Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Fvq3rFZFiPw7ED-odX0wB3BlLeY.roa
File: Fvq3rFZFiPw7ED-odX0wB3BlLeY.roa (raw, json)
Hash identifier: xiTjCN1eFZifk2L4J+QqdxOM2OxdvryRYZp0wnB6mEk=
Subject key identifier: 16:FA:B7:AC:56:45:88:FC:3B:10:3F:A8:75:7D:30:07:70:65:2D:E6
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0CE4
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Fvq3rFZFiPw7ED-odX0wB3BlLeY.roa
Signing time: Mon 15 Jan 2024 21:23:39 +0000
ROA not before: Mon 15 Jan 2024 21:23:39 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 210.85.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3300 (0xce4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:23:39 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=16FAB7AC564588FC3B103FA8757D300770652DE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:03:39:2a:8d:36:6d:13:c4:4b:c4:dc:53:4e:
cf:56:59:75:4d:13:65:37:49:f9:34:c6:6e:5d:8f:
d7:ac:db:1b:b9:73:00:fe:4e:01:70:e3:54:e8:70:
5d:02:21:98:af:2e:52:3b:ae:2b:0d:06:96:e9:fc:
67:04:31:0b:05:fc:2c:f2:bd:48:e0:b6:c9:82:e3:
43:ce:9c:2f:31:1d:d7:ea:02:32:b2:50:2e:35:1e:
91:16:f9:95:33:37:23:64:e8:83:9e:1d:8e:7c:91:
b0:d2:fa:e5:20:8b:42:d3:e2:e1:96:1e:60:47:bd:
64:a8:b3:33:a2:3f:e0:99:a1:40:16:2e:c2:6a:a2:
95:53:5d:75:8e:66:22:1d:71:fe:8f:1b:7a:f9:86:
a1:b6:e3:45:af:14:1b:a9:d1:2d:9a:16:dc:c9:3d:
bc:d2:db:41:f5:06:45:e2:5c:f7:ce:f7:f4:3b:34:
3a:e3:3e:0e:77:17:86:85:0c:5a:53:4e:7a:fc:73:
4d:54:08:9b:5c:d2:ef:fc:32:3e:f2:c0:0a:ed:86:
31:e7:c0:1a:de:60:fa:db:7e:d4:db:f2:e1:1a:8c:
d5:8c:46:44:4f:31:be:5b:f9:2b:8a:8d:91:a3:f2:
74:32:01:54:1c:b0:af:ba:4f:c8:a1:1a:2e:50:68:
d7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FA:B7:AC:56:45:88:FC:3B:10:3F:A8:75:7D:30:07:70:65:2D:E6
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Fvq3rFZFiPw7ED-odX0wB3BlLeY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3e:c8:2a:74:95:20:25:bb:e8:fa:b3:5b:9f:56:c4:ae:ec:23:
c0:79:54:2b:89:48:d3:bc:ac:e4:d6:3b:8e:9c:bb:a7:fd:b0:
29:91:10:95:2c:d6:fe:97:4b:e8:3a:5b:a1:ae:58:11:4d:ea:
38:fc:9c:9f:de:a2:6c:ba:50:13:17:f7:40:01:84:84:28:60:
e9:0f:86:5d:95:e4:d9:27:14:8b:09:71:73:05:14:a5:43:c6:
cc:ba:eb:15:c0:7f:82:a9:71:03:1e:0b:78:b8:98:9d:55:96:
04:bc:9b:5a:b8:3e:2b:15:49:d4:33:52:de:8e:fc:5f:ff:4c:
d0:20:f9:a3:e0:57:c6:5c:55:96:c3:9b:76:14:8f:ea:97:49:
dd:3a:8d:b2:45:8e:81:b7:59:23:b6:dc:ac:62:a7:70:6d:19:
d7:f8:9a:53:03:5c:fa:2b:1e:73:3b:75:cb:1e:c6:1d:c7:15:
ab:5a:83:6d:60:ed:c6:bd:bd:7d:c8:68:95:27:2d:f1:ba:d5:
4b:d9:df:5a:ec:21:88:b5:86:95:c7:21:fc:28:d9:a1:20:c0:
9e:3f:9c:cc:17:c8:df:88:bf:1a:7e:90:80:4f:9d:95:5e:b6:
70:69:9e:d2:55:c1:1c:c6:ee:a8:7b:5d:71:79:7b:60:3e:4e:
6a:b6:d3:1d
-----BEGIN CERTIFICATE-----
MIIEyzCCA7OgAwIBAgICDOQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy
MTIzMzlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDE2RkFCN0FDNTY0NTg4
RkMzQjEwM0ZBODc1N0QzMDA3NzA2NTJERTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGAzkqjTZtE8RLxNxTTs9WWXVNE2U3Sfk0xm5dj9es2xu5cwD+
TgFw41TocF0CIZivLlI7risNBpbp/GcEMQsF/CzyvUjgtsmC40POnC8xHdfqAjKy
UC41HpEW+ZUzNyNk6IOeHY58kbDS+uUgi0LT4uGWHmBHvWSoszOiP+CZoUAWLsJq
opVTXXWOZiIdcf6PG3r5hqG240WvFBup0S2aFtzJPbzS20H1BkXiXPfO9/Q7NDrj
Pg53F4aFDFpTTnr8c01UCJtc0u/8Mj7ywArthjHnwBreYPrbftTb8uEajNWMRkRP
Mb5b+SuKjZGj8nQyAVQcsK+6T8ihGi5QaNdXAgMBAAGjggHnMIIB4zAdBgNVHQ4E
FgQUFvq3rFZFiPw7ED+odX0wB3BlLeYwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0Z2cTNyRlpGaVB3N0VELW9kWDB3QjNC
bExlWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDSVTANBgkq
hkiG9w0BAQsFAAOCAQEAPsgqdJUgJbvo+rNbn1bEruwjwHlUK4lI07ys5NY7jpy7
p/2wKZEQlSzW/pdL6Dpboa5YEU3qOPycn96ibLpQExf3QAGEhChg6Q+GXZXk2ScU
iwlxcwUUpUPGzLrrFcB/gqlxAx4LeLiYnVWWBLybWrg+KxVJ1DNS3o78X/9M0CD5
o+BXxlxVlsObdhSP6pdJ3TqNskWOgbdZI7bcrGKncG0Z1/iaUwNc+iseczt1yx7G
HccVq1qDbWDtxr29fcholSct8brVS9nfWuwhiLWGlcch/CjZoSDAnj+czBfI34i/
Gn6QgE+dlV62cGme0lXBHMbuqHtdcXl7YD5OarbTHQ==
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org