Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ERAY/ICxtuu02eAnQt504WWF5v_Ei3yU.roa
File: ICxtuu02eAnQt504WWF5v_Ei3yU.roa (raw, json)
Hash identifier: 8EvYeufzCNykEGGqXzw/gnoDSxpLBq9L+amOiEA8dKk=
Subject key identifier: 20:2C:6D:BA:ED:36:78:09:D0:B7:9D:38:59:61:79:BF:F1:22:DF:25
Certificate issuer: /CN=CCDB3E6EFDA9ECC679D3986A279F2B944EF74E5F
Certificate serial: F0
Authority key identifier: CC:DB:3E:6E:FD:A9:EC:C6:79:D3:98:6A:27:9F:2B:94:4E:F7:4E:5F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zNs-bv2p7MZ505hqJ58rlE73Tl8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAY/ICxtuu02eAnQt504WWF5v_Ei3yU.roa
Signing time: Thu 08 Aug 2024 01:11:27 +0000
ROA not before: Thu 08 Aug 2024 01:11:27 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131149
IP address blocks: 103.255.206.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCDB3E6EFDA9ECC679D3986A279F2B944EF74E5F
Validity
Not Before: Aug 8 01:11:27 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=202C6DBAED367809D0B79D38596179BFF122DF25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:63:5b:40:4a:40:a0:7e:db:b6:c9:f7:dc:50:
42:65:90:09:4c:a8:3a:0e:05:b7:33:f0:89:9f:22:
5e:3e:97:1d:bd:3b:43:4c:cf:87:7c:59:67:9f:2e:
5e:26:83:73:3b:da:28:77:1c:07:bc:a4:13:49:94:
37:f0:bf:4c:66:4b:59:e5:f1:3e:5a:97:9d:8e:b3:
b8:83:0d:13:0b:df:7a:1c:3c:98:b9:67:5f:37:a1:
bc:9a:66:3c:88:15:46:c7:cb:1d:43:f1:16:c5:92:
65:4c:61:de:27:26:3c:8b:24:e3:6a:3f:32:0a:a1:
94:ef:63:dd:39:d0:8a:05:e9:40:23:7a:82:df:a1:
91:c1:b3:28:7a:a4:32:b5:b4:f7:a0:b1:67:41:4a:
b3:6c:b2:a0:21:87:27:f4:f4:65:c8:9e:bb:0d:b8:
2c:ab:53:05:44:e0:c6:41:d7:34:21:8f:fc:9f:b2:
37:f5:87:15:b9:9e:c2:ac:d5:eb:4e:72:7f:2c:c7:
98:70:07:48:e1:b2:64:1d:a9:a6:d7:fe:95:76:8a:
16:6d:96:f8:b5:fc:4c:a0:4b:77:db:bf:aa:2e:c8:
fa:f3:11:45:51:4b:44:b8:c0:a2:7a:fb:20:93:10:
59:58:e4:6b:7c:28:ee:ce:10:d4:1c:28:73:33:5a:
7c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2C:6D:BA:ED:36:78:09:D0:B7:9D:38:59:61:79:BF:F1:22:DF:25
X509v3 Authority Key Identifier:
keyid:CC:DB:3E:6E:FD:A9:EC:C6:79:D3:98:6A:27:9F:2B:94:4E:F7:4E:5F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAY/zNs-bv2p7MZ505hqJ58rlE73Tl8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zNs-bv2p7MZ505hqJ58rlE73Tl8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAY/ICxtuu02eAnQt504WWF5v_Ei3yU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.255.206.0/23
Signature Algorithm: sha256WithRSAEncryption
67:dc:63:fb:1b:32:9c:e1:46:78:26:74:8c:c9:9c:c3:b1:54:
83:ff:38:88:52:82:a6:45:43:38:b4:b8:53:ff:eb:23:fc:1a:
d1:a3:a2:46:84:8e:a5:07:ec:b6:d0:16:81:b3:1b:b9:34:75:
7a:be:20:84:9c:da:e5:79:67:d3:9d:60:4b:96:eb:96:8c:29:
69:f6:f9:07:cd:1e:41:42:da:db:85:57:95:95:fd:9d:79:6f:
6e:e5:2a:ae:df:7a:35:df:3d:a2:7f:73:5b:c9:bb:f2:f6:9c:
57:57:89:bf:30:1f:f7:23:dd:13:ee:32:58:50:1d:8d:9f:c2:
74:91:6b:44:d4:d1:96:f8:35:be:e9:86:08:e6:2d:c2:5b:8c:
db:f7:51:d1:8b:51:64:60:bf:9a:fc:6a:3d:25:4e:38:07:0f:
d1:2f:5c:62:a2:39:98:be:07:38:87:9d:32:bc:9f:cb:9c:04:
01:65:e9:1f:ec:0d:cc:f7:46:81:e7:62:67:1b:02:9b:9b:b1:
24:1c:cb:9d:72:87:b1:43:82:f6:70:55:2f:28:a5:6c:e8:2c:
f4:8d:05:2f:9d:7a:8c:ef:1e:72:5f:a0:f0:1a:79:e2:d4:a4:
ad:2b:5a:f6:7d:80:37:d2:c9:e5:24:93:b0:f7:4e:26:13:f7:
8a:92:d1:38
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NE
QjNFNkVGREE5RUNDNjc5RDM5ODZBMjc5RjJCOTQ0RUY3NEU1RjAeFw0yNDA4MDgw
MTExMjdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDIwMkM2REJBRUQzNjc4
MDlEMEI3OUQzODU5NjE3OUJGRjEyMkRGMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjY1tASkCgftu2yffcUEJlkAlMqDoOBbcz8ImfIl4+lx29O0NM
z4d8WWefLl4mg3M72ih3HAe8pBNJlDfwv0xmS1nl8T5al52Os7iDDRML33ocPJi5
Z183obyaZjyIFUbHyx1D8RbFkmVMYd4nJjyLJONqPzIKoZTvY9050IoF6UAjeoLf
oZHBsyh6pDK1tPegsWdBSrNssqAhhyf09GXInrsNuCyrUwVE4MZB1zQhj/yfsjf1
hxW5nsKs1etOcn8sx5hwB0jhsmQdqabX/pV2ihZtlvi1/EygS3fbv6ouyPrzEUVR
S0S4wKJ6+yCTEFlY5Gt8KO7OENQcKHMzWnw3AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUICxtuu02eAnQt504WWF5v/Ei3yUwHwYDVR0jBBgwFoAUzNs+bv2p7MZ505hq
J58rlE73Tl8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRVJBWS96
TnMtYnYycDdNWjUwNWhxSjU4cmxFNzNUbDguY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L3pOcy1idjJwN01aNTA1aHFKNThybEU3M1RsOC5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VSQVkvSUN4dHV1MDJlQW5RdDUwNFdXRjV2
X0VpM3lVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWf/zjAN
BgkqhkiG9w0BAQsFAAOCAQEAZ9xj+xsynOFGeCZ0jMmcw7FUg/84iFKCpkVDOLS4
U//rI/wa0aOiRoSOpQfsttAWgbMbuTR1er4ghJza5Xln051gS5brlowpafb5B80e
QULa24VXlZX9nXlvbuUqrt96Nd89on9zW8m78vacV1eJvzAf9yPdE+4yWFAdjZ/C
dJFrRNTRlvg1vumGCOYtwluM2/dR0YtRZGC/mvxqPSVOOAcP0S9cYqI5mL4HOIed
Mryfy5wEAWXpH+wNzPdGgediZxsCm5uxJBzLnXKHsUOC9nBVLyilbOgs9I0FL516
jO8ecl+g8Bp54tSkrSta9n2AN9LJ5SSTsPdOJhP3ipLROA==
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org