Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/upz9_DSYocvx4zYrYYRQXEoYuHU.roa
File: upz9_DSYocvx4zYrYYRQXEoYuHU.roa (raw, json)
Hash identifier: H2l+ITMjivfWGJJfYd+2bCQeGIH+Fo72XvBdPJST6ZI=
Subject key identifier: BA:9C:FD:FC:34:98:A1:CB:F1:E3:36:2B:61:84:50:5C:4A:18:B8:75
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0C4C
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/upz9_DSYocvx4zYrYYRQXEoYuHU.roa
Signing time: Mon 15 Jan 2024 21:08:55 +0000
ROA not before: Mon 15 Jan 2024 21:08:55 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24155
IP address blocks: 203.207.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3148 (0xc4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:08:55 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=BA9CFDFC3498A1CBF1E3362B6184505C4A18B875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6b:73:dc:89:12:4e:b8:85:ae:5a:04:b4:64:
6e:ed:47:b4:51:39:f2:2f:c3:3a:80:20:1b:d9:17:
5d:df:f6:cc:38:aa:f9:c0:d7:62:40:7a:d5:f6:58:
64:4b:cd:74:db:e2:f5:06:c0:4a:42:d0:b7:fd:ae:
e1:12:18:e0:d9:eb:c4:45:b7:7d:4b:cf:ed:0d:bd:
f2:3f:57:29:d0:15:eb:17:14:f5:dc:2f:90:2b:8a:
30:93:31:a4:ed:97:6d:bd:6d:01:81:66:5c:7f:bf:
f5:7e:3d:26:a9:7d:d5:f8:17:50:7b:9c:cb:42:d4:
21:ad:03:c6:fc:6b:dd:0b:90:bf:22:ba:41:aa:0d:
19:ec:ab:9c:c9:7c:1c:ee:0a:16:3e:ee:b3:18:d4:
d5:93:b5:c5:f8:fe:2b:55:2c:fa:4f:af:a4:df:96:
0b:7e:a4:6e:86:4d:5e:ef:2c:43:90:4e:c9:02:41:
59:24:56:c2:92:2e:60:c0:9a:e2:11:07:08:a5:49:
79:7b:5a:0f:2d:2e:a6:c0:b7:67:45:b2:91:db:04:
36:3c:50:6c:f7:36:3d:c9:d3:5b:d7:26:bd:76:04:
29:81:b9:17:e7:78:2f:47:5b:70:18:ec:e5:e6:91:
5a:e1:51:fd:24:66:c6:bf:17:08:c3:66:2c:70:15:
d6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9C:FD:FC:34:98:A1:CB:F1:E3:36:2B:61:84:50:5C:4A:18:B8:75
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/upz9_DSYocvx4zYrYYRQXEoYuHU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.207.32.0/20
Signature Algorithm: sha256WithRSAEncryption
94:1f:54:12:6b:52:e8:29:ab:fb:d9:e6:a8:d9:3e:b2:20:a4:
60:8d:e8:f7:c2:e4:55:22:2e:1e:2b:7c:d1:3e:73:00:09:af:
7a:e9:34:3d:d1:d0:ec:f7:70:b7:a2:c9:69:b3:63:d5:68:f2:
8a:cc:48:d9:8e:f3:9c:4a:32:28:cb:d8:7c:4c:90:04:f7:e7:
c5:b6:13:9c:8f:c7:1c:9a:d2:85:31:51:a6:08:ba:09:c9:60:
fc:00:66:46:99:4e:86:5f:3d:44:27:a3:ee:54:31:66:34:82:
61:66:08:ae:9a:84:80:00:9f:78:6e:69:f7:bc:58:c2:17:e1:
91:ac:48:59:d4:27:27:20:a8:10:8f:c0:b7:c8:0e:b6:4d:0c:
e3:df:5b:7b:7f:03:9a:80:d4:81:c8:c4:c1:2e:c4:74:66:cb:
f4:39:e5:d2:ac:f0:30:16:35:1d:94:42:a4:3a:f4:c7:71:ec:
bb:a3:ad:18:c9:75:8d:b1:d5:7b:e4:b5:34:f6:1d:6c:2c:2a:
86:50:0c:3d:1b:51:60:5d:cb:22:a2:e0:64:b6:d2:30:bd:6b:
31:8e:86:38:40:45:c5:e6:be:c6:e9:ad:d1:bd:c3:2e:f9:a5:
91:3f:f6:04:81:42:5e:92:9f:d1:dd:05:23:10:78:7c:87:d1:
cf:eb:98:2a
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDEwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy
MTA4NTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEJBOUNGREZDMzQ5OEEx
Q0JGMUUzMzYyQjYxODQ1MDVDNEExOEI4NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVa3PciRJOuIWuWgS0ZG7tR7RROfIvwzqAIBvZF13f9sw4qvnA
12JAetX2WGRLzXTb4vUGwEpC0Lf9ruESGODZ68RFt31Lz+0NvfI/VynQFesXFPXc
L5ArijCTMaTtl229bQGBZlx/v/V+PSapfdX4F1B7nMtC1CGtA8b8a90LkL8iukGq
DRnsq5zJfBzuChY+7rMY1NWTtcX4/itVLPpPr6Tflgt+pG6GTV7vLEOQTskCQVkk
VsKSLmDAmuIRBwilSXl7Wg8tLqbAt2dFspHbBDY8UGz3Nj3J01vXJr12BCmBuRfn
eC9HW3AY7OXmkVrhUf0kZsa/FwjDZixwFdYrAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUupz9/DSYocvx4zYrYYRQXEoYuHUwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3VwejlfRFNZb2N2eDR6WXJZWVJRWEVv
WXVIVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATLzyAwDQYJ
KoZIhvcNAQELBQADggEBAJQfVBJrUugpq/vZ5qjZPrIgpGCN6PfC5FUiLh4rfNE+
cwAJr3rpND3R0Oz3cLeiyWmzY9Vo8orMSNmO85xKMijL2HxMkAT358W2E5yPxxya
0oUxUaYIugnJYPwAZkaZToZfPUQno+5UMWY0gmFmCK6ahIAAn3huafe8WMIX4ZGs
SFnUJycgqBCPwLfIDrZNDOPfW3t/A5qA1IHIxMEuxHRmy/Q55dKs8DAWNR2UQqQ6
9Mdx7LujrRjJdY2x1XvktTT2HWwsKoZQDD0bUWBdyyKi4GS20jC9azGOhjhARcXm
vsbprdG9wy75pZE/9gSBQl6Sn9HdBSMQeHyH0c/rmCo=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org