Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/_iC0hQcDuA9P2YVvmPcSBMtUgyU.roa
File: _iC0hQcDuA9P2YVvmPcSBMtUgyU.roa (raw, json)
Hash identifier: FiHFMZ8zPnZkhdGrEXjNsS9oXac7FZZnQX7dBjc7xgk=
Subject key identifier: FE:20:B4:85:07:03:B8:0F:4F:D9:85:6F:98:F7:12:04:CB:54:83:25
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0DD4
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/_iC0hQcDuA9P2YVvmPcSBMtUgyU.roa
Signing time: Mon 15 Jan 2024 21:34:52 +0000
ROA not before: Mon 15 Jan 2024 21:34:52 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 203.201.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3540 (0xdd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:34:52 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FE20B4850703B80F4FD9856F98F71204CB548325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:95:c4:b1:7d:76:26:be:2b:e0:9c:59:70:94:
ce:82:2a:b7:bb:26:8f:ba:f3:f1:ec:98:f3:6d:8e:
22:06:56:d7:a0:fc:58:c4:f1:56:43:76:fe:d2:c5:
e1:b1:47:d4:04:ac:ae:17:8e:c1:cd:64:7a:43:17:
df:c4:85:5a:e1:fd:9c:3c:98:0a:9e:0f:74:08:c2:
31:ed:21:8e:6a:cf:b7:7e:4a:e1:ce:a2:68:60:56:
57:8f:28:ad:95:e7:fc:19:d4:b3:1d:c4:7e:42:2c:
c4:c0:bf:f9:82:a1:9b:61:62:bd:c7:3c:f2:53:9d:
bb:f0:49:5f:35:e2:d3:5f:90:e9:01:7b:69:eb:00:
7f:95:82:f3:8d:82:39:ad:7d:24:e1:90:40:2a:26:
b1:b4:be:bb:51:36:c7:a2:f4:e3:8d:40:6a:8a:98:
ef:99:9b:6c:42:b8:25:16:f7:6e:97:a0:45:db:c3:
82:db:61:bc:19:5f:92:3d:4c:32:57:1e:84:ea:11:
39:01:5a:84:14:9b:77:a0:ae:f6:98:df:87:1e:d1:
8d:60:1b:1c:f7:21:38:26:fe:56:cc:48:9b:0a:2f:
c0:ea:d2:7f:03:1f:8f:92:0e:ff:a1:c6:ce:48:bc:
06:cc:44:f8:ee:e8:18:ff:30:54:79:da:26:1d:b9:
0e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:20:B4:85:07:03:B8:0F:4F:D9:85:6F:98:F7:12:04:CB:54:83:25
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/_iC0hQcDuA9P2YVvmPcSBMtUgyU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.201.32.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:b9:ff:57:fe:50:c1:3b:cf:18:f9:cb:ff:d8:f5:30:bc:1d:
bc:c8:e8:71:af:16:9e:06:86:b6:f6:87:20:cf:d2:99:ac:1c:
8a:56:49:41:e1:10:9a:34:61:9e:63:3d:3e:d6:68:98:51:31:
f1:9b:21:cb:5b:73:3a:c7:b4:cc:e8:50:53:17:58:44:d3:8e:
4a:f4:75:3e:f0:84:f7:e9:62:bb:2b:2d:c3:b6:5b:e3:97:ec:
3e:51:29:39:f3:3f:d5:b9:b9:a8:89:dd:6b:ad:c5:49:52:8e:
97:81:fa:61:ce:c3:9a:5e:61:6a:a3:5f:7a:f9:93:84:ab:d1:
2e:3a:88:6c:f5:a8:07:fb:78:33:9a:54:72:da:39:6c:08:8b:
39:a1:c4:9e:47:73:12:06:ba:35:99:8d:c2:13:40:01:df:0a:
bc:79:10:e9:b6:e8:05:e1:3a:dd:d1:25:33:af:17:d8:e4:6f:
dd:70:0c:81:47:0a:04:27:45:23:e4:5b:0e:d6:05:12:b4:9c:
8e:fa:f5:04:17:f1:0f:ec:e1:aa:a5:9f:49:a2:a2:46:43:b5:
c0:c5:fc:1b:47:ee:ee:45:31:94:6f:85:71:3c:d5:3c:30:c3:
83:92:aa:55:6c:ce:ee:97:6c:a4:04:0f:87:08:c6:bb:9e:41:
3d:21:be:82
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDdQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy
MTM0NTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZFMjBCNDg1MDcwM0I4
MEY0RkQ5ODU2Rjk4RjcxMjA0Q0I1NDgzMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhlcSxfXYmvivgnFlwlM6CKre7Jo+68/HsmPNtjiIGVteg/FjE
8VZDdv7SxeGxR9QErK4XjsHNZHpDF9/EhVrh/Zw8mAqeD3QIwjHtIY5qz7d+SuHO
omhgVlePKK2V5/wZ1LMdxH5CLMTAv/mCoZthYr3HPPJTnbvwSV814tNfkOkBe2nr
AH+VgvONgjmtfSThkEAqJrG0vrtRNsei9OONQGqKmO+Zm2xCuCUW926XoEXbw4Lb
YbwZX5I9TDJXHoTqETkBWoQUm3egrvaY34ce0Y1gGxz3ITgm/lbMSJsKL8Dq0n8D
H4+SDv+hxs5IvAbMRPju6Bj/MFR52iYduQ5FAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQU/iC0hQcDuA9P2YVvmPcSBMtUgyUwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL19pQzBoUWNEdUE5UDJZVnZtUGNTQk10
VWd5VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATLySAwDQYJ
KoZIhvcNAQELBQADggEBAFy5/1f+UME7zxj5y//Y9TC8HbzI6HGvFp4Ghrb2hyDP
0pmsHIpWSUHhEJo0YZ5jPT7WaJhRMfGbIctbczrHtMzoUFMXWETTjkr0dT7whPfp
YrsrLcO2W+OX7D5RKTnzP9W5uaiJ3WutxUlSjpeB+mHOw5peYWqjX3r5k4Sr0S46
iGz1qAf7eDOaVHLaOWwIizmhxJ5HcxIGujWZjcITQAHfCrx5EOm26AXhOt3RJTOv
F9jkb91wDIFHCgQnRSPkWw7WBRK0nI769QQX8Q/s4aqln0miokZDtcDF/BtH7u5F
MZRvhXE81Twww4OSqlVszu6XbKQED4cIxrueQT0hvoI=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org