Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/zADRtgEb1IOHrddYP9SgDdTih8Q.roa
File: zADRtgEb1IOHrddYP9SgDdTih8Q.roa (raw, json)
Hash identifier: NnZo+R3MGiF5je5QRJ5Sa2v7U3HjA4EMdgYuCPZMvvY=
Subject key identifier: CC:00:D1:B6:01:1B:D4:83:87:AD:D7:58:3F:D4:A0:0D:D4:E2:87:C4
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0BAD
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/zADRtgEb1IOHrddYP9SgDdTih8Q.roa
Signing time: Fri 01 Sep 2023 08:50:52 +0000
ROA not before: Fri 01 Sep 2023 08:50:52 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9674
IP address blocks: 210.241.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2989 (0xbad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Sep 1 08:50:52 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=CC00D1B6011BD48387ADD7583FD4A00DD4E287C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:97:24:90:00:37:54:ca:99:59:e2:fb:b0:bb:
26:e5:70:36:0a:16:08:6d:c6:88:a7:dd:13:b2:be:
20:c9:11:a1:ba:5e:2a:79:2b:1c:eb:1c:16:72:06:
6b:68:16:b9:fe:fe:b5:11:08:a6:f6:f6:a7:78:05:
99:f1:af:be:68:d1:52:8e:1b:b3:06:5f:e7:05:d2:
cb:02:39:99:46:19:01:54:3a:05:a5:92:ca:7b:ca:
f5:8f:0c:d7:f5:73:57:9f:16:c2:2a:9b:66:cc:19:
ac:97:99:4d:71:8d:5f:e2:88:7b:35:a4:ea:32:b6:
2d:92:ef:1b:79:af:6a:04:3b:88:43:2e:d5:b1:b4:
5e:88:e9:05:0a:4a:2a:19:cc:d7:1c:a5:7f:7c:be:
dd:c9:49:34:43:b6:77:62:b6:0f:be:d4:1f:5f:c1:
eb:e0:cf:dc:0d:41:f0:2c:6d:1a:e1:78:5f:a7:db:
fb:b8:7b:75:90:ce:0d:63:04:eb:6a:3f:35:9f:3b:
3a:30:7b:0e:bd:a5:ff:63:35:14:1d:c5:d9:5a:ce:
2c:f2:77:0a:e8:30:b5:91:2c:76:63:2b:a3:e8:8b:
70:fd:68:3c:26:8a:2b:c2:b6:61:74:f6:a9:fa:7f:
41:8e:07:27:89:42:80:fb:d8:77:30:6a:2a:79:8d:
a4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:00:D1:B6:01:1B:D4:83:87:AD:D7:58:3F:D4:A0:0D:D4:E2:87:C4
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/zADRtgEb1IOHrddYP9SgDdTih8Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.241.192.0/19
Signature Algorithm: sha256WithRSAEncryption
6e:b7:5b:a3:97:1d:0d:af:ad:01:64:76:74:9e:53:75:1e:45:
2e:4c:06:58:d9:5d:4b:48:9a:d4:b6:cf:c3:09:69:09:ae:f9:
03:02:d9:dc:b0:0d:c7:4b:9f:35:a8:f0:8f:dd:94:52:94:1a:
5b:67:a5:d5:10:60:a5:73:df:35:b8:bc:2e:60:62:c9:10:28:
44:5a:fd:1e:fc:39:22:39:c2:d4:cc:87:ea:d5:40:72:e8:0b:
e4:97:4c:0b:4d:11:cf:ac:c4:77:93:53:f8:8e:31:f3:8f:15:
94:22:5c:6d:0d:d0:71:cd:9a:fd:64:49:5b:c3:f1:83:91:28:
0e:45:78:9b:5f:97:03:fd:24:d4:a5:60:9a:1e:2f:a6:bd:7b:
be:0d:3e:b8:ae:d9:8d:6c:8d:a1:21:d2:02:57:d2:a0:51:ce:
a7:c3:a9:a6:d9:fa:d6:97:66:ec:c8:39:12:2b:c9:7e:a4:d4:
f7:51:4c:8a:6f:f5:f7:b5:4d:64:e5:e4:fb:81:72:56:fc:68:
27:e7:91:4a:32:da:5e:36:a8:d5:6e:6e:e0:4d:f0:bf:c0:ff:
47:05:5b:83:33:9e:1e:4e:69:83:f9:b3:d0:6e:f2:53:ea:5e:
f1:b8:30:8e:46:d0:35:98:46:59:3d:f3:0c:f4:64:3f:43:35:
26:34:4c:ea
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICC60wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2
M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yMzA5MDEw
ODUwNTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKENDMDBEMUI2MDExQkQ0
ODM4N0FERDc1ODNGRDRBMDBERDRFMjg3QzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDplySQADdUyplZ4vuwuyblcDYKFghtxoin3ROyviDJEaG6Xip5
KxzrHBZyBmtoFrn+/rURCKb29qd4BZnxr75o0VKOG7MGX+cF0ssCOZlGGQFUOgWl
ksp7yvWPDNf1c1efFsIqm2bMGayXmU1xjV/iiHs1pOoyti2S7xt5r2oEO4hDLtWx
tF6I6QUKSioZzNccpX98vt3JSTRDtnditg++1B9fwevgz9wNQfAsbRrheF+n2/u4
e3WQzg1jBOtqPzWfOzowew69pf9jNRQdxdlazizydwroMLWRLHZjK6Poi3D9aDwm
iivCtmF09qn6f0GOByeJQoD72Hcwaip5jaTPAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUzADRtgEb1IOHrddYP9SgDdTih8QwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D
T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt
T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3pBRFJ0Z0ViMUlPSHJkZFlQOVNnRGRU
aWg4US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXS8cAwDQYJ
KoZIhvcNAQELBQADggEBAG63W6OXHQ2vrQFkdnSeU3UeRS5MBljZXUtImtS2z8MJ
aQmu+QMC2dywDcdLnzWo8I/dlFKUGltnpdUQYKVz3zW4vC5gYskQKERa/R78OSI5
wtTMh+rVQHLoC+SXTAtNEc+sxHeTU/iOMfOPFZQiXG0N0HHNmv1kSVvD8YORKA5F
eJtflwP9JNSlYJoeL6a9e74NPriu2Y1sjaEh0gJX0qBRzqfDqabZ+taXZuzIORIr
yX6k1PdRTIpv9fe1TWTl5PuBclb8aCfnkUoy2l42qNVubuBN8L/A/0cFW4Mznh5O
aYP5s9Bu8lPqXvG4MI5G0DWYRlk98wz0ZD9DNSY0TOo=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org