Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EDTNS/ETaCD8POI9TBcTQx76SIU1qzpts.roa
File: ETaCD8POI9TBcTQx76SIU1qzpts.roa (raw, json)
Hash identifier: 0y/5K8pWKOsh7LTtKFOa5KyFmL+GjbceO/qknU5XctM=
Subject key identifier: 11:36:82:0F:C3:CE:23:D4:C1:71:34:31:EF:A4:88:53:5A:B3:A6:DB
Certificate issuer: /CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E
Certificate serial: 0B47
Authority key identifier: 94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/ETaCD8POI9TBcTQx76SIU1qzpts.roa
Signing time: Fri 01 Sep 2023 08:48:46 +0000
ROA not before: Fri 01 Sep 2023 08:48:46 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18411
IP address blocks: 61.56.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2887 (0xb47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E
Validity
Not Before: Sep 1 08:48:46 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1136820FC3CE23D4C1713431EFA488535AB3A6DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:45:59:3f:dd:e0:e3:c4:ad:83:6e:ec:47:79:
99:1d:99:56:cd:e5:c4:aa:17:b5:df:a2:82:52:41:
de:bd:76:b7:3e:1a:e3:cc:c1:9c:ec:5c:60:ed:74:
ab:53:a9:38:04:b6:62:2e:f6:03:90:a9:ce:8b:a0:
b5:65:7b:56:c2:9c:22:17:86:8d:61:22:d4:4b:9e:
0d:96:d3:b7:a6:52:00:11:4a:ff:9c:f2:d0:40:37:
c1:9f:1c:ee:e4:4e:cc:0c:e7:e0:43:97:07:e2:ee:
16:e0:c8:62:31:c5:a9:a4:ba:4a:78:5e:65:78:87:
b9:87:29:06:8f:46:0f:27:43:a8:12:e1:86:7b:1a:
cd:ff:6e:83:7a:46:ca:bc:b8:02:e8:9e:72:63:32:
70:0b:e0:04:e9:3b:c6:6c:13:8a:94:b9:fb:37:81:
11:8a:65:dc:2c:b0:83:fd:61:4b:f5:fc:4d:82:94:
b7:dc:69:b7:2f:41:50:66:c6:c1:9f:c4:5d:c7:65:
71:48:43:d4:03:60:d9:f5:d8:ae:7e:4c:59:0e:dc:
70:dc:d2:d3:30:b5:88:ad:bc:66:f4:58:f3:7d:1f:
b2:11:35:e4:59:e1:c7:3a:76:2d:31:78:04:86:7f:
1b:ab:af:d5:41:18:4e:02:a6:93:a2:18:da:06:3d:
66:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:36:82:0F:C3:CE:23:D4:C1:71:34:31:EF:A4:88:53:5A:B3:A6:DB
X509v3 Authority Key Identifier:
keyid:94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/ETaCD8POI9TBcTQx76SIU1qzpts.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.16.0/20
Signature Algorithm: sha256WithRSAEncryption
cf:ee:70:49:03:52:e9:ce:40:63:e1:16:b7:ca:60:51:b3:a7:
64:cd:24:bc:ef:ed:66:43:f8:7e:00:cf:04:f2:cb:50:03:ab:
e5:0d:60:67:a1:67:32:ca:af:39:2e:5a:94:41:00:a5:d6:77:
5c:35:57:9a:d0:f6:20:c4:2f:67:95:02:c1:b2:0f:68:61:1c:
de:47:2d:d3:40:4d:d4:a0:f8:cf:72:f1:76:47:90:80:74:1b:
28:02:d8:78:0d:d4:94:92:e8:99:46:06:20:52:54:4a:58:1d:
08:3c:d3:60:be:85:41:5c:da:8d:c6:61:eb:d4:fd:e5:0a:79:
c4:66:06:18:33:8c:40:67:de:95:04:ea:c4:f3:8d:65:13:64:
42:e4:01:de:46:ef:35:5f:02:cf:30:c1:21:ab:4e:d3:35:8a:
55:3e:dc:38:7c:ab:98:73:77:81:42:a4:d2:c3:5c:ba:a7:c1:
e1:2c:16:4d:39:65:83:f0:15:80:37:33:2f:22:90:ef:1e:d7:
dc:33:37:88:b3:3b:74:0e:ae:ff:62:93:cf:f9:74:18:ce:da:
4a:3a:11:48:71:38:bf:90:40:13:1d:77:91:f0:29:f7:9c:f9:
12:ad:94:ff:7e:5c:35:48:d8:5f:ab:99:ce:92:9c:42:ac:a3:
0c:71:52:cf
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICC0cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRD
NkRERkRENEJBQTUwNDAwRjNBMTE5QTU4MzNDRTAwMjFCREIyRTAeFw0yMzA5MDEw
ODQ4NDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDExMzY4MjBGQzNDRTIz
RDRDMTcxMzQzMUVGQTQ4ODUzNUFCM0E2REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdRVk/3eDjxK2DbuxHeZkdmVbN5cSqF7XfooJSQd69drc+GuPM
wZzsXGDtdKtTqTgEtmIu9gOQqc6LoLVle1bCnCIXho1hItRLng2W07emUgARSv+c
8tBAN8GfHO7kTswM5+BDlwfi7hbgyGIxxamkukp4XmV4h7mHKQaPRg8nQ6gS4YZ7
Gs3/boN6Rsq8uALonnJjMnAL4ATpO8ZsE4qUufs3gRGKZdwssIP9YUv1/E2ClLfc
abcvQVBmxsGfxF3HZXFIQ9QDYNn12K5+TFkO3HDc0tMwtYitvGb0WPN9H7IRNeRZ
4cc6di0xeASGfxurr9VBGE4CppOiGNoGPWYhAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUETaCD8POI9TBcTQx76SIU1qzptswHwYDVR0jBBgwFoAUlMbd/dS6pQQA86EZ
pYM84AIb2y4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRURUTlMv
bE1iZF9kUzZwUVFBODZFWnBZTTg0QUliMnk0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9sTWJkX2RTNnBRUUE4NkVacFlNODRBSWIyeTQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9FRFROUy9FVGFDRDhQT0k5VEJjVFF4NzZT
SVUxcXpwdHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEPTgQ
MA0GCSqGSIb3DQEBCwUAA4IBAQDP7nBJA1LpzkBj4Ra3ymBRs6dkzSS87+1mQ/h+
AM8E8stQA6vlDWBnoWcyyq85LlqUQQCl1ndcNVea0PYgxC9nlQLBsg9oYRzeRy3T
QE3UoPjPcvF2R5CAdBsoAth4DdSUkuiZRgYgUlRKWB0IPNNgvoVBXNqNxmHr1P3l
CnnEZgYYM4xAZ96VBOrE841lE2RC5AHeRu81XwLPMMEhq07TNYpVPtw4fKuYc3eB
QqTSw1y6p8HhLBZNOWWD8BWANzMvIpDvHtfcMzeIszt0Dq7/YpPP+XQYztpKOhFI
cTi/kEATHXeR8Cn3nPkSrZT/flw1SNhfq5nOkpxCrKMMcVLP
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org