Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/kTYKNVjsK10haJSJhpmvco1IMVw.roa
File: kTYKNVjsK10haJSJhpmvco1IMVw.roa (raw, json)
Hash identifier: bFMj5mpqX9l4Ii/aajUtCVwtyKUQG4McdwWu2Q43iRo=
Subject key identifier: 91:36:0A:35:58:EC:2B:5D:21:68:94:89:86:99:AF:72:8D:48:31:5C
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0D2C
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/kTYKNVjsK10haJSJhpmvco1IMVw.roa
Signing time: Mon 15 Jan 2024 21:25:07 +0000
ROA not before: Mon 15 Jan 2024 21:25:07 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7482
IP address blocks: 210.85.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3372 (0xd2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:25:07 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=91360A3558EC2B5D216894898699AF728D48315C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fb:b6:bc:07:8c:65:76:f0:3d:4d:7d:59:51:
ac:6c:28:58:c4:07:66:a0:4d:02:45:a4:36:39:13:
07:73:39:37:35:33:6d:cd:3d:fe:0c:73:2d:06:10:
4b:01:32:c8:5f:c3:15:19:9b:0a:f8:04:4c:df:46:
1a:f5:1a:40:eb:d4:e7:54:20:09:ef:6d:9a:60:50:
e2:d8:7c:4a:99:4a:46:a4:34:c0:7f:c5:c6:f6:e4:
93:de:1a:71:16:e1:97:25:77:06:fa:0c:e7:df:7a:
fe:e3:b6:e7:f9:28:23:50:ea:43:8b:3e:9f:69:45:
a7:7e:6b:4d:2a:77:c4:e8:05:e4:65:34:99:db:1f:
d9:3e:f9:f7:d7:76:d4:3a:3f:0d:90:c1:1d:21:4c:
9a:39:39:15:4c:48:a5:ec:9c:15:20:d4:27:40:6d:
32:9e:df:96:9a:71:0d:38:cf:2b:b7:3e:e8:05:47:
72:1f:30:c9:aa:cc:3c:64:f1:ac:79:29:12:50:c7:
16:da:e4:0f:22:77:d2:0f:58:62:cb:6a:cb:34:f3:
cd:fc:fb:ac:d1:71:f8:39:15:91:6f:0d:21:b6:9e:
91:9f:63:d5:9c:d1:50:7f:ad:b3:12:ba:c3:65:3b:
13:64:88:44:0c:22:af:48:d7:39:76:a9:48:2c:ca:
38:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:36:0A:35:58:EC:2B:5D:21:68:94:89:86:99:AF:72:8D:48:31:5C
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/kTYKNVjsK10haJSJhpmvco1IMVw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5f:1b:83:2f:b1:77:53:96:12:5a:1b:74:f5:67:46:70:2c:82:
27:7b:95:55:b7:d0:c7:25:03:36:1f:59:e3:1c:4b:0d:bf:82:
28:17:26:24:06:32:d2:37:2b:a1:c0:a9:6e:f7:ac:0c:6d:5d:
99:e0:2a:0e:a9:86:9c:b7:d4:e2:55:1e:b4:06:83:9d:83:2b:
1d:2a:6e:8c:4e:50:60:15:88:9b:e5:0a:9d:c4:c1:0b:e6:91:
86:4f:95:82:66:4f:76:13:f2:1e:04:cd:cd:39:09:f9:0e:25:
04:b1:a1:42:d3:f0:b8:3b:51:e5:2b:cf:da:21:e6:86:d7:a0:
d0:01:3f:46:49:4d:f0:59:e7:dc:cd:ef:9e:39:f6:e5:5c:12:
c2:24:0d:f1:84:80:55:be:e3:30:87:d0:56:d6:2f:3e:6d:e8:
f0:a4:3e:0c:bc:5a:53:5d:76:e6:b0:f6:2a:8c:e1:e2:02:0b:
2a:60:d0:24:2a:07:6b:1c:dd:68:ae:a9:ed:02:ac:a5:42:f9:
80:63:73:cf:98:59:fa:66:e4:73:75:42:04:ba:63:35:6e:97:
3f:c7:38:99:a2:6b:38:9c:aa:9f:6d:63:8d:cd:3d:6f:e8:87:
81:9d:df:bc:81:13:52:16:c7:6c:95:8d:6c:a9:0e:d8:d5:04:
8e:c9:b4:fa
-----BEGIN CERTIFICATE-----
MIIEyzCCA7OgAwIBAgICDSwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy
MTI1MDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDkxMzYwQTM1NThFQzJC
NUQyMTY4OTQ4OTg2OTlBRjcyOEQ0ODMxNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDN+7a8B4xldvA9TX1ZUaxsKFjEB2agTQJFpDY5EwdzOTc1M23N
Pf4Mcy0GEEsBMshfwxUZmwr4BEzfRhr1GkDr1OdUIAnvbZpgUOLYfEqZSkakNMB/
xcb25JPeGnEW4Zcldwb6DOffev7jtuf5KCNQ6kOLPp9pRad+a00qd8ToBeRlNJnb
H9k++ffXdtQ6Pw2QwR0hTJo5ORVMSKXsnBUg1CdAbTKe35aacQ04zyu3PugFR3If
MMmqzDxk8ax5KRJQxxba5A8id9IPWGLLass08838+6zRcfg5FZFvDSG2npGfY9Wc
0VB/rbMSusNlOxNkiEQMIq9I1zl2qUgsyji/AgMBAAGjggHnMIIB4zAdBgNVHQ4E
FgQUkTYKNVjsK10haJSJhpmvco1IMVwwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2tUWUtOVmpzSzEwaGFKU0pocG12Y28x
SU1Wdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDSVTANBgkq
hkiG9w0BAQsFAAOCAQEAXxuDL7F3U5YSWht09WdGcCyCJ3uVVbfQxyUDNh9Z4xxL
Db+CKBcmJAYy0jcrocCpbvesDG1dmeAqDqmGnLfU4lUetAaDnYMrHSpujE5QYBWI
m+UKncTBC+aRhk+VgmZPdhPyHgTNzTkJ+Q4lBLGhQtPwuDtR5SvP2iHmhteg0AE/
RklN8Fnn3M3vnjn25VwSwiQN8YSAVb7jMIfQVtYvPm3o8KQ+DLxaU1125rD2Kozh
4gILKmDQJCoHaxzdaK6p7QKspUL5gGNzz5hZ+mbkc3VCBLpjNW6XP8c4maJrOJyq
n21jjc09b+iHgZ3fvIETUhbHbJWNbKkO2NUEjsm0+g==
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org