Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/-dk9TTnimQLJ844d8Di5SPkea9Q.roa
File: -dk9TTnimQLJ844d8Di5SPkea9Q.roa (raw, json)
Hash identifier: 1wec2kJjWPM8pOiHp57sUcqUFrY6HfJYq1a6utaBZjc=
Subject key identifier: F9:D9:3D:4D:39:E2:99:02:C9:F3:8E:1D:F0:38:B9:48:F9:1E:6B:D4
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0BCB
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/-dk9TTnimQLJ844d8Di5SPkea9Q.roa
Signing time: Fri 01 Sep 2023 08:36:46 +0000
ROA not before: Fri 01 Sep 2023 08:36:46 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9244
IP address blocks: 61.247.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3019 (0xbcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Sep 1 08:36:46 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F9D93D4D39E29902C9F38E1DF038B948F91E6BD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cb:ee:aa:f1:60:1d:62:05:d6:1f:e9:58:19:
c2:e2:3f:6a:4f:5c:5c:2d:36:64:be:6e:b5:45:f7:
d0:08:08:93:70:67:6d:0e:0f:67:9f:3b:48:80:6c:
47:3e:20:cb:2c:c4:fa:ec:27:f1:c4:7b:51:0a:f1:
eb:5d:99:a9:16:97:b4:b2:aa:96:fd:45:1c:a6:7e:
e9:af:e4:e5:b8:3e:b5:a3:6b:13:20:34:57:1e:a2:
2a:7b:11:f5:0c:ca:18:dd:ae:f3:7b:44:7d:13:8e:
e6:9a:b7:51:33:5c:81:9d:ca:7a:27:8e:6f:77:fd:
34:c9:8e:2d:99:d8:5f:ed:95:de:00:a4:d8:b0:e1:
c3:59:f9:f8:3a:aa:77:3a:d6:56:74:69:76:7e:07:
d0:8c:a4:e3:cf:dd:4e:f3:57:c9:1d:53:1e:8f:19:
7e:cd:dc:bd:3e:b8:ea:2b:cf:d6:8a:e3:fd:a4:e4:
8e:4f:e5:84:5d:71:1a:d2:4a:5d:eb:09:99:e9:bc:
af:8c:c8:e6:21:cd:ac:98:1c:72:b5:b1:7c:55:c2:
e8:9c:a2:a6:d6:b8:49:05:37:ee:cf:d6:1f:a8:57:
a8:14:d3:6c:ff:96:53:50:52:1a:ee:d9:94:8f:4f:
60:66:c4:30:cd:f5:f7:3a:53:25:0b:64:c4:d3:96:
04:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D9:3D:4D:39:E2:99:02:C9:F3:8E:1D:F0:38:B9:48:F9:1E:6B:D4
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/-dk9TTnimQLJ844d8Di5SPkea9Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.247.160.0/20
Signature Algorithm: sha256WithRSAEncryption
4b:f8:37:09:5d:f3:1d:3c:bc:37:45:0f:ca:ab:88:22:12:63:
73:56:ad:46:68:8e:95:84:e8:19:7b:75:7e:fa:5c:01:25:01:
fc:5a:39:d0:89:9d:da:4d:94:f7:3e:63:fa:aa:3c:9b:20:67:
13:b1:31:79:6f:11:b7:89:1c:08:44:f3:03:8c:70:5d:4c:af:
99:ef:23:40:7b:56:27:f0:48:32:6e:ff:ae:41:a2:e0:46:84:
c2:a5:7f:7f:54:25:ad:3a:96:e4:07:a6:74:11:fb:ee:3d:8a:
80:b0:06:54:4a:23:1a:a5:c3:09:6f:de:8e:72:3f:20:9c:a8:
ca:95:18:89:fe:9c:71:ec:f1:a7:e5:c1:16:31:c6:d9:e0:db:
9d:cd:25:e9:a9:85:3b:32:68:a6:f4:27:11:23:69:8c:a0:82:
f5:a2:95:ee:dc:a0:66:50:08:46:03:b8:85:3e:09:4a:13:8b:
91:d6:63:02:ed:bc:86:c6:87:91:e5:a8:de:63:7f:07:32:06:
46:48:96:30:4f:c3:f6:ed:41:2d:71:dc:3a:34:bb:75:f1:8e:
78:8d:3f:ec:a4:a4:78:1b:22:48:cf:1f:85:70:f5:a2:22:42:
46:a5:f8:b3:5f:68:f1:15:d5:44:e7:49:2a:2f:6e:82:d6:ed:
92:cf:fe:a8
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC8swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC
M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yMzA5MDEw
ODM2NDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEY5RDkzRDREMzlFMjk5
MDJDOUYzOEUxREYwMzhCOTQ4RjkxRTZCRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBy+6q8WAdYgXWH+lYGcLiP2pPXFwtNmS+brVF99AICJNwZ20O
D2efO0iAbEc+IMssxPrsJ/HEe1EK8etdmakWl7Syqpb9RRymfumv5OW4PrWjaxMg
NFceoip7EfUMyhjdrvN7RH0Tjuaat1EzXIGdynonjm93/TTJji2Z2F/tld4ApNiw
4cNZ+fg6qnc61lZ0aXZ+B9CMpOPP3U7zV8kdUx6PGX7N3L0+uOorz9aK4/2k5I5P
5YRdcRrSSl3rCZnpvK+MyOYhzayYHHK1sXxVwuicoqbWuEkFN+7P1h+oV6gU02z/
llNQUhru2ZSPT2BmxDDN9fc6UyULZMTTlgRnAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU+dk9TTnimQLJ844d8Di5SPkea9QwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT
KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU
L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVULy1kazlUVG5pbVFMSjg0NGQ4
RGk1U1BrZWE5US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9
96AwDQYJKoZIhvcNAQELBQADggEBAEv4Nwld8x08vDdFD8qriCISY3NWrUZojpWE
6Bl7dX76XAElAfxaOdCJndpNlPc+Y/qqPJsgZxOxMXlvEbeJHAhE8wOMcF1Mr5nv
I0B7VifwSDJu/65BouBGhMKlf39UJa06luQHpnQR++49ioCwBlRKIxqlwwlv3o5y
PyCcqMqVGIn+nHHs8aflwRYxxtng253NJemphTsyaKb0JxEjaYyggvWile7coGZQ
CEYDuIU+CUoTi5HWYwLtvIbGh5HlqN5jfwcyBkZIljBPw/btQS1x3Do0u3XxjniN
P+ykpHgbIkjPH4Vw9aIiQkal+LNfaPEV1UTnSSovboLW7ZLP/qg=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org