Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/hA6RwvnfZ6AWQogWfiALzgtyokM.roa
File: hA6RwvnfZ6AWQogWfiALzgtyokM.roa (raw, json)
Hash identifier: 4wbWBY4GOmFqkSXYk2BfZTHmw88MMtvlm0FDdDpUEyA=
Subject key identifier: 84:0E:91:C2:F9:DF:67:A0:16:42:88:16:7E:20:0B:CE:0B:72:A2:43
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0DBA
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/hA6RwvnfZ6AWQogWfiALzgtyokM.roa
Signing time: Mon 15 Jan 2024 21:30:26 +0000
ROA not before: Mon 15 Jan 2024 21:30:26 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9922
IP address blocks: 124.218.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3514 (0xdba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:30:26 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=840E91C2F9DF67A0164288167E200BCE0B72A243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6d:4e:99:51:e5:6c:0a:b8:bd:fc:95:fe:a6:
d8:f2:a4:47:be:1e:42:99:5d:02:42:77:9a:21:51:
87:89:ba:d1:48:ff:a3:74:7e:cb:95:30:e6:e5:54:
84:d5:66:50:6c:29:06:b1:a5:54:96:f0:da:44:b5:
85:ca:73:95:7f:e7:d5:90:06:1d:df:30:4b:c2:97:
5d:87:94:f7:6b:19:54:2f:c8:b1:a2:0b:1a:45:af:
ed:e6:bb:a4:d9:2a:dc:f4:90:51:fb:90:52:bc:53:
1f:44:90:f2:ce:82:7d:f7:a1:8d:38:3b:be:cb:cb:
8a:9a:d5:ab:67:ba:f2:37:f5:35:40:7e:94:9f:b7:
72:39:ae:e1:42:bf:c6:69:8a:20:c8:63:67:94:25:
16:95:78:c8:38:51:6e:59:11:fc:a3:11:52:28:46:
4e:bf:ea:b6:6d:4a:24:62:66:b3:3e:19:ae:04:7f:
be:e0:b4:b0:b2:33:d8:ad:26:55:84:18:b4:39:b3:
ee:1f:41:b8:ac:13:83:77:ed:d0:44:84:af:10:a4:
75:cc:4e:5e:aa:2a:1a:6b:c8:b9:40:8a:28:e7:37:
9e:f9:60:24:09:9e:6f:ee:f9:41:60:81:79:91:fa:
13:0d:94:4d:46:c9:3c:8f:98:59:e0:11:87:40:24:
91:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0E:91:C2:F9:DF:67:A0:16:42:88:16:7E:20:0B:CE:0B:72:A2:43
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/hA6RwvnfZ6AWQogWfiALzgtyokM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.160.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:c6:30:94:ed:95:06:87:16:d3:ef:bd:e3:89:05:11:f9:ad:
6d:77:f1:fa:69:67:51:b1:a8:d0:02:b5:63:59:da:0a:9a:a1:
4a:5b:44:66:4f:43:45:bc:93:67:42:63:a2:62:26:72:22:bc:
e9:94:28:69:0d:b6:f0:f4:ba:97:ec:70:27:9a:7b:c9:59:b2:
c0:98:ae:93:5e:bc:11:90:c1:3d:0b:d0:19:46:1e:af:e5:1d:
8d:e7:fe:34:b4:3b:50:57:8f:96:1e:01:8d:05:4a:89:71:da:
3a:2c:14:19:07:d9:3c:77:e4:c5:b0:70:35:6a:1a:a0:ca:63:
79:99:4f:5c:70:ef:c7:6f:40:e2:51:b4:2b:be:80:ee:23:dd:
fb:06:77:2d:87:80:a5:d6:8f:a3:e2:32:7e:94:e6:8c:a9:f8:
44:00:53:f1:f8:ac:f4:33:74:06:98:d0:09:e4:06:4c:ff:fa:
6f:1c:f4:ed:9c:d2:c5:af:77:27:0c:af:14:ce:77:22:cc:cc:
c6:2b:22:4c:90:4e:dc:b5:80:da:f2:bb:bc:64:1d:23:a7:93:
02:f3:88:26:0b:86:60:0d:d5:65:be:bf:53:1a:c8:a5:83:29:
74:b9:6c:ca:4e:1d:43:b2:f4:a4:09:1a:ae:69:03:10:6b:29:
b6:bf:1d:1b
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDbowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy
MTMwMjZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg0MEU5MUMyRjlERjY3
QTAxNjQyODgxNjdFMjAwQkNFMEI3MkEyNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTbU6ZUeVsCri9/JX+ptjypEe+HkKZXQJCd5ohUYeJutFI/6N0
fsuVMOblVITVZlBsKQaxpVSW8NpEtYXKc5V/59WQBh3fMEvCl12HlPdrGVQvyLGi
CxpFr+3mu6TZKtz0kFH7kFK8Ux9EkPLOgn33oY04O77Ly4qa1atnuvI39TVAfpSf
t3I5ruFCv8ZpiiDIY2eUJRaVeMg4UW5ZEfyjEVIoRk6/6rZtSiRiZrM+Ga4Ef77g
tLCyM9itJlWEGLQ5s+4fQbisE4N37dBEhK8QpHXMTl6qKhpryLlAiijnN575YCQJ
nm/u+UFggXmR+hMNlE1GyTyPmFngEYdAJJEFAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUhA6RwvnfZ6AWQogWfiALzgtyokMwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2hBNlJ3dm5mWjZBV1FvZ1dmaUFMemd0
eW9rTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN82qAwDQYJ
KoZIhvcNAQELBQADggEBAHzGMJTtlQaHFtPvveOJBRH5rW138fppZ1GxqNACtWNZ
2gqaoUpbRGZPQ0W8k2dCY6JiJnIivOmUKGkNtvD0upfscCeae8lZssCYrpNevBGQ
wT0L0BlGHq/lHY3n/jS0O1BXj5YeAY0FSolx2josFBkH2Tx35MWwcDVqGqDKY3mZ
T1xw78dvQOJRtCu+gO4j3fsGdy2HgKXWj6PiMn6U5oyp+EQAU/H4rPQzdAaY0Ank
Bkz/+m8c9O2c0sWvdycMrxTOdyLMzMYrIkyQTty1gNryu7xkHSOnkwLziCYLhmAN
1WW+v1MayKWDKXS5bMpOHUOy9KQJGq5pAxBrKba/HRs=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org