Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/BRvMZj3hLopF-ICNTkIgQGBjmDY.roa
File: BRvMZj3hLopF-ICNTkIgQGBjmDY.roa (raw, json)
Hash identifier: sdJJbhC4qludSvfpt50G20gh7MWlA2nTUNbGfP+I+4k=
Subject key identifier: 05:1B:CC:66:3D:E1:2E:8A:45:F8:80:8D:4E:42:20:40:60:63:98:36
Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Certificate serial: 0B94
Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/BRvMZj3hLopF-ICNTkIgQGBjmDY.roa
Signing time: Fri 01 Sep 2023 08:35:41 +0000
ROA not before: Fri 01 Sep 2023 08:35:41 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18046
IP address blocks: 61.65.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2964 (0xb94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Validity
Not Before: Sep 1 08:35:41 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=051BCC663DE12E8A45F8808D4E42204060639836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:c3:c4:25:ff:f7:1c:ba:48:73:aa:a4:7b:
2b:36:df:07:42:b0:5d:d7:b4:e1:9c:d3:45:ea:a1:
1b:48:15:cf:41:1e:50:1e:f2:b4:ec:ea:e4:fa:1d:
4c:ba:da:2a:db:c9:2e:14:73:56:cc:38:03:93:61:
1b:c0:a1:ac:a3:e1:1f:40:95:17:0a:66:eb:05:26:
59:79:89:83:10:e9:2a:9b:a5:d4:7d:c4:f8:fb:60:
d8:2b:73:48:10:4d:d7:65:81:7d:2b:b1:fb:fb:02:
2d:ac:b2:98:99:3e:cd:28:1b:c9:ad:f2:7e:23:34:
4f:26:f5:2f:a3:8b:f5:71:65:f2:28:03:e3:2b:9b:
28:1e:a2:00:6b:78:ab:25:2e:20:1a:68:24:43:c0:
a1:e3:a0:21:07:8c:e1:7a:6e:04:41:4e:12:30:90:
1d:52:7a:cc:a4:49:52:6d:01:75:8a:08:9e:e5:13:
99:3c:b1:c9:79:4d:2f:f4:00:1e:74:92:5e:7c:8f:
90:67:5d:9e:e8:4f:4b:8d:33:26:67:cd:09:97:17:
2d:89:7e:c3:1c:43:66:42:cd:95:a4:c0:87:3a:98:
02:2d:aa:92:52:64:aa:7d:ab:40:ea:98:b9:86:7a:
c0:0e:b7:bc:83:4d:54:4b:f3:4e:80:bf:ff:45:cb:
ed:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1B:CC:66:3D:E1:2E:8A:45:F8:80:8D:4E:42:20:40:60:63:98:36
X509v3 Authority Key Identifier:
keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/BRvMZj3hLopF-ICNTkIgQGBjmDY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.65.224.0/19
Signature Algorithm: sha256WithRSAEncryption
11:82:29:7b:ad:b7:0f:04:91:fa:82:32:42:b6:93:9c:11:14:
d3:54:c8:ce:08:68:c0:53:c4:50:ce:21:73:f6:75:73:f6:a3:
dc:4d:67:0b:2b:f8:0e:c6:99:a7:82:00:4d:ef:51:05:2b:10:
11:e3:75:77:8d:7d:6a:9f:28:36:29:d3:8e:52:2a:1b:0a:d2:
21:89:7c:25:7c:0a:ec:dc:ff:d7:aa:b9:fc:c3:0d:8c:70:d0:
27:7e:40:8c:60:bd:1e:21:96:1d:25:dd:a0:04:18:46:49:18:
54:e3:a4:d4:27:fa:68:e7:24:89:ee:4a:bc:7c:d5:01:85:07:
71:f6:eb:f0:27:d7:6c:eb:1d:82:76:c4:b4:a6:3d:5d:c4:1f:
f3:8b:fc:6d:be:a1:0e:06:66:46:ba:ed:80:87:99:a6:92:0d:
1d:2c:c7:9d:80:20:68:46:68:82:2a:63:13:cc:18:1b:50:95:
55:ea:b8:3e:a7:25:8c:df:e4:08:30:ca:98:6f:8d:53:8b:fd:
a8:e6:97:5a:ad:ac:15:04:fc:9a:5a:26:47:b8:30:84:59:ec:
b5:bf:1e:9c:f7:78:e0:da:55:35:74:af:7c:19:a6:96:41:06:
80:84:7d:ba:bf:de:ab:16:04:62:1e:a8:5c:d2:1a:47:68:6a:
91:4c:e4:eb
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICC5QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEM3
ODk2MTY0MkEwNEJFMTMyNzA4REIxOTNEN0JBOTE2QjJCNjdDQjAeFw0yMzA5MDEw
ODM1NDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA1MUJDQzY2M0RFMTJF
OEE0NUY4ODA4RDRFNDIyMDQwNjA2Mzk4MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwTMPEJf/3HLpIc6qkeys23wdCsF3XtOGc00XqoRtIFc9BHlAe
8rTs6uT6HUy62irbyS4Uc1bMOAOTYRvAoayj4R9AlRcKZusFJll5iYMQ6SqbpdR9
xPj7YNgrc0gQTddlgX0rsfv7Ai2sspiZPs0oG8mt8n4jNE8m9S+ji/VxZfIoA+Mr
mygeogBreKslLiAaaCRDwKHjoCEHjOF6bgRBThIwkB1SesykSVJtAXWKCJ7lE5k8
scl5TS/0AB50kl58j5BnXZ7oT0uNMyZnzQmXFy2JfsMcQ2ZCzZWkwIc6mAItqpJS
ZKp9q0DqmLmGesAOt7yDTVRL806Av/9Fy+0NAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUBRvMZj3hLopF+ICNTkIgQGBjmDYwHwYDVR0jBBgwFoAUDHiWFkKgS+EycI2x
k9e6kWsrZ8swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRE9OR0ZP
TkcvREhpV0ZrS2dTLUV5Y0kyeGs5ZTZrV3NyWjhzLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9ESGlXRmtLZ1MtRXljSTJ4azllNmtXc3JaOHMuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ET05HRk9ORy9CUnZNWmozaExvcEYt
SUNOVGtJZ1FHQmptRFkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQFPUHgMA0GCSqGSIb3DQEBCwUAA4IBAQARgil7rbcPBJH6gjJCtpOcERTTVMjO
CGjAU8RQziFz9nVz9qPcTWcLK/gOxpmnggBN71EFKxAR43V3jX1qnyg2KdOOUiob
CtIhiXwlfArs3P/Xqrn8ww2McNAnfkCMYL0eIZYdJd2gBBhGSRhU46TUJ/po5ySJ
7kq8fNUBhQdx9uvwJ9ds6x2CdsS0pj1dxB/zi/xtvqEOBmZGuu2Ah5mmkg0dLMed
gCBoRmiCKmMTzBgbUJVV6rg+pyWM3+QIMMqYb41Ti/2o5pdarawVBPyaWiZHuDCE
Wey1vx6c93jg2lU1dK98GaaWQQaAhH26v96rFgRiHqhc0hpHaGqRTOTr
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org