Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/dq5rxs3wN8dkig0EJ4ctMguE8ZQ.roa
File: dq5rxs3wN8dkig0EJ4ctMguE8ZQ.roa (raw, json)
Hash identifier: Oeyhas40XzwCAxF33H/rmOu7XezgOzxqF6Q3NMpuna0=
Subject key identifier: 76:AE:6B:C6:CD:F0:37:C7:64:8A:0D:04:27:87:2D:32:0B:84:F1:94
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0D82
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/dq5rxs3wN8dkig0EJ4ctMguE8ZQ.roa
Signing time: Mon 15 Jan 2024 21:29:02 +0000
ROA not before: Mon 15 Jan 2024 21:29:02 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 210.201.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3458 (0xd82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:29:02 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=76AE6BC6CDF037C7648A0D0427872D320B84F194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:88:74:63:55:18:b3:63:22:0a:20:8c:a5:
61:28:2f:0e:72:1e:b6:1d:a4:d5:93:c5:28:a5:f4:
88:77:53:72:65:d8:cd:79:7e:64:41:bf:c8:ca:11:
4d:8a:33:ce:17:6f:36:d1:ef:4c:ac:39:c3:ab:dc:
ec:b8:3b:55:dc:d1:98:38:0d:b7:70:f0:5e:e3:cd:
22:56:73:4c:bd:1c:ac:36:68:71:35:73:83:ee:7e:
59:98:39:ac:cb:2c:91:fd:e6:3f:b5:57:ca:d5:21:
f6:81:80:9a:11:7a:35:c9:13:50:de:52:a4:d8:fd:
d5:0d:7b:12:02:7f:d6:d8:98:ed:2d:6c:01:54:80:
f1:b8:0f:90:1d:3e:f0:71:f8:f9:5b:91:18:5d:7c:
2e:7d:81:3a:bc:18:f7:44:01:8e:e7:61:d4:38:a9:
5c:a9:25:4a:28:d7:d1:57:5d:3c:e3:c2:26:e8:98:
07:b9:c2:e7:c1:ca:56:0a:8b:4f:f6:e2:9c:15:44:
75:e0:4c:77:ad:44:f2:c7:01:c4:26:ac:68:75:7a:
3e:92:39:4e:5b:f1:74:db:dc:ff:4d:db:51:67:39:
a6:21:12:8b:25:40:92:cf:9f:9a:b8:9f:a2:b9:3f:
c0:3d:12:b8:02:4a:a8:0d:1f:2f:17:36:80:8a:2c:
62:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AE:6B:C6:CD:F0:37:C7:64:8A:0D:04:27:87:2D:32:0B:84:F1:94
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/dq5rxs3wN8dkig0EJ4ctMguE8ZQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.72.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:9c:7f:0b:a9:91:be:82:9f:1d:08:07:38:9c:8a:d7:6c:4d:
5e:f3:e2:f9:18:e1:3e:32:99:71:01:00:80:bb:92:c7:14:e6:
15:e5:71:c4:c6:fc:87:a8:f4:4c:36:47:87:ad:78:0d:2c:24:
16:a0:f6:83:d5:4f:e2:73:97:25:36:9e:9f:f0:66:4d:91:fa:
16:80:42:58:9a:c1:8d:63:e8:98:a2:45:db:e1:b2:fa:27:a9:
8d:33:b0:c7:2a:56:26:b4:48:55:da:7d:84:a3:fa:47:39:6f:
92:cf:82:34:d6:81:19:13:a0:25:73:ab:1e:e4:a8:a4:e8:6f:
cc:6c:c3:4c:10:ca:f6:1c:ab:76:d6:b3:ec:4b:c3:3e:da:5d:
6d:b0:a5:fd:ee:8b:50:a4:bc:0c:af:cd:c0:9a:12:5b:95:bb:
5c:96:0f:f0:3b:ac:fd:b3:a5:9f:10:66:8a:8b:2e:9f:e8:91:
7d:33:21:33:b0:e1:b5:f9:a7:74:68:32:30:16:5f:9c:5a:f4:
46:18:1c:b0:71:0d:3a:ea:72:6a:0b:0e:a4:01:85:03:7b:ea:
f8:3b:b4:4a:28:ef:0c:83:d6:d5:c7:9a:2c:56:9c:42:53:5c:
5b:0c:2e:0f:7a:3d:48:19:52:c3:e3:e0:62:2a:9b:bf:57:c9:
b7:d3:c5:7e
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDYIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy
MTI5MDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc2QUU2QkM2Q0RGMDM3
Qzc2NDhBMEQwNDI3ODcyRDMyMEI4NEYxOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8xYh0Y1UYs2MiCiCMpWEoLw5yHrYdpNWTxSil9Ih3U3Jl2M15
fmRBv8jKEU2KM84XbzbR70ysOcOr3Oy4O1Xc0Zg4Dbdw8F7jzSJWc0y9HKw2aHE1
c4PuflmYOazLLJH95j+1V8rVIfaBgJoRejXJE1DeUqTY/dUNexICf9bYmO0tbAFU
gPG4D5AdPvBx+PlbkRhdfC59gTq8GPdEAY7nYdQ4qVypJUoo19FXXTzjwibomAe5
wufBylYKi0/24pwVRHXgTHetRPLHAcQmrGh1ej6SOU5b8XTb3P9N21FnOaYhEosl
QJLPn5q4n6K5P8A9ErgCSqgNHy8XNoCKLGJtAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUdq5rxs3wN8dkig0EJ4ctMguE8ZQwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2RxNXJ4czN3Tjhka2lnMEVKNGN0TWd1
RThaUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSyUgwDQYJ
KoZIhvcNAQELBQADggEBAMWcfwupkb6Cnx0IBzicitdsTV7z4vkY4T4ymXEBAIC7
kscU5hXlccTG/Ieo9Ew2R4eteA0sJBag9oPVT+JzlyU2np/wZk2R+haAQliawY1j
6JiiRdvhsvonqY0zsMcqVia0SFXafYSj+kc5b5LPgjTWgRkToCVzqx7kqKTob8xs
w0wQyvYcq3bWs+xLwz7aXW2wpf3ui1CkvAyvzcCaEluVu1yWD/A7rP2zpZ8QZoqL
Lp/okX0zITOw4bX5p3RoMjAWX5xa9EYYHLBxDTrqcmoLDqQBhQN76vg7tEoo7wyD
1tXHmixWnEJTXFsMLg96PUgZUsPj4GIqm79XybfTxX4=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org