Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/3CdB5dkd-zcONs_YqRVIyygdUxQ.roa
File: 3CdB5dkd-zcONs_YqRVIyygdUxQ.roa (raw, json)
Hash identifier: Kwgcr2lNTmKiGEvu149HPRxZ2YN0xpBFEYtbGVP2yRY=
Subject key identifier: DC:27:41:E5:D9:1D:FB:37:0E:36:CF:D8:A9:15:48:CB:28:1D:53:14
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0CDE
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/3CdB5dkd-zcONs_YqRVIyygdUxQ.roa
Signing time: Mon 15 Jan 2024 21:23:32 +0000
ROA not before: Mon 15 Jan 2024 21:23:32 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9311
IP address blocks: 210.63.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3294 (0xcde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:23:32 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DC2741E5D91DFB370E36CFD8A91548CB281D5314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:91:6e:d9:9b:90:2a:85:32:cf:0b:da:9a:46:
59:6a:81:3f:83:72:12:11:93:ff:1d:0f:68:a4:f3:
1c:6a:12:d2:af:07:6f:1b:ea:e7:db:20:fa:84:97:
c6:bf:43:4b:79:6b:dc:00:93:d1:2a:e1:d4:fd:24:
8f:09:45:33:75:6e:41:35:39:47:d8:0a:dc:4e:b2:
ee:17:4e:4f:6d:9f:ab:40:9b:ac:67:c8:e4:68:a1:
39:8d:30:68:dc:fb:dc:15:7d:11:b5:6f:b7:af:03:
82:d4:00:32:30:bc:8c:25:60:6b:11:5f:38:44:89:
44:14:83:5d:3d:5c:4a:6d:84:f6:4f:07:2d:92:0a:
36:b4:52:76:75:3a:ca:8f:0a:7c:de:12:85:80:81:
11:ba:28:df:22:91:28:7f:75:48:ce:eb:e8:6d:86:
7e:d9:7d:c4:50:0d:cf:8d:f7:88:08:c0:7b:33:7f:
c4:f6:da:c2:dd:1a:60:e0:91:76:fa:3f:66:3e:82:
16:cd:75:b7:2d:ea:6b:a3:1c:c2:9d:4c:87:e1:02:
8a:98:53:06:c1:02:cd:51:50:69:43:6a:b2:71:05:
63:21:94:e4:20:9c:c4:23:fb:d3:f5:f5:35:e3:df:
fb:ee:44:c0:51:70:3e:e8:0b:36:dd:bd:d4:dd:18:
ae:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:27:41:E5:D9:1D:FB:37:0E:36:CF:D8:A9:15:48:CB:28:1D:53:14
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/3CdB5dkd-zcONs_YqRVIyygdUxQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.239.0/24
Signature Algorithm: sha256WithRSAEncryption
35:22:6c:cf:f0:eb:04:b2:99:fb:6a:69:23:8a:cc:a4:e2:e9:
d6:58:b5:5a:75:fa:82:28:9e:06:64:02:32:cf:b9:e6:54:7b:
e4:29:ce:e8:a4:47:3e:22:3b:d0:8d:9d:ca:25:1b:8b:79:2e:
c1:1b:cd:b0:f9:4a:7f:0c:f1:5a:37:f6:e3:f5:13:f8:38:d8:
9c:cb:9e:60:ed:32:b3:00:09:6a:a9:11:bb:e9:8a:3b:71:bf:
28:1d:9e:14:e2:b8:c8:b0:52:54:12:2e:06:88:c2:4d:0b:6d:
75:a0:39:cd:d3:8d:47:50:4c:02:fd:c8:8d:38:fd:e2:27:bb:
48:26:53:9f:cc:37:78:6f:be:ee:88:94:28:e0:0f:ef:fc:78:
61:53:0b:e6:48:ef:a2:de:08:f8:10:f4:a0:f1:fb:3d:30:0b:
51:6a:75:01:0c:45:54:02:b2:0d:0a:b6:21:b4:1e:4a:00:ef:
ee:59:41:76:48:fd:36:a8:89:0c:1b:cf:25:6c:94:a8:b2:00:
a7:c9:ae:b1:e0:c9:a8:cb:73:f2:33:d2:eb:ae:d2:e3:0f:3b:
2c:48:56:76:f3:98:b5:1c:6c:b9:da:0f:b2:41:2f:45:f9:cb:
0b:2d:fa:7d:c7:a1:94:81:ed:47:46:71:cf:c9:89:1e:78:69:
a4:23:76:e2
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDN4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy
MTIzMzJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERDMjc0MUU1RDkxREZC
MzcwRTM2Q0ZEOEE5MTU0OENCMjgxRDUzMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDqkW7Zm5AqhTLPC9qaRllqgT+DchIRk/8dD2ik8xxqEtKvB28b
6ufbIPqEl8a/Q0t5a9wAk9Eq4dT9JI8JRTN1bkE1OUfYCtxOsu4XTk9tn6tAm6xn
yORooTmNMGjc+9wVfRG1b7evA4LUADIwvIwlYGsRXzhEiUQUg109XEpthPZPBy2S
Cja0UnZ1OsqPCnzeEoWAgRG6KN8ikSh/dUjO6+hthn7ZfcRQDc+N94gIwHszf8T2
2sLdGmDgkXb6P2Y+ghbNdbct6mujHMKdTIfhAoqYUwbBAs1RUGlDarJxBWMhlOQg
nMQj+9P19TXj3/vuRMBRcD7oCzbdvdTdGK5LAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQU3CdB5dkd+zcONs/YqRVIyygdUxQwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzNDZEI1ZGtkLXpjT05zX1lxUlZJeXln
ZFV4US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSP+8wDQYJ
KoZIhvcNAQELBQADggEBADUibM/w6wSymftqaSOKzKTi6dZYtVp1+oIongZkAjLP
ueZUe+QpzuikRz4iO9CNncolG4t5LsEbzbD5Sn8M8Vo39uP1E/g42JzLnmDtMrMA
CWqpEbvpijtxvygdnhTiuMiwUlQSLgaIwk0LbXWgOc3TjUdQTAL9yI04/eInu0gm
U5/MN3hvvu6IlCjgD+/8eGFTC+ZI76LeCPgQ9KDx+z0wC1FqdQEMRVQCsg0KtiG0
HkoA7+5ZQXZI/TaoiQwbzyVslKiyAKfJrrHgyajLc/Iz0uuu0uMPOyxIVnbzmLUc
bLnaD7JBL0X5ywst+n3HoZSB7UdGcc/JiR54aaQjduI=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org