Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/TwelWL-9WTrAhB0Pp_HkK9eDVfg.roa
File: TwelWL-9WTrAhB0Pp_HkK9eDVfg.roa (raw, json)
Hash identifier: EsZ3vRlygGjoLRwBm+msz+GVnwt/7yqdq6MHv2X7F4U=
Subject key identifier: 4F:07:A5:58:BF:BD:59:3A:C0:84:1D:0F:A7:F1:E4:2B:D7:83:55:F8
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0CAE
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/TwelWL-9WTrAhB0Pp_HkK9eDVfg.roa
Signing time: Mon 15 Jan 2024 21:10:39 +0000
ROA not before: Mon 15 Jan 2024 21:10:39 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7482
IP address blocks: 210.201.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3246 (0xcae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:10:39 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4F07A558BFBD593AC0841D0FA7F1E42BD78355F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d9:62:fa:dc:f1:f8:61:78:f5:5d:bc:75:cd:
b4:f5:38:6a:d4:0d:87:a0:4f:ce:cc:0a:48:4f:0d:
5c:18:08:13:8f:30:32:2a:a6:22:a1:58:f1:28:42:
21:7e:49:0a:cc:1f:b2:e2:bf:f6:fd:8e:1b:55:93:
7d:52:af:fc:01:d6:50:d6:6c:70:1f:99:d3:df:ce:
a8:71:bc:b1:bb:17:b5:cb:66:eb:97:7e:d4:73:86:
9e:4e:ee:dd:e1:98:f4:13:82:14:23:7e:b4:3f:cb:
3d:60:92:2f:a1:c8:aa:6a:f6:51:05:2b:e8:34:28:
4f:f2:ec:1e:18:51:1c:70:b0:31:6f:01:e5:df:d0:
dd:d0:bd:3c:c7:85:4d:02:09:14:e4:49:56:1f:d5:
9f:8f:56:71:10:6a:59:f4:8e:d7:78:9b:20:f0:4a:
99:b5:da:09:60:dd:be:bb:2d:22:ea:54:79:d8:a2:
4f:ca:93:4f:78:79:73:7e:7d:e6:ae:3c:a7:09:8e:
e6:c7:4e:42:9b:34:96:a1:3d:e3:ab:fc:04:4b:52:
3d:aa:c0:a3:d2:43:3a:48:b5:92:f9:3b:2e:04:f6:
d8:7b:0a:d8:8b:14:d5:87:1b:cd:2c:39:f5:32:ac:
6b:74:fb:86:78:bd:cf:ff:a0:eb:a7:9a:fb:23:35:
d9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:07:A5:58:BF:BD:59:3A:C0:84:1D:0F:A7:F1:E4:2B:D7:83:55:F8
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/TwelWL-9WTrAhB0Pp_HkK9eDVfg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.192.0/18
Signature Algorithm: sha256WithRSAEncryption
65:05:0e:cf:23:23:7d:05:41:ce:29:04:8d:be:8f:57:9f:e5:
64:03:23:87:5d:65:d6:dc:5c:cf:ed:9f:91:3a:54:7f:21:18:
aa:63:4f:fe:e8:29:4e:92:5d:c8:8b:fe:5d:65:9b:4c:09:98:
6a:b2:e6:03:55:7a:60:7d:7a:8f:d4:5d:be:64:bc:fc:af:80:
df:6c:5a:9c:0f:c0:1c:32:0f:a6:45:6b:e9:f9:bd:ce:85:ed:
b9:00:40:18:c4:e0:81:6e:35:11:2f:05:36:3c:27:55:21:55:
84:6c:2b:12:28:67:30:80:04:24:86:65:ee:cd:c3:8a:37:17:
52:a1:e4:ef:d7:56:f2:06:e3:dd:64:da:fd:68:8f:f7:b6:76:
00:47:85:a2:49:b9:e1:60:60:c7:32:0e:6b:d5:f7:8b:db:aa:
23:ff:aa:70:66:bd:10:57:1a:20:7d:af:b9:9e:98:af:c3:2b:
fc:29:e2:39:ef:4c:b2:8b:35:f7:48:00:97:47:3e:37:f1:24:
c6:4b:44:90:af:98:bf:39:c1:6c:b9:e2:b1:c4:78:ee:c6:fb:
bb:8d:f5:55:c2:69:d2:19:03:86:9b:c6:34:92:d5:7d:b3:60:
23:28:6c:d5:0a:00:41:aa:ea:94:2d:ed:20:74:1d:66:a4:86:
4c:a4:cf:62
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy
MTEwMzlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDRGMDdBNTU4QkZCRDU5
M0FDMDg0MUQwRkE3RjFFNDJCRDc4MzU1RjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCV2WL63PH4YXj1Xbx1zbT1OGrUDYegT87MCkhPDVwYCBOPMDIq
piKhWPEoQiF+SQrMH7Liv/b9jhtVk31Sr/wB1lDWbHAfmdPfzqhxvLG7F7XLZuuX
ftRzhp5O7t3hmPQTghQjfrQ/yz1gki+hyKpq9lEFK+g0KE/y7B4YURxwsDFvAeXf
0N3QvTzHhU0CCRTkSVYf1Z+PVnEQaln0jtd4myDwSpm12glg3b67LSLqVHnYok/K
k094eXN+feauPKcJjubHTkKbNJahPeOr/ARLUj2qwKPSQzpItZL5Oy4E9th7CtiL
FNWHG80sOfUyrGt0+4Z4vc//oOunmvsjNdmbAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUTwelWL+9WTrAhB0Pp/HkK9eDVfgwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1R3ZWxXTC05V1RyQWhCMFBwX0hrSzll
RFZmZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbSycAwDQYJ
KoZIhvcNAQELBQADggEBAGUFDs8jI30FQc4pBI2+j1ef5WQDI4ddZdbcXM/tn5E6
VH8hGKpjT/7oKU6SXciL/l1lm0wJmGqy5gNVemB9eo/UXb5kvPyvgN9sWpwPwBwy
D6ZFa+n5vc6F7bkAQBjE4IFuNREvBTY8J1UhVYRsKxIoZzCABCSGZe7Nw4o3F1Kh
5O/XVvIG491k2v1oj/e2dgBHhaJJueFgYMcyDmvV94vbqiP/qnBmvRBXGiB9r7me
mK/DK/wp4jnvTLKLNfdIAJdHPjfxJMZLRJCvmL85wWy54rHEeO7G+7uN9VXCadIZ
A4abxjSS1X2zYCMobNUKAEGq6pQt7SB0HWakhkykz2I=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org