Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/k2Tw9ILJ3uBRkcP8hS11c_Ko39U.roa
File: k2Tw9ILJ3uBRkcP8hS11c_Ko39U.roa (raw, json)
Hash identifier: wv1bEKWaLF+l/n7gQFnSbguPURIleZ2qYnqH3nFJmaA=
Subject key identifier: 93:64:F0:F4:82:C9:DE:E0:51:91:C3:FC:85:2D:75:73:F2:A8:DF:D5
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0C8C
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/k2Tw9ILJ3uBRkcP8hS11c_Ko39U.roa
Signing time: Mon 15 Jan 2024 21:10:02 +0000
ROA not before: Mon 15 Jan 2024 21:10:02 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7482
IP address blocks: 210.200.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3212 (0xc8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:10:02 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9364F0F482C9DEE05191C3FC852D7573F2A8DFD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:37:28:09:04:86:5c:d9:e9:ff:f8:15:58:
8e:db:da:6f:e0:67:a4:23:2c:02:f6:fc:64:5b:33:
c8:4e:d9:6f:64:72:bb:c4:6e:7e:ee:92:74:5f:49:
7f:a2:09:a8:32:d3:c0:2d:87:85:93:d4:6d:ef:16:
29:45:da:cc:73:ec:ba:77:78:04:6f:e5:81:3a:e0:
d6:a9:f8:53:56:ac:c2:af:0d:d0:28:09:77:93:1a:
70:d5:e2:68:0e:34:99:32:08:9c:1f:c5:ce:82:4d:
8a:61:2a:30:38:d1:52:82:8f:dc:8e:90:03:75:b1:
f3:66:47:1f:44:5d:bc:4d:18:b2:53:9f:c3:2c:d1:
44:39:48:b6:6c:cb:9b:16:97:ed:ef:fc:50:fe:62:
57:45:64:dc:e5:a6:46:44:75:4c:45:3f:d5:44:06:
eb:4c:4d:b3:32:aa:90:9c:b5:a9:7b:b0:c2:f5:e7:
69:f3:83:c1:e7:bf:22:de:de:23:24:31:68:6d:fb:
d3:57:ba:6a:d4:9f:a3:75:f3:fd:ee:73:85:1b:26:
f8:10:21:12:15:e7:09:bd:e6:36:57:b5:48:55:01:
28:0e:fa:6d:95:04:95:e4:98:70:eb:02:69:44:1e:
84:7b:c5:37:4f:64:cb:a5:46:de:be:d9:ff:66:30:
56:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:64:F0:F4:82:C9:DE:E0:51:91:C3:FC:85:2D:75:73:F2:A8:DF:D5
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/k2Tw9ILJ3uBRkcP8hS11c_Ko39U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.128.0/18
Signature Algorithm: sha256WithRSAEncryption
14:9a:f6:de:59:71:3e:5f:79:ca:3f:ec:af:d5:d6:73:e2:14:
0e:8e:70:7d:2d:6d:67:be:4b:da:70:b7:67:f6:88:21:5c:bf:
ea:73:6e:c4:8b:46:65:c6:59:ca:3c:82:59:c7:c9:c1:84:6c:
31:52:fb:06:43:b8:56:e8:be:33:b1:d9:18:7c:ee:d4:81:dd:
f2:d3:de:9e:3b:59:35:cc:ce:58:96:cb:f1:34:b7:04:71:48:
43:92:11:f1:fc:90:68:44:35:df:51:68:d8:e4:66:9b:5c:bd:
09:0a:94:84:7d:57:7b:88:0c:2e:de:b2:ec:df:12:92:c7:fc:
63:5f:bd:a4:88:f3:94:f3:d0:01:0a:ee:26:ce:20:f0:d3:9f:
68:3e:30:d8:12:f3:3b:b5:65:72:75:cb:da:fe:91:a4:02:6c:
a7:72:54:2f:fd:76:97:25:ea:1c:83:84:3e:dd:0c:10:c8:51:
a1:9a:ad:8c:b7:3b:16:89:01:63:2f:0d:2b:fa:e3:4b:e6:bc:
bf:c9:e8:3e:64:40:93:8a:ea:2b:f7:e6:04:45:2a:50:02:4a:
51:30:8c:87:2f:e2:29:05:0c:2f:11:54:67:e1:a4:58:76:07:
89:c3:d1:cd:02:97:e6:94:8a:54:d4:83:d3:87:66:68:e3:39:
af:3b:e1:b6
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDIwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy
MTEwMDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDkzNjRGMEY0ODJDOURF
RTA1MTkxQzNGQzg1MkQ3NTczRjJBOERGRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDG9zcoCQSGXNnp//gVWI7b2m/gZ6QjLAL2/GRbM8hO2W9kcrvE
bn7uknRfSX+iCagy08Ath4WT1G3vFilF2sxz7Lp3eARv5YE64Nap+FNWrMKvDdAo
CXeTGnDV4mgONJkyCJwfxc6CTYphKjA40VKCj9yOkAN1sfNmRx9EXbxNGLJTn8Ms
0UQ5SLZsy5sWl+3v/FD+YldFZNzlpkZEdUxFP9VEButMTbMyqpCctal7sML152nz
g8HnvyLe3iMkMWht+9NXumrUn6N18/3uc4UbJvgQIRIV5wm95jZXtUhVASgO+m2V
BJXkmHDrAmlEHoR7xTdPZMulRt6+2f9mMFbvAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUk2Tw9ILJ3uBRkcP8hS11c/Ko39UwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2syVHc5SUxKM3VCUmtjUDhoUzExY19L
bzM5VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbSyIAwDQYJ
KoZIhvcNAQELBQADggEBABSa9t5ZcT5feco/7K/V1nPiFA6OcH0tbWe+S9pwt2f2
iCFcv+pzbsSLRmXGWco8glnHycGEbDFS+wZDuFbovjOx2Rh87tSB3fLT3p47WTXM
zliWy/E0twRxSEOSEfH8kGhENd9RaNjkZptcvQkKlIR9V3uIDC7esuzfEpLH/GNf
vaSI85Tz0AEK7ibOIPDTn2g+MNgS8zu1ZXJ1y9r+kaQCbKdyVC/9dpcl6hyDhD7d
DBDIUaGarYy3OxaJAWMvDSv640vmvL/J6D5kQJOK6iv35gRFKlACSlEwjIcv4ikF
DC8RVGfhpFh2B4nD0c0Cl+aUilTUg9OHZmjjOa874bY=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org