Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Shj-ctTJVI3cQ5uL24F-O70GT-4.roa
File: Shj-ctTJVI3cQ5uL24F-O70GT-4.roa (raw, json)
Hash identifier: +ZPWCVd5iVsL+saF2eo12LuNI6KLawmR2M2N5B+p/Fs=
Subject key identifier: 4A:18:FE:72:D4:C9:54:8D:DC:43:9B:8B:DB:81:7E:3B:BD:06:4F:EE
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0D6C
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Shj-ctTJVI3cQ5uL24F-O70GT-4.roa
Signing time: Mon 15 Jan 2024 21:26:31 +0000
ROA not before: Mon 15 Jan 2024 21:26:31 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 22787
IP address blocks: 210.58.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3436 (0xd6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:26:31 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4A18FE72D4C9548DDC439B8BDB817E3BBD064FEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a4:aa:9e:10:6f:fc:36:ca:34:1c:44:4d:8c:
d1:3e:e2:9f:15:b7:a3:8c:49:67:8c:a9:d9:7d:79:
53:4c:31:2a:a7:96:02:63:01:91:15:77:4d:33:91:
1c:40:92:86:17:3f:e0:fc:13:4e:bb:eb:2a:19:11:
af:2f:e7:8c:a8:86:a8:d9:2e:fe:bb:dc:07:b9:3b:
76:c8:79:3f:85:59:65:77:29:de:5f:21:da:eb:9b:
ac:c3:63:68:ce:93:25:ea:1e:d1:e8:99:5d:6d:c2:
5e:c3:f1:f2:4a:a7:87:0e:ea:dd:83:13:b0:09:bd:
b5:f1:07:86:53:71:52:91:17:da:75:52:93:71:1a:
09:2a:51:be:da:62:da:03:cd:bc:a2:8e:a9:02:9a:
50:21:3d:78:7a:a5:93:b9:2e:9d:d5:8a:a0:96:74:
69:23:7b:de:bd:fb:ac:91:1c:ea:a0:be:89:74:c4:
9a:f8:dc:e3:1e:23:93:d5:7d:06:b1:62:b1:6f:da:
4a:52:a4:c6:8b:d9:f0:dd:61:4a:bb:20:f8:c1:c5:
34:ac:15:ba:26:7c:e5:ec:30:91:77:53:65:82:c9:
1e:a1:5a:60:06:40:39:39:25:c8:c3:dc:84:b7:91:
de:1f:ab:34:c4:db:68:62:dd:54:f5:9f:7e:82:55:
80:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:18:FE:72:D4:C9:54:8D:DC:43:9B:8B:DB:81:7E:3B:BD:06:4F:EE
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Shj-ctTJVI3cQ5uL24F-O70GT-4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.58.91.0/24
Signature Algorithm: sha256WithRSAEncryption
65:0c:21:4d:89:2f:af:c6:a7:9d:7d:d2:ac:a3:ab:bc:79:37:
3c:e1:02:30:de:48:b6:d5:19:61:0c:59:38:e1:5a:a5:af:a0:
b6:26:b1:9b:92:82:14:2b:d2:36:6e:99:ad:c9:8d:f9:80:f6:
cc:0e:aa:ac:12:48:c5:37:d6:51:b3:0c:85:9c:7a:87:ba:67:
07:c0:f6:20:90:62:22:93:a9:b7:14:d1:c5:c1:41:64:c1:7b:
41:54:99:03:3d:a9:b3:1a:16:d9:1f:f9:ad:a8:93:9a:e2:b1:
9d:21:92:3e:ec:58:f2:03:4d:49:58:7e:77:19:9f:fa:60:65:
e2:96:23:ae:49:cb:ba:08:ed:ed:4c:8f:cf:80:cd:fe:b0:a3:
ed:91:5a:f3:13:04:47:de:ce:6b:48:61:5b:8a:dd:7a:8f:ef:
c7:99:4f:02:87:87:ac:f1:6e:90:17:c9:31:12:26:38:9c:f9:
cb:69:1b:9d:03:34:2e:ba:6e:52:cc:27:33:b8:03:8a:b8:ec:
88:6a:c8:29:62:ce:68:9e:a9:45:8b:c6:7d:9b:b1:b8:5a:fa:
c5:60:a0:8a:a0:16:e6:bc:3c:d8:61:72:11:24:23:f3:ee:d6:
63:08:68:a4:b0:8e:76:a7:83:4f:c1:57:95:14:20:77:a3:35:
75:2e:45:0e
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDWwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy
MTI2MzFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDRBMThGRTcyRDRDOTU0
OEREQzQzOUI4QkRCODE3RTNCQkQwNjRGRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDppKqeEG/8Nso0HERNjNE+4p8Vt6OMSWeMqdl9eVNMMSqnlgJj
AZEVd00zkRxAkoYXP+D8E0676yoZEa8v54yohqjZLv673Ae5O3bIeT+FWWV3Kd5f
Idrrm6zDY2jOkyXqHtHomV1twl7D8fJKp4cO6t2DE7AJvbXxB4ZTcVKRF9p1UpNx
GgkqUb7aYtoDzbyijqkCmlAhPXh6pZO5Lp3ViqCWdGkje969+6yRHOqgvol0xJr4
3OMeI5PVfQaxYrFv2kpSpMaL2fDdYUq7IPjBxTSsFbomfOXsMJF3U2WCyR6hWmAG
QDk5JcjD3IS3kd4fqzTE22hi3VT1n36CVYCjAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUShj+ctTJVI3cQ5uL24F+O70GT+4wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Noai1jdFRKVkkzY1E1dUwyNEYtTzcw
R1QtNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSOlswDQYJ
KoZIhvcNAQELBQADggEBAGUMIU2JL6/Gp5190qyjq7x5NzzhAjDeSLbVGWEMWTjh
WqWvoLYmsZuSghQr0jZuma3JjfmA9swOqqwSSMU31lGzDIWceoe6ZwfA9iCQYiKT
qbcU0cXBQWTBe0FUmQM9qbMaFtkf+a2ok5risZ0hkj7sWPIDTUlYfncZn/pgZeKW
I65Jy7oI7e1Mj8+Azf6wo+2RWvMTBEfezmtIYVuK3XqP78eZTwKHh6zxbpAXyTES
Jjic+ctpG50DNC66blLMJzO4A4q47IhqyClizmieqUWLxn2bsbha+sVgoIqgFua8
PNhhchEkI/Pu1mMIaKSwjnang0/BV5UUIHejNXUuRQ4=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org