Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/d17AylgmjcKoiBx1VN82XzPsC1M.roa
File: d17AylgmjcKoiBx1VN82XzPsC1M.roa (raw, json)
Hash identifier: G+tnXIg3puhKP5kAZipXP8t+SCdhvX6VT+cb/KxV1/U=
Subject key identifier: 77:5E:C0:CA:58:26:8D:C2:A8:88:1C:75:54:DF:36:5F:33:EC:0B:53
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0DC2
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/d17AylgmjcKoiBx1VN82XzPsC1M.roa
Signing time: Mon 15 Jan 2024 21:30:37 +0000
ROA not before: Mon 15 Jan 2024 21:30:37 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18419
IP address blocks: 124.218.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3522 (0xdc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:30:37 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=775EC0CA58268DC2A8881C7554DF365F33EC0B53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b3:fa:5d:10:43:86:39:35:5c:0d:1c:83:8a:
58:51:fe:06:37:b1:d6:a9:9a:33:29:4e:33:06:db:
ff:26:9f:6d:c1:15:e8:ad:7f:1a:98:fe:a3:38:a8:
70:60:2e:98:61:2d:e9:18:14:8b:02:fb:44:91:53:
1f:34:fa:6e:29:7c:52:c4:63:a8:ec:a2:f3:c5:c0:
60:4d:ec:57:67:f3:2a:f1:ae:26:88:c8:f9:6a:7e:
cb:ff:87:5d:17:d0:3e:ab:c7:79:a1:8b:ed:73:30:
1d:5d:88:30:2a:e4:e4:c6:99:7c:e0:5f:e4:99:a4:
f5:6c:e2:42:fd:89:d0:52:e5:8b:cb:98:85:90:5e:
69:f7:11:0a:ea:3a:40:9e:8b:1e:fc:89:90:b4:e3:
78:00:97:18:90:26:8a:46:5e:4e:a7:9b:77:59:f6:
bb:72:db:61:91:23:13:53:31:58:9c:e0:60:c5:03:
c1:4b:68:3b:ce:1f:42:5c:51:b2:37:83:33:64:54:
fb:f6:a4:83:6b:ef:29:11:bd:eb:5e:bf:b6:ff:7a:
b8:93:ce:7b:7f:af:0f:d4:11:52:4f:b0:1d:d8:e1:
b0:37:13:9f:6b:57:24:3f:02:13:38:89:8f:6f:ce:
72:e1:cf:c6:85:87:96:c9:fc:7d:cf:08:50:4f:7a:
cc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5E:C0:CA:58:26:8D:C2:A8:88:1C:75:54:DF:36:5F:33:EC:0B:53
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/d17AylgmjcKoiBx1VN82XzPsC1M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.112.0/21
Signature Algorithm: sha256WithRSAEncryption
14:62:92:09:24:93:cb:3b:a3:fa:36:1a:aa:db:4a:73:05:d6:
0b:af:99:25:3b:d3:45:30:83:8b:3a:0b:fb:03:79:c6:3e:b3:
09:c1:0d:e0:b2:66:85:d1:c3:bf:4a:e5:27:5d:3c:89:39:11:
5e:b2:b2:53:73:a6:25:f1:25:51:5e:6b:ae:dd:66:05:d1:13:
1f:ae:81:0a:3c:f4:e0:ca:76:6c:8a:a2:53:a3:b1:91:23:94:
7b:b1:fb:97:47:eb:b9:6b:21:aa:f0:15:0b:eb:89:82:02:19:
8e:3f:4b:7a:38:01:ed:de:8d:80:47:10:a8:b2:66:3f:b2:4b:
ea:2b:b5:95:2b:92:c4:12:3e:9d:b8:2a:4e:0e:b4:ec:24:75:
00:1a:47:a1:6b:da:05:68:36:8c:0e:00:93:7d:42:6f:51:21:
00:e0:1f:cb:11:c4:41:25:48:ca:44:de:ee:a9:76:95:7c:0c:
dc:e0:f3:d5:81:18:d6:38:5e:aa:6a:57:39:12:43:1e:fd:44:
e8:0a:af:44:3b:ad:e7:c7:be:4b:ca:b3:d8:0e:fc:a6:23:f2:
1c:8d:e5:31:95:cd:43:14:6c:4f:07:7e:04:05:52:e1:a6:23:
67:5a:c0:16:fd:de:19:86:96:c4:22:2d:d8:15:a6:85:81:a8:
70:1d:a0:6d
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDcIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy
MTMwMzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc3NUVDMENBNTgyNjhE
QzJBODg4MUM3NTU0REYzNjVGMzNFQzBCNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDs/pdEEOGOTVcDRyDilhR/gY3sdapmjMpTjMG2/8mn23BFeit
fxqY/qM4qHBgLphhLekYFIsC+0SRUx80+m4pfFLEY6jsovPFwGBN7Fdn8yrxriaI
yPlqfsv/h10X0D6rx3mhi+1zMB1diDAq5OTGmXzgX+SZpPVs4kL9idBS5YvLmIWQ
Xmn3EQrqOkCeix78iZC043gAlxiQJopGXk6nm3dZ9rty22GRIxNTMVic4GDFA8FL
aDvOH0JcUbI3gzNkVPv2pINr7ykRvetev7b/eriTznt/rw/UEVJPsB3Y4bA3E59r
VyQ/AhM4iY9vznLhz8aFh5bJ/H3PCFBPesx7AgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUd17AylgmjcKoiBx1VN82XzPsC1MwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2QxN0F5bGdtamNLb2lCeDFWTjgyWHpQ
c0MxTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN82nAwDQYJ
KoZIhvcNAQELBQADggEBABRikgkkk8s7o/o2GqrbSnMF1guvmSU700Uwg4s6C/sD
ecY+swnBDeCyZoXRw79K5SddPIk5EV6yslNzpiXxJVFea67dZgXREx+ugQo89ODK
dmyKolOjsZEjlHux+5dH67lrIarwFQvriYICGY4/S3o4Ae3ejYBHEKiyZj+yS+or
tZUrksQSPp24Kk4OtOwkdQAaR6Fr2gVoNowOAJN9Qm9RIQDgH8sRxEElSMpE3u6p
dpV8DNzg89WBGNY4XqpqVzkSQx79ROgKr0Q7refHvkvKs9gO/KYj8hyN5TGVzUMU
bE8HfgQFUuGmI2dawBb93hmGlsQiLdgVpoWBqHAdoG0=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org