:27:20:bd:7c:
42:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:50:32:4F:60:A0:F8:28:66:A7:45:D1:72:89:2E:EF:AF:86:3F:10
X509v3 Authority Key Identifier:
keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/0FAyT2Cg-Chmp0XRcoku76-GPxA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.65.238.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a9:8a:68:29:7d:3a:e4:4f:41:67:89:24:5c:ee:c1:42:d0:
33:11:17:0c:8b:6a:bb:39:54:cc:02:ce:a0:02:e9:33:76:a7:
f5:f9:c4:fb:06:c7:4f:39:e4:31:d4:11:1c:b3:f3:6e:13:4c:
36:66:34:86:22:f7:26:d7:c3:12:60:1c:0c:f5:f2:46:8d:b7:
b6:a7:39:be:f3:35:48:59:d5:45:95:f6:41:0e:ba:02:2c:ef:
31:15:99:5d:ce:55:9c:eb:61:86:92:32:02:36:69:4e:00:65:
e5:05:1c:94:32:b3:44:0f:54:b8:29:dc:57:5b:f3:f7:1e:59:
58:85:10:b7:b8:20:b3:10:62:0d:1c:68:31:7a:6c:76:c5:96:
c6:e3:b6:ab:b2:5b:ee:40:7a:e7:4f:83:43:5e:c2:eb:9c:90:
02:cf:30:db:36:4b:eb:01:cd:a2:4c:a0:08:7c:41:1b:ec:92:
0e:12:5e:d3:59:17:5a:dc:40:eb:4f:0e:f7:69:70:a1:ca:b5:
38:d3:e0:be:10:73:fd:9f:c4:3d:3a:e1:9f:0e:26:d3:98:af:
1a:2c:00:39:4e:9d:b4:7d:f9:7a:f9:a2:75:67:cd:88:00:1d:
57:1d:62:2a:d8:ab:98:74:cb:f4:ea:ae:81:9d:22:30:a6:8b:
08:94:0e:d0
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICC44wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEM3
ODk2MTY0MkEwNEJFMTMyNzA4REIxOTNEN0JBOTE2QjJCNjdDQjAeFw0yMzA5MDEw
ODM1MzlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQwNTAzMjRGNjBBMEY4
Mjg2NkE3NDVEMTcyODkyRUVGQUY4NjNGMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLWBo+5P/4X/1Vkjb9MPXAmRA3nIQ9i1F8JuGQYyJE1+dDd/4u
TqgGPGvLX+XaMBNjQFQ4j3XcrQJEF7Sa1JpNmWPraBha6qy5MWj1g7Lr0ZsOCwIC
OmhR8RWb1pP7UBLKeuZXvT+3RxltJd74182f9kxv3V6pkcNpzSjdjUsuuTnf6jZV
5lvpWrHzm+ttv9Yyeg6liOfVYqPr9vQhzfPG6TD8Ht+z1WXFI83ayi08wT8xWB2i
QkLpuoek93kbqgZyvOa8qIOL2E81YjxU4mrSenpdIGInww7njEDzv+F8TgbSPsH0
Rk4DCDi6OOyOeBNp4Peesn0zEcRJJyC9fEKpAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQU0FAyT2Cg+Chmp0XRcoku76+GPxAwHwYDVR0jBBgwFoAUDHiWFkKgS+EycI2x
k9e6kWsrZ8swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRE9OR0ZP
TkcvREhpV0ZrS2dTLUV5Y0kyeGs5ZTZrV3NyWjhzLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9ESGlXRmtLZ1MtRXljSTJ4azllNmtXc3JaOHMuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ET05HRk9ORy8wRkF5VDJDZy1DaG1w
MFhSY29rdTc2LUdQeEEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAPUHuMA0GCSqGSIb3DQEBCwUAA4IBAQCOqYpoKX065E9BZ4kkXO7BQtAzERcM
i2q7OVTMAs6gAukzdqf1+cT7BsdPOeQx1BEcs/NuE0w2ZjSGIvcm18MSYBwM9fJG
jbe2pzm+8zVIWdVFlfZBDroCLO8xFZldzlWc62GGkjICNmlOAGXlBRyUMrNED1S4
KdxXW/P3HllYhRC3uCCzEGINHGgxemx2xZbG47arslvuQHrnT4NDXsLrnJACzzDb
NkvrAc2iTKAIfEEb7JIOEl7TWRda3EDrTw73aXChyrU40+C+EHP9n8Q9OuGfDibT
mK8aLAA5Tp20ffl6+aJ1Z82IAB1XHWIq2KuYdMv06q6BnSIwposIlA7Q
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org