Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GCMM/O3r4E-SWbuRvsisdydaEBC3EyXs.roa
File: O3r4E-SWbuRvsisdydaEBC3EyXs.roa (raw, json)
Hash identifier: DqA+jktyGUzXJ0YvJYbhlxhp2q8TTSuYNHYDOIvJNvU=
Subject key identifier: 3B:7A:F8:13:E4:96:6E:E4:6F:B2:2B:1D:C9:D6:84:04:2D:C4:C9:7B
Certificate issuer: /CN=8092F614E0EF75395097E896469BC8B7B319D852
Certificate serial: 1102
Authority key identifier: 80:92:F6:14:E0:EF:75:39:50:97:E8:96:46:9B:C8:B7:B3:19:D8:52
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gJL2FODvdTlQl-iWRpvIt7MZ2FI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GCMM/O3r4E-SWbuRvsisdydaEBC3EyXs.roa
Signing time: Thu 15 Sep 2022 02:38:49 +0000
ROA not before: Thu 15 Sep 2022 02:38:49 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18046
IP address blocks: 103.130.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4354 (0x1102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8092F614E0EF75395097E896469BC8B7B319D852
Validity
Not Before: Sep 15 02:38:49 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3B7AF813E4966EE46FB22B1DC9D684042DC4C97B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0b:5d:b3:b9:fc:52:0b:a6:82:fd:fa:6a:e9:
47:13:10:fe:54:e1:e5:cd:29:c0:ac:39:dd:c1:74:
59:e9:86:ea:bd:bc:cb:ef:e2:7a:36:16:d8:a0:77:
cb:69:c1:43:9a:40:2a:a7:14:2c:6e:54:fa:60:55:
93:ae:39:a2:91:94:59:1e:2f:3f:b1:1d:e0:40:00:
7f:00:37:4f:cb:08:b9:ae:95:66:b8:d9:01:5e:b3:
4e:80:8f:cf:49:58:57:35:4a:aa:78:05:9d:fd:63:
a9:de:61:6b:cb:52:af:2d:18:13:79:b2:0b:93:16:
78:cf:38:5c:4d:3d:c6:fd:f6:6c:b1:9d:f7:e4:40:
1f:8e:4c:e4:31:ff:f3:71:46:3c:2b:49:fd:df:77:
de:da:b0:09:17:52:e5:8e:e1:78:e7:17:35:03:09:
05:05:ae:14:4b:18:d1:67:db:9a:3d:69:ba:42:c3:
2d:56:42:63:1e:ea:b4:97:25:99:4f:cf:08:e5:12:
39:11:d6:a4:86:9d:8e:f7:e4:64:c1:19:f4:62:57:
d8:13:05:97:87:1c:e6:cb:92:5c:09:c3:69:56:83:
e3:61:19:e2:24:b0:cb:72:0c:87:48:07:b6:51:b7:
9f:6b:61:af:2c:b9:c7:50:b0:a9:3c:48:cc:8d:12:
b1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7A:F8:13:E4:96:6E:E4:6F:B2:2B:1D:C9:D6:84:04:2D:C4:C9:7B
X509v3 Authority Key Identifier:
keyid:80:92:F6:14:E0:EF:75:39:50:97:E8:96:46:9B:C8:B7:B3:19:D8:52
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GCMM/gJL2FODvdTlQl-iWRpvIt7MZ2FI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gJL2FODvdTlQl-iWRpvIt7MZ2FI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GCMM/O3r4E-SWbuRvsisdydaEBC3EyXs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.36.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:30:fe:a3:3a:53:6c:5c:52:0e:ef:9c:0f:30:4f:7a:16:19:
ec:c0:19:ac:a7:51:96:a4:67:78:a8:8b:9f:a0:e0:f7:ea:11:
9f:42:33:80:32:96:bb:40:cd:22:a4:6e:65:e4:28:b7:e5:c5:
4e:68:fe:8c:2a:10:92:c2:95:e4:90:03:fb:cb:47:98:1f:66:
ff:07:66:cc:a3:98:dd:4a:26:5b:ee:bb:57:87:ae:39:a8:b7:
e1:4f:89:dd:a7:48:c7:41:d7:c8:60:52:32:3b:e1:c3:d5:a0:
dd:54:cd:8d:45:2b:b1:d4:b1:4c:51:8d:24:24:d9:4a:b7:d1:
36:50:f2:b2:59:3a:e6:b4:7e:e2:fe:ce:05:35:39:ae:31:42:
74:26:ac:cc:54:5f:43:7b:9f:20:aa:6a:90:aa:45:a6:7a:62:
d9:60:e6:73:78:93:13:11:52:bd:8d:32:d4:18:df:42:03:41:
88:d3:ed:78:e7:e1:2d:64:59:72:11:19:aa:86:3a:25:26:69:
30:ae:5f:79:a3:a7:7f:b1:e8:4a:9c:58:0f:5e:eb:ab:a0:cd:
7f:68:51:90:6f:6e:b9:f4:5f:12:97:98:05:7a:c6:35:d0:b3:
6f:c8:ea:06:7c:e0:45:c3:b1:c5:7a:35:1f:34:a8:24:52:cf:
e7:08:29:b9
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEQIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODA5
MkY2MTRFMEVGNzUzOTUwOTdFODk2NDY5QkM4QjdCMzE5RDg1MjAeFw0yMjA5MTUw
MjM4NDlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDNCN0FGODEzRTQ5NjZF
RTQ2RkIyMkIxREM5RDY4NDA0MkRDNEM5N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsC12zufxSC6aC/fpq6UcTEP5U4eXNKcCsOd3BdFnphuq9vMvv
4no2Ftigd8tpwUOaQCqnFCxuVPpgVZOuOaKRlFkeLz+xHeBAAH8AN0/LCLmulWa4
2QFes06Aj89JWFc1Sqp4BZ39Y6neYWvLUq8tGBN5sguTFnjPOFxNPcb99myxnffk
QB+OTOQx//NxRjwrSf3fd97asAkXUuWO4XjnFzUDCQUFrhRLGNFn25o9abpCwy1W
QmMe6rSXJZlPzwjlEjkR1qSGnY735GTBGfRiV9gTBZeHHObLklwJw2lWg+NhGeIk
sMtyDIdIB7ZRt59rYa8sucdQsKk8SMyNErEbAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUO3r4E+SWbuRvsisdydaEBC3EyXswHwYDVR0jBBgwFoAUgJL2FODvdTlQl+iW
RpvIt7MZ2FIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0NNTS9n
SkwyRk9EdmRUbFFsLWlXUnB2SXQ3TVoyRkkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2dKTDJGT0R2ZFRsUWwtaVdScHZJdDdNWjJGSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0dDTU0vTzNyNEUtU1didVJ2c2lzZHlkYUVC
QzNFeVhzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmeCJDAN
BgkqhkiG9w0BAQsFAAOCAQEADjD+ozpTbFxSDu+cDzBPehYZ7MAZrKdRlqRneKiL
n6Dg9+oRn0IzgDKWu0DNIqRuZeQot+XFTmj+jCoQksKV5JAD+8tHmB9m/wdmzKOY
3UomW+67V4euOai34U+J3adIx0HXyGBSMjvhw9Wg3VTNjUUrsdSxTFGNJCTZSrfR
NlDyslk65rR+4v7OBTU5rjFCdCaszFRfQ3ufIKpqkKpFpnpi2WDmc3iTExFSvY0y
1BjfQgNBiNPteOfhLWRZchEZqoY6JSZpMK5feaOnf7HoSpxYD17rq6DNf2hRkG9u
ufRfEpeYBXrGNdCzb8jqBnzgRcOxxXo1HzSoJFLP5wgpuQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org