Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/UJH46Leu872W0aZLJqwLdR8nBkQ.roa
File: UJH46Leu872W0aZLJqwLdR8nBkQ.roa (raw, json)
Hash identifier: dnk8m4OY4QrV1WMF2hsO7S0Y+vRoFz+CruoRBthZh2w=
Subject key identifier: 50:91:F8:E8:B7:AE:F3:BD:96:D1:A6:4B:26:AC:0B:75:1F:27:06:44
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0D92
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/UJH46Leu872W0aZLJqwLdR8nBkQ.roa
Signing time: Mon 15 Jan 2024 21:29:27 +0000
ROA not before: Mon 15 Jan 2024 21:29:27 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18419
IP address blocks: 124.218.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3474 (0xd92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:29:27 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5091F8E8B7AEF3BD96D1A64B26AC0B751F270644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:43:5b:24:f5:b4:33:3f:02:b6:cc:d3:92:e3:
1a:71:95:4f:9f:fd:d4:e2:4b:d7:94:cf:e2:1f:77:
c2:d1:88:68:f8:a8:35:d1:e9:ea:ee:e3:c8:0e:6e:
9a:a3:ba:5e:8a:f7:0f:61:66:d3:17:f5:8e:ab:25:
ba:cd:96:f5:d9:c3:93:2d:72:4e:7d:59:fb:6f:97:
f9:ed:12:3b:d4:bd:61:20:fd:b0:51:47:d6:f1:1b:
6f:37:09:e2:4a:44:3e:12:06:06:90:7e:12:31:68:
c4:dd:a3:e5:61:d2:ed:29:48:27:38:75:b6:54:c2:
01:2d:98:a9:d3:7a:e5:db:d1:92:db:7d:f7:88:f3:
4f:dd:32:83:1f:44:74:36:5c:1a:24:57:1c:55:c3:
61:ba:05:ef:5b:d3:83:b8:8b:9d:70:f1:22:05:80:
ef:01:57:fc:e4:12:52:c0:42:49:71:b8:8b:bd:fc:
4a:a3:f4:4c:76:2e:e9:6b:e9:c7:1d:09:50:ff:f2:
73:74:bd:39:35:dc:57:d3:02:69:92:5a:9a:4c:96:
1a:79:78:d1:f1:fd:40:29:9b:65:37:9b:38:d0:7b:
f9:84:9d:e5:cb:74:f2:fc:4c:a0:2a:d7:7e:49:bc:
6c:03:6b:c1:2d:1e:f4:54:bd:7c:97:81:cb:96:df:
8e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:91:F8:E8:B7:AE:F3:BD:96:D1:A6:4B:26:AC:0B:75:1F:27:06:44
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/UJH46Leu872W0aZLJqwLdR8nBkQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.192.0/19
Signature Algorithm: sha256WithRSAEncryption
9f:37:34:ac:f1:5c:3f:e2:8c:66:fd:3c:49:56:3f:1f:7f:08:
8f:1e:c0:63:71:64:c3:84:07:25:1c:97:8e:68:39:a3:01:f7:
c5:3f:6a:c4:40:6f:20:e8:7b:05:ef:e3:b1:d7:5f:01:f2:a7:
c2:7d:bc:25:69:63:21:af:09:e5:9e:90:84:12:79:e5:c9:09:
7e:b3:4a:fe:30:af:de:6a:6f:0c:2a:19:08:5f:e2:b1:1a:29:
16:89:4e:09:5b:d6:8e:16:27:3c:0a:92:5b:2c:70:a3:04:d9:
27:fb:e9:a0:bd:34:55:da:05:0f:ff:0c:ce:87:26:cb:6d:17:
3c:b4:06:b0:14:5d:9b:5b:b4:89:3b:f5:32:ce:86:88:f2:4f:
5e:3f:5e:24:d7:f2:55:b9:ed:f4:42:0b:a9:27:a7:f3:bc:92:
79:1b:98:f2:e3:6c:9c:1e:a2:e2:9c:e6:83:6e:3d:17:4c:13:
d0:53:95:03:f2:3f:e8:d7:42:1e:38:a5:b7:fb:e0:8b:b6:0d:
66:79:d2:11:6b:fa:d6:3b:c0:a3:a2:4d:f5:0d:d8:b2:76:97:
0e:ca:05:5c:37:9a:7c:52:3a:42:ef:77:5d:6f:7f:7c:6e:a6:
dd:c2:1a:ad:28:c8:f0:59:6a:75:49:f4:36:a4:7b:e9:ec:27:
05:4b:49:00
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDZIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy
MTI5MjdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDUwOTFGOEU4QjdBRUYz
QkQ5NkQxQTY0QjI2QUMwQjc1MUYyNzA2NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGQ1sk9bQzPwK2zNOS4xpxlU+f/dTiS9eUz+Ifd8LRiGj4qDXR
6eru48gObpqjul6K9w9hZtMX9Y6rJbrNlvXZw5Mtck59Wftvl/ntEjvUvWEg/bBR
R9bxG283CeJKRD4SBgaQfhIxaMTdo+Vh0u0pSCc4dbZUwgEtmKnTeuXb0ZLbffeI
80/dMoMfRHQ2XBokVxxVw2G6Be9b04O4i51w8SIFgO8BV/zkElLAQklxuIu9/Eqj
9Ex2Lulr6ccdCVD/8nN0vTk13FfTAmmSWppMlhp5eNHx/UApm2U3mzjQe/mEneXL
dPL8TKAq135JvGwDa8EtHvRUvXyXgcuW346JAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUUJH46Leu872W0aZLJqwLdR8nBkQwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1VKSDQ2TGV1ODcyVzBhWkxKcXdMZFI4
bkJrUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV82sAwDQYJ
KoZIhvcNAQELBQADggEBAJ83NKzxXD/ijGb9PElWPx9/CI8ewGNxZMOEByUcl45o
OaMB98U/asRAbyDoewXv47HXXwHyp8J9vCVpYyGvCeWekIQSeeXJCX6zSv4wr95q
bwwqGQhf4rEaKRaJTglb1o4WJzwKklsscKME2Sf76aC9NFXaBQ//DM6HJsttFzy0
BrAUXZtbtIk79TLOhojyT14/XiTX8lW57fRCC6knp/O8knkbmPLjbJweouKc5oNu
PRdME9BTlQPyP+jXQh44pbf74Iu2DWZ50hFr+tY7wKOiTfUN2LJ2lw7KBVw3mnxS
OkLvd11vf3xupt3CGq0oyPBZanVJ9Dake+nsJwVLSQA=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org