Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/-2EHIQAditndfyLmShOk9SU11Q0.roa
File: -2EHIQAditndfyLmShOk9SU11Q0.roa (raw, json)
Hash identifier: AD/vC20LPlk1tgM11+Oa2jApJZ/WAfVsLXaAHbuvkao=
Subject key identifier: FB:61:07:21:00:1D:8A:D9:DD:7F:22:E6:4A:13:A4:F5:25:35:D5:0D
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0D04
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/-2EHIQAditndfyLmShOk9SU11Q0.roa
Signing time: Mon 15 Jan 2024 21:24:17 +0000
ROA not before: Mon 15 Jan 2024 21:24:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131591
IP address blocks: 223.22.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3332 (0xd04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:24:17 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FB610721001D8AD9DD7F22E64A13A4F52535D50D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ed:25:b7:06:57:de:9c:61:0a:60:af:20:f7:
22:67:81:13:3a:fb:26:8b:ea:7d:83:9b:28:bd:b1:
a5:55:ea:d3:51:62:3e:89:e2:2e:34:e9:4b:72:5d:
4c:5a:97:bd:f5:99:91:3f:75:73:7b:9c:8c:28:6a:
36:dd:89:6a:b7:a9:7f:2d:d8:86:89:b2:48:bd:5e:
98:b1:3a:bd:46:2c:50:4d:06:98:c6:cd:be:01:13:
09:24:91:61:72:72:e1:4c:50:7f:e8:59:a2:8d:c8:
dd:fc:11:cd:83:12:b8:3e:b2:52:89:9b:02:9b:05:
ad:58:ea:f1:de:92:61:33:71:43:1b:65:4c:fc:04:
da:0c:73:0a:80:97:a7:af:dd:b9:08:f6:e9:9a:0e:
85:ad:14:07:17:1e:6e:ff:84:21:83:9a:2a:6b:1e:
6b:b9:e4:f3:6d:d6:d1:05:5e:36:6c:a2:dc:ae:89:
85:7b:fd:20:94:9b:fb:3d:62:70:59:a9:dc:51:f6:
0a:49:5e:10:bb:c3:24:4a:a1:01:44:ed:62:fb:77:
a5:d7:db:36:8d:41:8d:48:2e:6f:08:40:f0:13:4d:
29:91:87:6a:e4:42:fa:75:34:89:69:f4:7b:c6:8c:
0c:10:c1:bc:10:dd:b7:8f:25:f6:bb:13:e0:f9:a3:
4f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:61:07:21:00:1D:8A:D9:DD:7F:22:E6:4A:13:A4:F5:25:35:D5:0D
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/-2EHIQAditndfyLmShOk9SU11Q0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.22.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a5:76:94:b7:bf:72:04:db:06:da:36:2f:13:9d:a2:14:2a:39:
39:4c:66:17:c4:f1:fc:30:e8:4f:3f:c8:fb:f9:8f:7d:4c:c4:
03:06:b6:32:8d:70:e5:60:31:ad:1d:28:38:43:ad:d3:3a:f5:
b9:96:45:7a:87:b6:0c:61:7a:77:5e:62:c2:95:3b:28:8e:f5:
fd:6d:8f:f4:f5:ee:5f:e8:88:ad:72:70:a0:b2:10:ee:2d:09:
6f:cf:8f:be:d3:73:9a:26:5a:cf:54:45:13:ce:62:ce:5b:e2:
84:b0:8e:ab:8a:eb:8a:34:86:1c:12:26:ec:e3:68:f2:92:ef:
dc:21:4f:86:eb:28:cd:10:c0:52:c8:3c:6f:59:e4:c7:d8:db:
5e:0f:1e:b5:03:06:00:b1:0f:31:2d:16:6f:2c:13:cc:7b:1c:
3e:bc:f7:5c:63:fe:8d:f2:ff:27:85:a8:7b:2a:a4:17:2f:95:
33:a7:8c:2d:f8:f3:eb:80:26:b6:e3:93:30:cb:c4:af:4d:8d:
3e:f5:b0:19:ce:da:a0:ce:2c:0e:29:e3:ab:4b:ad:84:f2:65:
ef:0c:77:2c:ff:b3:cb:09:e6:c6:87:d0:29:21:d3:67:6c:e4:
bf:1b:b9:9f:27:64:38:39:4e:f3:97:ce:b3:58:a5:64:f8:96:
fc:63:4e:41
-----BEGIN CERTIFICATE-----
MIIEyzCCA7OgAwIBAgICDQQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy
MTI0MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZCNjEwNzIxMDAxRDhB
RDlERDdGMjJFNjRBMTNBNEY1MjUzNUQ1MEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCl7SW3BlfenGEKYK8g9yJngRM6+yaL6n2Dmyi9saVV6tNRYj6J
4i406UtyXUxal731mZE/dXN7nIwoajbdiWq3qX8t2IaJski9XpixOr1GLFBNBpjG
zb4BEwkkkWFycuFMUH/oWaKNyN38Ec2DErg+slKJmwKbBa1Y6vHekmEzcUMbZUz8
BNoMcwqAl6ev3bkI9umaDoWtFAcXHm7/hCGDmiprHmu55PNt1tEFXjZsotyuiYV7
/SCUm/s9YnBZqdxR9gpJXhC7wyRKoQFE7WL7d6XX2zaNQY1ILm8IQPATTSmRh2rk
Qvp1NIlp9HvGjAwQwbwQ3bePJfa7E+D5o081AgMBAAGjggHnMIIB4zAdBgNVHQ4E
FgQU+2EHIQAditndfyLmShOk9SU11Q0wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULy0yRUhJUUFkaXRuZGZ5TG1TaE9rOVNV
MTFRMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDfFjANBgkq
hkiG9w0BAQsFAAOCAQEApXaUt79yBNsG2jYvE52iFCo5OUxmF8Tx/DDoTz/I+/mP
fUzEAwa2Mo1w5WAxrR0oOEOt0zr1uZZFeoe2DGF6d15iwpU7KI71/W2P9PXuX+iI
rXJwoLIQ7i0Jb8+PvtNzmiZaz1RFE85izlvihLCOq4rrijSGHBIm7ONo8pLv3CFP
husozRDAUsg8b1nkx9jbXg8etQMGALEPMS0WbywTzHscPrz3XGP+jfL/J4Woeyqk
Fy+VM6eMLfjz64AmtuOTMMvEr02NPvWwGc7aoM4sDinjq0uthPJl7wx3LP+zywnm
xofQKSHTZ2zkvxu5nydkODlO85fOs1ilZPiW/GNOQQ==
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org