Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FISC/ZnNwdh06Xdy5fh5K3a96vCasAsc.roa
File: ZnNwdh06Xdy5fh5K3a96vCasAsc.roa (raw, json)
Hash identifier: IGfh558SZStB1BynsNM29JX9K64BQBFpvbaYZ94KyLA=
Subject key identifier: 66:73:70:76:1D:3A:5D:DC:B9:7E:1E:4A:DD:AF:7A:BC:26:AC:02:C7
Certificate issuer: /CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Certificate serial: 0B3B
Authority key identifier: F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/ZnNwdh06Xdy5fh5K3a96vCasAsc.roa
Signing time: Fri 01 Sep 2023 08:51:10 +0000
ROA not before: Fri 01 Sep 2023 08:51:10 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131588
IP address blocks: 2400:e480::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2875 (0xb3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Validity
Not Before: Sep 1 08:51:10 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=667370761D3A5DDCB97E1E4ADDAF7ABC26AC02C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a0:8d:84:59:c4:31:64:d4:77:05:02:92:74:
f8:5c:3c:91:5d:f6:f5:2d:66:2c:7f:b8:cf:d5:8c:
22:1c:48:5f:8f:5c:2b:bd:80:4c:16:dd:96:e8:57:
7b:62:f1:f0:e0:7a:1a:c3:d4:47:f2:f6:f1:a6:fa:
40:21:86:58:53:b2:b3:a0:a8:bd:f8:4f:37:ab:85:
42:32:24:5c:7c:5c:6b:fc:eb:f3:03:f0:4b:63:35:
06:9e:3b:8f:4c:2e:20:c1:66:83:84:c3:fe:a1:70:
cf:e5:ae:2a:e4:24:38:7b:be:ba:38:77:60:4c:80:
cf:82:3e:e7:86:2f:da:70:1c:bb:8b:43:f8:5f:62:
da:a2:33:a0:24:8e:da:68:73:c0:ba:1e:26:dc:ad:
29:08:f8:31:74:d5:91:ed:4d:18:c5:e5:00:70:7a:
43:3c:67:de:92:40:24:8b:61:0b:13:80:19:f6:ee:
ec:94:ce:4c:56:5c:b6:55:9c:05:91:80:01:55:13:
57:0b:82:f5:74:d9:1c:76:d5:fb:04:7e:33:95:c6:
ee:a5:dc:d2:b2:5a:83:e4:97:ce:9d:ea:77:48:72:
28:3b:0a:39:02:a4:9b:1b:77:6b:f4:fb:c1:3d:a4:
43:c9:b3:14:06:d6:29:83:4d:15:fd:91:62:3f:f9:
b2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:73:70:76:1D:3A:5D:DC:B9:7E:1E:4A:DD:AF:7A:BC:26:AC:02:C7
X509v3 Authority Key Identifier:
keyid:F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8M4QvXwrOaA6cMMCuisIZSwIB9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/ZnNwdh06Xdy5fh5K3a96vCasAsc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:e480::/32
Signature Algorithm: sha256WithRSAEncryption
8e:9e:0d:89:8f:5d:0a:c9:5e:11:9a:46:31:6a:02:0f:5a:1c:
bb:a6:fc:60:5d:c5:42:29:8b:23:1a:fe:31:2e:47:d1:95:7a:
47:fb:a7:93:7d:50:22:67:50:fc:1f:11:b6:cc:d6:a9:70:89:
7b:5a:a0:ab:38:fa:bc:f4:1d:31:d3:3e:bd:e1:fc:70:df:14:
de:8d:59:36:ea:aa:dd:a5:1f:ef:01:4a:40:05:6f:a4:95:29:
bc:6e:0e:40:b3:db:3d:3e:77:3b:d0:55:33:92:53:e0:51:65:
7d:4e:69:6c:3c:26:7c:5a:89:d8:27:dd:92:44:a8:d7:b4:c8:
83:30:79:58:0a:0d:56:7d:55:31:a4:45:55:e1:9e:32:f3:1f:
30:ec:a0:2b:a9:eb:2e:2d:7e:57:ae:3c:2b:66:ee:d3:82:dd:
14:25:2a:06:48:22:d2:4a:df:10:03:94:c3:7f:2d:0a:a1:8d:
cb:a6:89:18:1b:27:4b:c5:bc:d6:4e:34:0c:ee:35:59:07:d8:
ea:3a:8a:2b:80:ab:b2:c2:20:1a:d2:f2:b3:7a:86:08:a2:5f:
6d:95:4a:15:3c:ea:48:fa:75:ad:7a:04:03:cb:3c:90:0a:a9:
ca:42:ac:b5:66:c9:8f:f1:a6:c5:39:a6:7d:a5:dd:ee:65:ed:
76:37:09:74
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICCzswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjBD
RTEwQkQ3QzJCMzlBMDNBNzBDMzAyQkEyQjA4NjUyQzA4MDdEMjAeFw0yMzA5MDEw
ODUxMTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY2NzM3MDc2MUQzQTVE
RENCOTdFMUU0QUREQUY3QUJDMjZBQzAyQzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPoI2EWcQxZNR3BQKSdPhcPJFd9vUtZix/uM/VjCIcSF+PXCu9
gEwW3ZboV3ti8fDgehrD1Efy9vGm+kAhhlhTsrOgqL34TzerhUIyJFx8XGv86/MD
8EtjNQaeO49MLiDBZoOEw/6hcM/lrirkJDh7vro4d2BMgM+CPueGL9pwHLuLQ/hf
YtqiM6Akjtpoc8C6HibcrSkI+DF01ZHtTRjF5QBwekM8Z96SQCSLYQsTgBn27uyU
zkxWXLZVnAWRgAFVE1cLgvV02Rx21fsEfjOVxu6l3NKyWoPkl86d6ndIcig7CjkC
pJsbd2v0+8E9pEPJsxQG1imDTRX9kWI/+bLXAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUZnNwdh06Xdy5fh5K3a96vCasAscwHwYDVR0jBBgwFoAU8M4QvXwrOaA6cMMC
uisIZSwIB9IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRklTQy84
TTRRdlh3ck9hQTZjTU1DdWlzSVpTd0lCOUkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
LzhNNFF2WHdyT2FBNmNNTUN1aXNJWlN3SUI5SS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0ZJU0MvWm5Od2RoMDZYZHk1Zmg1SzNhOTZ2
Q2FzQXNjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQA5IAw
DQYJKoZIhvcNAQELBQADggEBAI6eDYmPXQrJXhGaRjFqAg9aHLum/GBdxUIpiyMa
/jEuR9GVekf7p5N9UCJnUPwfEbbM1qlwiXtaoKs4+rz0HTHTPr3h/HDfFN6NWTbq
qt2lH+8BSkAFb6SVKbxuDkCz2z0+dzvQVTOSU+BRZX1OaWw8Jnxaidgn3ZJEqNe0
yIMweVgKDVZ9VTGkRVXhnjLzHzDsoCup6y4tfleuPCtm7tOC3RQlKgZIItJK3xAD
lMN/LQqhjcumiRgbJ0vFvNZONAzuNVkH2Oo6iiuAq7LCIBrS8rN6hgiiX22VShU8
6kj6da16BAPLPJAKqcpCrLVmyY/xpsU5pn2l3e5l7XY3CXQ=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org