Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/6zlGCRWK-iLKT-cbf_kqzi-7Vcs.roa
File: 6zlGCRWK-iLKT-cbf_kqzi-7Vcs.roa (raw, json)
Hash identifier: g5U8ugaQeUi8I7zAjc6DPE1OJ8EfL4RrVHMq2EJjEHo=
Subject key identifier: EB:39:46:09:15:8A:FA:22:CA:4F:E7:1B:7F:F9:2A:CE:2F:BB:55:CB
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0CA4
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/6zlGCRWK-iLKT-cbf_kqzi-7Vcs.roa
Signing time: Mon 15 Jan 2024 21:10:28 +0000
ROA not before: Mon 15 Jan 2024 21:10:28 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9311
IP address blocks: 210.201.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3236 (0xca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:10:28 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=EB394609158AFA22CA4FE71B7FF92ACE2FBB55CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:1e:0b:94:e0:16:ba:b0:94:f0:17:8d:f6:
f6:2c:c5:e6:a4:26:79:9e:01:68:0b:53:26:64:5c:
28:be:20:19:9f:47:d0:1f:f9:8e:e5:7d:53:39:87:
a2:0e:27:64:d1:58:cb:78:35:14:86:e5:0f:5e:06:
00:64:3f:87:1f:a6:31:58:74:a2:ab:2f:c2:ba:ed:
25:ec:ef:fb:67:fd:d4:b3:30:57:a0:cc:e7:c3:df:
52:f2:02:aa:9d:ea:47:e6:86:e2:fc:60:a1:d8:1c:
c0:34:5a:47:db:06:b6:08:54:69:1a:af:8e:46:35:
2e:b5:75:ec:8b:48:7d:e1:97:88:ae:3f:45:0d:87:
9a:d1:71:c2:3c:ca:a2:1c:a6:fa:b6:20:de:75:de:
a8:40:b6:51:66:38:44:be:49:72:ab:d6:a7:59:7b:
02:56:f5:4a:34:12:e6:52:97:f7:19:77:fd:2f:e4:
a7:0d:ea:7e:a9:02:7c:78:d4:0d:90:0d:00:44:12:
75:5c:a5:77:d2:e8:b0:89:1f:d0:cb:29:b4:8b:9b:
d3:16:08:c0:29:c3:e7:84:6c:ee:bd:f9:d7:3d:f1:
c7:6d:2f:70:2d:cb:b6:53:36:92:b8:62:c9:6d:29:
e3:f1:15:c1:5e:5b:30:c0:15:9b:d5:5a:00:3c:af:
4c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:39:46:09:15:8A:FA:22:CA:4F:E7:1B:7F:F9:2A:CE:2F:BB:55:CB
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/6zlGCRWK-iLKT-cbf_kqzi-7Vcs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.76.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:c0:b8:78:ba:93:d7:a0:41:28:2b:17:97:f3:c8:4d:97:73:
0b:36:d3:fb:80:e7:e3:ed:af:90:4a:7e:e8:e3:4a:e1:3f:06:
0f:58:f4:70:a1:db:73:b4:45:25:63:3b:70:b3:be:a5:9a:59:
09:21:f9:9a:af:c8:2a:35:35:a1:4e:38:4c:ed:94:e3:fb:7a:
d2:8e:7c:5a:a6:b5:49:74:fa:85:ca:46:ee:b1:27:9b:2b:f7:
8b:16:02:1e:3c:ff:cf:7d:10:c5:b8:20:1d:a9:44:83:3d:7b:
e9:bc:2d:72:b5:0e:90:a8:8b:f3:e0:33:12:e9:a7:4e:b3:aa:
df:c9:40:67:22:7a:48:a5:73:71:e1:92:68:9f:42:9c:fd:65:
da:ba:46:c2:75:b5:16:75:40:d7:70:37:72:c9:a7:0f:16:64:
ab:63:08:5f:8d:1f:a4:4f:60:da:b1:89:01:85:6c:2e:66:49:
b9:a9:36:db:2e:13:dc:e2:0a:9e:63:06:dc:2e:d3:c1:db:28:
3b:e0:f3:e4:8f:1c:2c:b8:6c:f6:59:27:30:91:ed:7c:25:ab:
8b:25:84:ad:ad:49:b9:03:c0:ba:0c:72:50:c0:ba:00:49:86:
10:a6:22:6c:a7:16:e1:ad:e0:5d:0a:7f:4d:79:39:22:77:e0:
0d:f9:b6:5e
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDKQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy
MTEwMjhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVCMzk0NjA5MTU4QUZB
MjJDQTRGRTcxQjdGRjkyQUNFMkZCQjU1Q0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAeB4LlOAWurCU8BeN9vYsxeakJnmeAWgLUyZkXCi+IBmfR9Af
+Y7lfVM5h6IOJ2TRWMt4NRSG5Q9eBgBkP4cfpjFYdKKrL8K67SXs7/tn/dSzMFeg
zOfD31LyAqqd6kfmhuL8YKHYHMA0WkfbBrYIVGkar45GNS61deyLSH3hl4iuP0UN
h5rRccI8yqIcpvq2IN513qhAtlFmOES+SXKr1qdZewJW9Uo0EuZSl/cZd/0v5KcN
6n6pAnx41A2QDQBEEnVcpXfS6LCJH9DLKbSLm9MWCMApw+eEbO69+dc98cdtL3At
y7ZTNpK4YsltKePxFcFeWzDAFZvVWgA8r0wTAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQU6zlGCRWK+iLKT+cbf/kqzi+7VcswHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzZ6bEdDUldLLWlMS1QtY2JmX2txemkt
N1Zjcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALSyUwwDQYJ
KoZIhvcNAQELBQADggEBADvAuHi6k9egQSgrF5fzyE2Xcws20/uA5+Ptr5BKfujj
SuE/Bg9Y9HCh23O0RSVjO3CzvqWaWQkh+ZqvyCo1NaFOOEztlOP7etKOfFqmtUl0
+oXKRu6xJ5sr94sWAh48/899EMW4IB2pRIM9e+m8LXK1DpCoi/PgMxLpp06zqt/J
QGciekilc3HhkmifQpz9Zdq6RsJ1tRZ1QNdwN3LJpw8WZKtjCF+NH6RPYNqxiQGF
bC5mSbmpNtsuE9ziCp5jBtwu08HbKDvg8+SPHCy4bPZZJzCR7Xwlq4slhK2tSbkD
wLoMclDAugBJhhCmImynFuGt4F0Kf015OSJ34A35tl4=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org