Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/QLAhT9qeARAl8ep0SKs45ysr2no.roa
File: QLAhT9qeARAl8ep0SKs45ysr2no.roa (raw, json)
Hash identifier: pdiJTyEnWAkZ/XYRzAEYjjDjXPRDEQ8TX7xxbsXan/k=
Subject key identifier: 40:B0:21:4F:DA:9E:01:10:25:F1:EA:74:48:AB:38:E7:2B:2B:DA:7A
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0DE2
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/QLAhT9qeARAl8ep0SKs45ysr2no.roa
Signing time: Mon 15 Jan 2024 21:35:13 +0000
ROA not before: Mon 15 Jan 2024 21:35:13 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7482
IP address blocks: 60.244.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3554 (0xde2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:35:13 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=40B0214FDA9E011025F1EA7448AB38E72B2BDA7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:e1:32:9f:f5:99:57:8d:9b:10:df:25:cb:
d2:9d:06:74:12:a7:a3:06:02:6c:0f:a7:65:4a:96:
6f:36:5e:6d:a2:51:75:b1:cd:c4:61:77:1e:39:55:
47:15:b9:d4:c5:85:37:cc:56:f0:ea:0e:97:0c:15:
1f:e2:03:38:7d:ea:bc:3d:16:02:24:70:b9:2e:e1:
44:9d:d1:75:4b:86:be:5f:12:6f:de:b8:7f:2c:05:
2a:52:98:3c:e5:36:f5:48:88:81:9b:11:4d:84:c8:
41:7c:95:8b:20:87:68:b7:ad:07:3f:7b:4c:f6:bc:
fa:25:9e:6e:04:61:b4:5e:d8:7a:8e:88:0d:9a:41:
3b:a2:6c:79:32:a4:89:d4:d5:c0:df:37:b8:d6:09:
02:14:4e:eb:1c:ec:54:5f:86:d2:5b:bc:4a:00:51:
f2:06:2b:fa:1c:c0:49:5b:b8:9b:eb:5f:19:42:56:
91:52:38:22:a7:a1:5a:ae:3a:81:31:cd:5b:c3:25:
f0:23:78:f8:32:ad:a0:7c:d0:36:b0:5a:c6:59:18:
40:13:bf:1a:ca:08:47:08:cb:7b:04:9a:55:2e:cc:
12:e6:9f:64:6d:5d:58:34:8f:76:70:49:37:bd:a3:
a5:13:0b:d4:8a:de:09:36:e4:36:b5:2c:89:4c:35:
34:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B0:21:4F:DA:9E:01:10:25:F1:EA:74:48:AB:38:E7:2B:2B:DA:7A
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/QLAhT9qeARAl8ep0SKs45ysr2no.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.244.128.0/18
Signature Algorithm: sha256WithRSAEncryption
84:8e:a3:1c:df:00:dd:44:38:50:22:41:fb:76:14:7b:05:ce:
26:d9:ef:b2:29:8f:38:3d:8c:0c:63:24:49:f3:cd:e9:98:69:
62:c8:c5:b4:e5:f8:de:8b:d5:8c:30:78:44:48:27:ee:5b:63:
48:f9:47:7c:92:12:5c:cb:19:91:1a:26:20:c4:70:98:c0:78:
f4:c7:1f:9a:28:22:ce:15:da:ef:bd:8b:d7:fe:91:c1:2b:ff:
cd:3b:fe:13:3c:62:8a:98:15:2c:bc:bd:50:9c:37:85:2e:28:
19:ba:d5:aa:98:74:1a:b8:3b:ac:70:c4:77:f2:2a:59:f0:89:
34:6b:16:53:b5:e8:5f:06:ec:ea:b3:85:a2:2e:30:a7:e6:b8:
2e:fb:2c:41:72:cd:0e:59:95:92:8d:05:ab:18:a0:f0:f6:57:
95:d3:dc:a3:ee:92:2e:8d:16:8d:0b:93:d8:df:0f:1b:8f:28:
82:4f:b3:74:fb:f4:fa:0a:b7:20:24:6e:40:91:a7:42:70:13:
08:17:2d:d5:b2:32:37:d7:64:e5:3d:bf:af:ee:68:c3:8d:51:
55:17:15:1d:cf:21:93:ca:a3:6f:7a:02:52:5c:92:a0:e6:c3:
5d:45:82:d3:55:bf:52:e0:87:0d:db:59:21:53:43:1b:c0:43:
c8:48:cd:ff
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDeIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy
MTM1MTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQwQjAyMTRGREE5RTAx
MTAyNUYxRUE3NDQ4QUIzOEU3MkIyQkRBN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0tuEyn/WZV42bEN8ly9KdBnQSp6MGAmwPp2VKlm82Xm2iUXWx
zcRhdx45VUcVudTFhTfMVvDqDpcMFR/iAzh96rw9FgIkcLku4USd0XVLhr5fEm/e
uH8sBSpSmDzlNvVIiIGbEU2EyEF8lYsgh2i3rQc/e0z2vPolnm4EYbRe2HqOiA2a
QTuibHkypInU1cDfN7jWCQIUTusc7FRfhtJbvEoAUfIGK/ocwElbuJvrXxlCVpFS
OCKnoVquOoExzVvDJfAjePgyraB80DawWsZZGEATvxrKCEcIy3sEmlUuzBLmn2Rt
XVg0j3ZwSTe9o6UTC9SK3gk25Da1LIlMNTRpAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUQLAhT9qeARAl8ep0SKs45ysr2nowHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1FMQWhUOXFlQVJBbDhlcDBTS3M0NXlz
cjJuby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAY89IAwDQYJ
KoZIhvcNAQELBQADggEBAISOoxzfAN1EOFAiQft2FHsFzibZ77Ipjzg9jAxjJEnz
zemYaWLIxbTl+N6L1YwweERIJ+5bY0j5R3ySElzLGZEaJiDEcJjAePTHH5ooIs4V
2u+9i9f+kcEr/807/hM8YoqYFSy8vVCcN4UuKBm61aqYdBq4O6xwxHfyKlnwiTRr
FlO16F8G7OqzhaIuMKfmuC77LEFyzQ5ZlZKNBasYoPD2V5XT3KPuki6NFo0Lk9jf
DxuPKIJPs3T79PoKtyAkbkCRp0JwEwgXLdWyMjfXZOU9v6/uaMONUVUXFR3PIZPK
o296AlJckqDmw11FgtNVv1Lghw3bWSFTQxvAQ8hIzf8=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org