Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/HZMvbf_zIfNIfbxDJXthUQJ_NeE.roa
File: HZMvbf_zIfNIfbxDJXthUQJ_NeE.roa (raw, json)
Hash identifier: FDTY5U5x8NdGBbBfOimsGX07vHoSlqZWjXOPRpqWh8M=
Subject key identifier: 1D:93:2F:6D:FF:F3:21:F3:48:7D:BC:43:25:7B:61:51:02:7F:35:E1
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0DB6
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/HZMvbf_zIfNIfbxDJXthUQJ_NeE.roa
Signing time: Mon 15 Jan 2024 21:30:20 +0000
ROA not before: Mon 15 Jan 2024 21:30:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18419
IP address blocks: 124.218.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3510 (0xdb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:30:20 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1D932F6DFFF321F3487DBC43257B6151027F35E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:2a:91:17:f2:9c:b4:05:fc:f1:b1:a3:ba:
ad:9c:f9:32:c3:9e:9b:58:25:f0:29:33:91:29:2d:
f6:2d:ff:f1:2e:48:da:8e:41:af:4d:f3:68:3e:60:
12:7d:89:40:d5:f5:74:9f:07:43:e5:8c:1f:17:e5:
bf:c1:60:1a:b0:d1:3f:be:8c:5c:c1:0e:c0:f1:f5:
61:58:b0:f7:bd:21:d3:22:f1:cf:70:3e:8b:e8:15:
99:58:08:bc:c2:92:10:52:b0:e0:02:6b:56:c7:21:
80:68:95:61:b5:b9:c7:e3:34:0c:90:a3:e6:68:f6:
fb:29:b4:1f:60:32:a5:b0:80:ef:33:48:ab:83:fd:
ab:49:94:2b:57:92:fd:04:7f:92:80:43:7f:db:14:
c6:b7:89:6a:99:13:ff:e6:c8:67:74:27:e7:29:46:
47:93:c3:1c:a1:6f:8c:6d:1a:c6:a2:fd:b3:d6:9b:
9d:99:9d:ea:9b:24:60:dc:89:ba:38:54:c3:69:16:
3e:74:59:3a:7c:be:75:d7:30:8e:db:ca:98:d9:0c:
a5:aa:1c:1d:05:26:17:d7:c5:57:5a:6b:8a:34:80:
24:80:2d:eb:6a:83:20:eb:6c:df:e6:16:5d:b6:ea:
1a:9b:6e:45:40:27:96:08:7d:b9:86:c4:87:4f:36:
c6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:93:2F:6D:FF:F3:21:F3:48:7D:BC:43:25:7B:61:51:02:7F:35:E1
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/HZMvbf_zIfNIfbxDJXthUQJ_NeE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.104.0/22
Signature Algorithm: sha256WithRSAEncryption
75:e5:12:d5:fe:4c:25:df:e9:62:72:66:b3:90:76:76:12:2c:
85:82:7a:ae:91:4c:1b:49:9a:90:f5:86:53:2a:86:bb:3e:8b:
eb:50:53:3e:b7:b0:9e:7a:63:67:2a:5d:3d:0d:f5:54:aa:7c:
29:88:d9:2c:db:51:c1:d1:15:4c:ff:36:ac:78:d9:72:40:02:
29:3d:b3:dc:84:a5:3f:87:74:62:81:08:9a:71:2a:9a:97:d9:
e3:8d:a0:73:52:75:d3:51:a7:99:3b:74:dc:68:94:b4:46:61:
32:95:d8:8a:bb:eb:67:91:2e:87:81:29:95:79:da:2b:e3:9a:
1b:e0:a3:eb:38:e5:23:f8:f7:c2:18:cf:9d:c0:a9:01:69:e5:
f1:a6:67:4c:98:b8:8a:11:3a:69:43:37:d9:f3:2d:be:99:68:
88:10:57:b0:ac:6e:17:5f:aa:1e:a2:01:9c:db:6c:c4:f0:1e:
e3:2d:06:22:a0:03:6c:aa:ed:9b:39:62:5e:48:24:26:69:fe:
fc:8e:d3:44:cb:17:e9:d5:e7:cf:16:92:ce:bf:10:fa:4a:fd:
de:03:1d:77:47:52:8f:b0:02:1f:b6:45:0d:45:fb:92:3e:1b:
4f:84:1b:05:18:ed:5c:d3:e7:d2:c1:99:7c:2b:f5:28:1d:68:
f0:1e:81:d2
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDbYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy
MTMwMjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDFEOTMyRjZERkZGMzIx
RjM0ODdEQkM0MzI1N0I2MTUxMDI3RjM1RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwjCqRF/KctAX88bGjuq2c+TLDnptYJfApM5EpLfYt//EuSNqO
Qa9N82g+YBJ9iUDV9XSfB0PljB8X5b/BYBqw0T++jFzBDsDx9WFYsPe9IdMi8c9w
PovoFZlYCLzCkhBSsOACa1bHIYBolWG1ucfjNAyQo+Zo9vsptB9gMqWwgO8zSKuD
/atJlCtXkv0Ef5KAQ3/bFMa3iWqZE//myGd0J+cpRkeTwxyhb4xtGsai/bPWm52Z
neqbJGDcibo4VMNpFj50WTp8vnXXMI7bypjZDKWqHB0FJhfXxVdaa4o0gCSALetq
gyDrbN/mFl226hqbbkVAJ5YIfbmGxIdPNsaxAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUHZMvbf/zIfNIfbxDJXthUQJ/NeEwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0haTXZiZl96SWZOSWZieERKWHRoVVFK
X05lRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ82mgwDQYJ
KoZIhvcNAQELBQADggEBAHXlEtX+TCXf6WJyZrOQdnYSLIWCeq6RTBtJmpD1hlMq
hrs+i+tQUz63sJ56Y2cqXT0N9VSqfCmI2SzbUcHRFUz/Nqx42XJAAik9s9yEpT+H
dGKBCJpxKpqX2eONoHNSddNRp5k7dNxolLRGYTKV2Iq762eRLoeBKZV52ivjmhvg
o+s45SP498IYz53AqQFp5fGmZ0yYuIoROmlDN9nzLb6ZaIgQV7Csbhdfqh6iAZzb
bMTwHuMtBiKgA2yq7Zs5Yl5IJCZp/vyO00TLF+nV588Wks6/EPpK/d4DHXdHUo+w
Ah+2RQ1F+5I+G0+EGwUY7VzT59LBmXwr9SgdaPAegdI=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org