Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/3pRvj3GebysOIHVYFGmH8flyiIA.roa
File: 3pRvj3GebysOIHVYFGmH8flyiIA.roa (raw, json)
Hash identifier: 9IqL1nKCqPA7Z/Lwqyvh32eNASz+4u+beYJfEB7toQ0=
Subject key identifier: DE:94:6F:8F:71:9E:6F:2B:0E:20:75:58:14:69:87:F1:F9:72:88:80
Certificate issuer: /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Certificate serial: 08BE
Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/3pRvj3GebysOIHVYFGmH8flyiIA.roa
Signing time: Fri 01 Sep 2023 08:50:37 +0000
ROA not before: Fri 01 Sep 2023 08:50:37 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131671
IP address blocks: 2405:a0c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2238 (0x8be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Validity
Not Before: Sep 1 08:50:37 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DE946F8F719E6F2B0E207558146987F1F9728880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:12:5b:24:e3:cf:7b:f2:f1:3f:39:14:03:fb:
b4:97:24:38:2b:c2:02:89:a4:d1:e3:20:78:03:e4:
45:66:b7:86:d1:d2:06:e0:72:f4:34:97:31:51:85:
a6:d2:e9:71:89:40:bc:db:b5:f8:88:96:71:c2:d9:
ae:2c:84:4c:d6:12:2e:61:98:85:73:9f:6c:78:ef:
1c:53:a3:1f:cb:d3:85:5f:02:f9:bb:5e:89:e2:02:
6e:67:9b:ef:54:d2:d2:26:46:1c:f3:80:b1:d4:a1:
7b:ee:54:e8:de:b7:69:bc:7b:e7:92:a7:e0:e9:5e:
df:83:d7:5e:cc:6b:c3:49:a2:a7:4c:13:b2:3e:a3:
4f:49:13:b6:a7:6b:8c:87:00:e9:f2:3d:dd:97:4a:
86:61:e6:62:e7:80:72:e5:9d:ce:0c:2c:6e:72:64:
78:e0:9f:36:b6:79:d7:ad:09:22:36:09:aa:d6:df:
d2:d4:95:9d:18:4f:dd:d6:98:b7:d9:0e:71:67:7e:
df:74:65:1c:01:6d:77:b0:5e:95:bf:1d:f8:d6:2c:
8f:db:96:e4:07:4d:0a:cf:2b:b5:11:57:3d:7d:dd:
b0:60:cb:f2:4c:33:fb:d3:40:45:c7:21:df:19:a3:
a9:35:b4:92:14:dd:02:42:02:20:ff:37:c1:b5:4d:
cf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:94:6F:8F:71:9E:6F:2B:0E:20:75:58:14:69:87:F1:F9:72:88:80
X509v3 Authority Key Identifier:
keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/3pRvj3GebysOIHVYFGmH8flyiIA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:a0c0::/32
Signature Algorithm: sha256WithRSAEncryption
0d:46:0a:c4:39:00:bb:c7:81:00:47:92:a4:03:cb:8b:70:0f:
be:dc:28:69:94:37:30:d4:ca:7e:d2:d6:63:31:b1:82:d0:1c:
7b:1b:ba:26:04:8d:16:49:a4:c0:51:eb:92:ba:b0:64:41:7d:
1a:21:d0:1d:8f:6b:37:81:75:61:ad:e0:a8:28:06:58:9b:78:
7d:83:f8:99:6c:ee:dd:1e:6c:91:ba:bf:b1:7a:57:51:2a:a1:
74:83:4a:c5:9b:a1:f2:25:7a:0c:5d:c2:9d:c8:66:94:8b:3c:
52:99:57:b4:74:3c:92:ea:1d:b0:14:3b:9f:f2:b7:f4:8a:4d:
64:ff:37:08:da:bd:91:22:41:ff:92:a1:74:61:58:8b:25:4c:
50:57:b7:ce:3b:5a:a1:13:77:49:b8:47:15:d0:b9:58:27:e9:
fe:c9:9c:e9:5d:0e:3b:ed:78:7b:e5:ea:77:da:b2:d9:8c:eb:
42:92:9f:de:c3:82:95:32:49:fb:d0:b5:b9:8e:49:ac:69:83:
be:6a:e1:ed:7d:a9:57:37:4f:14:02:6e:8d:c6:77:73:7c:8a:
80:ff:e8:90:c8:fb:02:71:59:23:09:e9:62:99:18:90:35:da:
9b:5c:d3:ab:f2:4e:75:fa:64:39:24:7f:63:c5:e1:32:fe:25:
d7:69:39:ca
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICCL4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTlE
RUYyQ0Y4MjhGMEQ5QUI2QUQ5NEY0MjYxMzE3NjREMjU0Q0M1QzAeFw0yMzA5MDEw
ODUwMzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERFOTQ2RjhGNzE5RTZG
MkIwRTIwNzU1ODE0Njk4N0YxRjk3Mjg4ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDeElsk48978vE/ORQD+7SXJDgrwgKJpNHjIHgD5EVmt4bR0gbg
cvQ0lzFRhabS6XGJQLzbtfiIlnHC2a4shEzWEi5hmIVzn2x47xxTox/L04VfAvm7
XoniAm5nm+9U0tImRhzzgLHUoXvuVOjet2m8e+eSp+DpXt+D117Ma8NJoqdME7I+
o09JE7ana4yHAOnyPd2XSoZh5mLngHLlnc4MLG5yZHjgnza2edetCSI2CarW39LU
lZ0YT93WmLfZDnFnft90ZRwBbXewXpW/HfjWLI/bluQHTQrPK7URVz193bBgy/JM
M/vTQEXHId8Zo6k1tJIU3QJCAiD/N8G1Tc99AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU3pRvj3GebysOIHVYFGmH8flyiIAwHwYDVR0jBBgwFoAUWd7yz4KPDZq2rZT0
JhMXZNJUzFwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkFOVEFT
WS9XZDd5ejRLUERacTJyWlQwSmhNWFpOSlV6RncuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL1dkN3l6NEtQRFpxMnJaVDBKaE1YWk5KVXpGdy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0ZBTlRBU1kvM3BSdmozR2VieXNPSUhW
WUZHbUg4Zmx5aUlBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF
ACQFoMAwDQYJKoZIhvcNAQELBQADggEBAA1GCsQ5ALvHgQBHkqQDy4twD77cKGmU
NzDUyn7S1mMxsYLQHHsbuiYEjRZJpMBR65K6sGRBfRoh0B2PazeBdWGt4KgoBlib
eH2D+Jls7t0ebJG6v7F6V1EqoXSDSsWbofIlegxdwp3IZpSLPFKZV7R0PJLqHbAU
O5/yt/SKTWT/NwjavZEiQf+SoXRhWIslTFBXt847WqETd0m4RxXQuVgn6f7JnOld
DjvteHvl6nfastmM60KSn97DgpUySfvQtbmOSaxpg75q4e19qVc3TxQCbo3Gd3N8
ioD/6JDI+wJxWSMJ6WKZGJA12ptc06vyTnX6ZDkkf2PF4TL+JddpOco=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org