Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/NCBoTrcug2WSzlzS2EQDqu_CGvQ.roa
File: NCBoTrcug2WSzlzS2EQDqu_CGvQ.roa (raw, json)
Hash identifier: XzHRIgIT5OqZgkUXkPPqqS5pAF4e8nHDpsdTbFUhKkg=
Subject key identifier: 34:20:68:4E:B7:2E:83:65:92:CE:5C:D2:D8:44:03:AA:EF:C2:1A:F4
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0BBA
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/NCBoTrcug2WSzlzS2EQDqu_CGvQ.roa
Signing time: Fri 01 Sep 2023 08:36:39 +0000
ROA not before: Fri 01 Sep 2023 08:36:39 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9244
IP address blocks: 113.21.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3002 (0xbba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Sep 1 08:36:39 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3420684EB72E836592CE5CD2D84403AAEFC21AF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:02:d6:f4:80:98:0b:f9:08:20:28:18:d5:34:
97:a3:d6:ab:da:0c:a7:3d:2c:78:14:c0:ae:cd:89:
6e:1b:01:b3:3e:90:57:d9:d7:10:11:6e:7b:f3:d6:
33:91:4d:a6:60:00:59:57:35:72:81:dd:77:2d:53:
f7:f8:a4:97:5b:7c:15:bf:b1:04:6d:cf:d2:80:96:
ab:27:6f:a6:64:37:37:b8:cc:fb:50:5f:38:4a:90:
b9:8b:04:c4:71:ad:ca:38:5b:fc:d3:ff:88:fb:99:
63:79:6b:5e:ac:be:8e:56:37:b1:6b:ea:37:93:d3:
86:73:d8:48:a7:72:47:08:3c:39:7e:5e:2b:2b:60:
38:53:c3:8a:b6:7d:8c:fd:45:23:3b:ec:24:97:b5:
37:ee:02:3c:8c:ce:9d:48:59:28:67:ba:36:9d:0b:
a3:97:ce:d5:d2:74:f5:6c:ad:2e:16:53:67:bb:3b:
ff:e8:dd:ca:db:88:92:47:a9:9d:73:a7:b6:32:11:
34:9e:96:e8:42:09:af:51:0e:4b:ff:e1:90:37:56:
2e:c5:2c:b0:49:cd:fd:63:f7:aa:1b:1e:05:84:54:
f9:20:5f:70:8d:94:63:0e:29:da:45:9f:eb:93:db:
68:8a:5e:29:ff:f4:ec:8c:d4:f5:0a:0e:57:91:58:
7b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:20:68:4E:B7:2E:83:65:92:CE:5C:D2:D8:44:03:AA:EF:C2:1A:F4
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/NCBoTrcug2WSzlzS2EQDqu_CGvQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.175.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:ff:e4:84:e5:89:73:d7:58:5b:0d:98:1a:68:b0:d0:e4:3c:
f7:a5:ea:3a:04:d8:20:fd:37:06:0b:05:e0:a9:ca:dc:8c:e6:
9b:9d:83:92:38:bf:68:e9:e7:d7:4e:81:46:89:b0:0e:c1:06:
aa:17:93:d7:1a:ac:86:15:bb:08:ca:59:c7:86:a0:ab:fa:7a:
3e:7e:d3:12:eb:fd:cf:52:72:ff:ed:60:a8:9e:6e:9d:40:29:
9e:64:92:2d:32:f5:a9:2d:c9:0a:06:83:5e:37:3f:db:3d:54:
6d:93:f7:0c:fe:25:ff:13:7a:52:af:5b:0f:0c:eb:dc:95:e7:
da:06:31:96:d3:6a:dc:f4:e0:81:7a:22:98:c0:a5:04:3d:22:
ae:b2:8e:04:0f:2f:34:bb:49:f4:ae:78:68:40:0a:46:2c:e5:
e7:26:b8:08:5e:4b:b9:93:6c:e1:6f:6b:e8:21:7e:97:c1:77:
ac:fa:c3:31:b6:a8:9b:a8:6f:1c:ff:66:2f:95:c7:fc:92:5b:
dd:aa:ac:79:f3:3f:b8:2d:7e:c3:82:db:4a:47:27:d9:f7:c7:
57:12:d5:57:59:0d:3b:c0:29:24:f0:4b:d8:c0:3a:ca:35:76:
1c:d0:80:a9:d0:3e:77:b2:42:01:87:ee:14:87:6e:5b:c1:3f:
74:ca:cd:03
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC7owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC
M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yMzA5MDEw
ODM2MzlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM0MjA2ODRFQjcyRTgz
NjU5MkNFNUNEMkQ4NDQwM0FBRUZDMjFBRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5Atb0gJgL+QggKBjVNJej1qvaDKc9LHgUwK7NiW4bAbM+kFfZ
1xARbnvz1jORTaZgAFlXNXKB3XctU/f4pJdbfBW/sQRtz9KAlqsnb6ZkNze4zPtQ
XzhKkLmLBMRxrco4W/zT/4j7mWN5a16svo5WN7Fr6jeT04Zz2EinckcIPDl+Xisr
YDhTw4q2fYz9RSM77CSXtTfuAjyMzp1IWShnujadC6OXztXSdPVsrS4WU2e7O//o
3crbiJJHqZ1zp7YyETSeluhCCa9RDkv/4ZA3Vi7FLLBJzf1j96obHgWEVPkgX3CN
lGMOKdpFn+uT22iKXin/9OyM1PUKDleRWHuHAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUNCBoTrcug2WSzlzS2EQDqu/CGvQwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT
KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU
L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL05DQm9UcmN1ZzJXU3pselMy
RVFEcXVfQ0d2US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABx
Fa8wDQYJKoZIhvcNAQELBQADggEBAIv/5ITliXPXWFsNmBposNDkPPel6joE2CD9
NwYLBeCpytyM5pudg5I4v2jp59dOgUaJsA7BBqoXk9carIYVuwjKWceGoKv6ej5+
0xLr/c9Scv/tYKiebp1AKZ5kki0y9aktyQoGg143P9s9VG2T9wz+Jf8TelKvWw8M
69yV59oGMZbTatz04IF6IpjApQQ9Iq6yjgQPLzS7SfSueGhACkYs5ecmuAheS7mT
bOFva+ghfpfBd6z6wzG2qJuobxz/Zi+Vx/ySW92qrHnzP7gtfsOC20pHJ9n3x1cS
1VdZDTvAKSTwS9jAOso1dhzQgKnQPneyQgGH7hSHblvBP3TKzQM=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org