Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/6Ay8B4YLjL5lXw5BDn7IUmwoRTU.roa
File: 6Ay8B4YLjL5lXw5BDn7IUmwoRTU.roa (raw, json)
Hash identifier: Pj+myaDIlYaIfjJGuv9t3QTTKGrgigU0YAv5aUmOHdE=
Subject key identifier: E8:0C:BC:07:86:0B:8C:BE:65:5F:0E:41:0E:7E:C8:52:6C:28:45:35
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0DD6
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/6Ay8B4YLjL5lXw5BDn7IUmwoRTU.roa
Signing time: Mon 15 Jan 2024 21:34:54 +0000
ROA not before: Mon 15 Jan 2024 21:34:54 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 203.207.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3542 (0xdd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:34:54 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E80CBC07860B8CBE655F0E410E7EC8526C284535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e6:33:21:72:b4:fc:a8:33:ea:2c:0f:51:85:
b6:5b:4a:60:31:ac:ba:a8:7e:a7:db:5a:8b:86:a5:
0d:94:24:f1:6b:a2:14:a6:55:4b:aa:a8:0e:6b:96:
cd:50:af:c2:ff:5a:9b:a7:ec:bd:ac:50:2f:a1:4b:
5a:74:35:a0:b7:ee:98:4a:e5:38:e8:93:9b:29:c0:
8f:f1:f1:82:f9:41:e6:ee:13:db:09:92:46:2f:21:
f2:eb:05:95:9f:00:36:19:0f:7b:38:c8:06:84:d5:
72:21:99:28:22:eb:f1:1b:7f:2c:88:1d:47:b4:c4:
ec:0f:14:81:57:14:46:9f:97:fb:30:95:b5:00:a3:
46:41:49:47:b1:51:60:ca:09:4d:62:cd:67:10:55:
ab:cd:d2:8e:e6:7d:fe:ca:6d:9c:b1:ae:b3:ec:35:
0f:bb:02:4a:96:65:f1:a9:8a:e0:80:9d:75:06:80:
8c:b1:5f:23:cd:48:3e:79:09:ef:16:d5:bb:6d:0e:
41:90:04:76:7a:16:c2:55:16:45:89:27:47:65:2e:
23:82:89:64:58:f6:34:e3:22:0c:da:1d:e1:d5:1e:
ef:96:e8:0b:6e:6f:81:aa:56:4c:5a:d2:3a:76:66:
4b:9b:e0:32:8f:fe:03:a3:2c:c8:92:6b:4e:fd:b3:
f3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0C:BC:07:86:0B:8C:BE:65:5F:0E:41:0E:7E:C8:52:6C:28:45:35
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/6Ay8B4YLjL5lXw5BDn7IUmwoRTU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.207.32.0/20
Signature Algorithm: sha256WithRSAEncryption
95:ab:f4:3f:11:cd:49:ca:60:79:2e:fb:33:f2:65:aa:7b:99:
57:bd:3d:8f:fd:2e:e1:74:d8:11:1a:94:90:e0:11:f0:3e:54:
05:71:48:7a:fa:f0:26:d9:88:99:0a:c1:8a:3a:9c:52:4a:27:
33:ce:df:cc:11:05:f5:ef:ff:2d:85:dd:06:29:4d:d2:18:0f:
1a:db:44:ec:c1:b0:2e:ae:3d:d0:6c:ab:78:89:05:b1:ba:83:
fb:7c:94:1f:c8:b2:89:d7:1a:f4:62:8f:84:8e:ea:0f:89:0a:
81:e5:6f:03:e7:1a:b8:b9:4e:53:5f:d3:e3:30:76:fc:b0:26:
1e:9d:5d:df:78:08:31:6f:c4:ce:68:30:03:74:2e:bf:30:ed:
b2:03:87:b9:9e:08:c2:f2:8d:e9:ca:76:fe:9a:8f:b4:b9:73:
f0:1a:c3:e9:88:c4:d7:5b:b0:a5:19:05:1b:31:85:a4:61:6b:
a1:f6:7c:27:04:51:f0:61:65:71:8c:30:a9:81:b6:0a:40:bd:
9d:b2:c5:7d:26:a4:ca:3a:a0:88:6c:87:c9:c9:eb:af:90:5c:
a1:fa:3e:7e:12:cf:90:32:69:51:47:86:06:f2:73:82:8e:d2:
04:e6:9e:ef:78:d5:db:ed:85:5b:9b:ed:b9:6d:75:be:ef:43:
61:66:b6:44
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDdYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy
MTM0NTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEU4MENCQzA3ODYwQjhD
QkU2NTVGMEU0MTBFN0VDODUyNkMyODQ1MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJ5jMhcrT8qDPqLA9RhbZbSmAxrLqofqfbWouGpQ2UJPFrohSm
VUuqqA5rls1Qr8L/Wpun7L2sUC+hS1p0NaC37phK5Tjok5spwI/x8YL5QebuE9sJ
kkYvIfLrBZWfADYZD3s4yAaE1XIhmSgi6/EbfyyIHUe0xOwPFIFXFEafl/swlbUA
o0ZBSUexUWDKCU1izWcQVavN0o7mff7KbZyxrrPsNQ+7AkqWZfGpiuCAnXUGgIyx
XyPNSD55Ce8W1bttDkGQBHZ6FsJVFkWJJ0dlLiOCiWRY9jTjIgzaHeHVHu+W6Atu
b4GqVkxa0jp2Zkub4DKP/gOjLMiSa079s/NfAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQU6Ay8B4YLjL5lXw5BDn7IUmwoRTUwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzZBeThCNFlMakw1bFh3NUJEbjdJVW13
b1JUVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATLzyAwDQYJ
KoZIhvcNAQELBQADggEBAJWr9D8RzUnKYHku+zPyZap7mVe9PY/9LuF02BEalJDg
EfA+VAVxSHr68CbZiJkKwYo6nFJKJzPO38wRBfXv/y2F3QYpTdIYDxrbROzBsC6u
PdBsq3iJBbG6g/t8lB/IsonXGvRij4SO6g+JCoHlbwPnGri5TlNf0+MwdvywJh6d
Xd94CDFvxM5oMAN0Lr8w7bIDh7meCMLyjenKdv6aj7S5c/Aaw+mIxNdbsKUZBRsx
haRha6H2fCcEUfBhZXGMMKmBtgpAvZ2yxX0mpMo6oIhsh8nJ66+QXKH6Pn4Sz5Ay
aVFHhgbyc4KO0gTmnu941dvthVub7bltdb7vQ2FmtkQ=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org