Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/uelP3iI6Il6Xoa_7Oej3zjdFyig.roa
File: uelP3iI6Il6Xoa_7Oej3zjdFyig.roa (raw, json)
Hash identifier: p4NEiuacKUXR6iugkqPKIbDCsUWGFWee/EeoJgWk/ew=
Subject key identifier: B9:E9:4F:DE:22:3A:22:5E:97:A1:AF:FB:39:E8:F7:CE:37:45:CA:28
Certificate issuer: /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Certificate serial: 0E06
Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/uelP3iI6Il6Xoa_7Oej3zjdFyig.roa
Signing time: Fri 01 Sep 2023 08:36:23 +0000
ROA not before: Fri 01 Sep 2023 08:36:23 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24168
IP address blocks: 103.136.60.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3590 (0xe06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Validity
Not Before: Sep 1 08:36:23 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B9E94FDE223A225E97A1AFFB39E8F7CE3745CA28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:44:f9:26:ce:86:5f:24:3b:10:ab:00:fd:35:
0c:fd:7a:e5:63:09:f1:ac:40:f9:e3:59:96:67:ba:
3e:ac:fa:80:c2:0e:79:6b:06:04:0c:23:79:67:d7:
9b:bf:e8:63:1f:15:c6:51:c1:64:cc:07:7a:23:8c:
12:44:a2:d4:8a:2a:49:28:99:67:5a:10:bd:51:a4:
2a:33:5d:5f:eb:a1:90:b1:08:91:cf:80:19:24:b8:
b3:22:a1:39:3b:64:01:2e:49:0a:43:cd:9e:e8:3a:
b8:23:e7:5e:e2:33:9c:be:c4:be:de:24:90:e5:ba:
6f:9c:0c:fd:7f:a2:a0:eb:51:f4:d9:d2:bc:3f:da:
52:12:5f:91:d5:93:59:77:a9:85:a6:2d:72:4b:39:
3c:05:87:b6:74:82:58:3f:58:25:71:87:f3:01:f5:
27:55:19:e4:1b:80:35:3b:28:e5:a0:45:e8:23:41:
89:99:61:fb:9a:07:37:a1:3c:71:59:a0:9e:ff:bb:
50:51:da:5d:5e:e3:ba:9a:4c:3a:7e:d8:d7:9c:84:
f3:90:2c:3d:3b:ef:2a:49:67:8b:ba:1b:2b:ac:ef:
9e:16:36:8b:7b:4f:73:22:27:ce:a5:0e:1c:ed:d9:
3d:00:ad:15:ba:9e:37:46:61:5a:d7:aa:19:24:dd:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E9:4F:DE:22:3A:22:5E:97:A1:AF:FB:39:E8:F7:CE:37:45:CA:28
X509v3 Authority Key Identifier:
keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/uelP3iI6Il6Xoa_7Oej3zjdFyig.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.60.0/23
Signature Algorithm: sha256WithRSAEncryption
04:33:8c:fa:44:29:06:b4:ba:72:8f:ca:3f:e6:37:b8:a4:c1:
ec:fd:c5:4e:3c:22:35:71:42:d5:09:9f:d6:92:ce:19:74:95:
67:ac:6d:ee:79:30:2b:39:c5:da:c0:f8:2b:90:e8:05:11:93:
1b:48:49:58:9d:31:1d:69:85:da:40:a8:ad:15:92:7d:0c:a9:
d3:f9:42:91:ed:59:99:d4:be:36:44:86:17:7b:86:e2:91:0b:
fc:ea:6b:1a:df:f3:16:ad:8a:6c:c0:87:94:5b:ba:9f:31:55:
96:80:70:2b:69:ea:77:73:22:e5:00:d1:2e:0d:29:58:1a:8c:
23:8e:22:0d:ef:27:09:86:8b:fc:aa:3d:20:7d:81:33:f1:a9:
43:aa:b1:b2:cf:da:03:f2:59:9c:a3:ee:9f:a7:af:c2:8e:62:
e5:e6:d9:71:06:9a:29:1c:a0:31:40:b4:4a:60:4c:1a:7f:2c:
21:0f:b5:5a:0d:28:d6:87:4d:c7:2a:00:0f:59:f5:b1:b8:5a:
aa:29:6b:9b:45:4d:54:eb:a1:e9:e4:c2:2e:f8:5b:89:5f:18:
32:7f:0d:71:d9:d6:cf:e9:09:58:bf:0a:0c:6a:e3:a9:40:cf:
69:22:2b:c0:c9:e0:89:29:e1:11:8e:2e:25:6d:0e:4d:af:f2:
43:48:86:42
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDgYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDRG
MEREMEY0RkI4MDEwMjVENTg2RUY5OTlDNUVFRTAyRDdDMjA1OTAeFw0yMzA5MDEw
ODM2MjNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI5RTk0RkRFMjIzQTIy
NUU5N0ExQUZGQjM5RThGN0NFMzc0NUNBMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTRPkmzoZfJDsQqwD9NQz9euVjCfGsQPnjWZZnuj6s+oDCDnlr
BgQMI3ln15u/6GMfFcZRwWTMB3ojjBJEotSKKkkomWdaEL1RpCozXV/roZCxCJHP
gBkkuLMioTk7ZAEuSQpDzZ7oOrgj517iM5y+xL7eJJDlum+cDP1/oqDrUfTZ0rw/
2lISX5HVk1l3qYWmLXJLOTwFh7Z0glg/WCVxh/MB9SdVGeQbgDU7KOWgRegjQYmZ
YfuaBzehPHFZoJ7/u1BR2l1e47qaTDp+2NechPOQLD077ypJZ4u6Gyus754WNot7
T3MiJ86lDhzt2T0ArRW6njdGYVrXqhkk3SorAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUuelP3iI6Il6Xoa/7Oej3zjdFyigwHwYDVR0jBBgwFoAU1PDdD0+4AQJdWG75
mcXu4C18IFkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdULzFQ
RGREMC00QVFKZFdHNzVtY1h1NEMxOElGay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
MVBEZEQwLTRBUUpkV0c3NW1jWHU0QzE4SUZrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRFdUL3VlbFAzaUk2SWw2WG9hXzdPZWozempk
RnlpZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFniDwwDQYJ
KoZIhvcNAQELBQADggEBAAQzjPpEKQa0unKPyj/mN7ikwez9xU48IjVxQtUJn9aS
zhl0lWesbe55MCs5xdrA+CuQ6AURkxtISVidMR1phdpAqK0Vkn0MqdP5QpHtWZnU
vjZEhhd7huKRC/zqaxrf8xatimzAh5Rbup8xVZaAcCtp6ndzIuUA0S4NKVgajCOO
Ig3vJwmGi/yqPSB9gTPxqUOqsbLP2gPyWZyj7p+nr8KOYuXm2XEGmikcoDFAtEpg
TBp/LCEPtVoNKNaHTccqAA9Z9bG4Wqopa5tFTVTroenkwi74W4lfGDJ/DXHZ1s/p
CVi/Cgxq46lAz2kiK8DJ4Ikp4RGOLiVtDk2v8kNIhkI=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org