Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/R_Ymeg3zY-uZkrAqS6WcYmmFRRY.roa
File: R_Ymeg3zY-uZkrAqS6WcYmmFRRY.roa (raw, json)
Hash identifier: qPBKvfdtbrz7qyrKpxzyjNZgbmy4xcF1fQHWphGBrV0=
Subject key identifier: 47:F6:26:7A:0D:F3:63:EB:99:92:B0:2A:4B:A5:9C:62:69:85:45:16
Certificate issuer: /CN=68CAC1FA04D80CFE3E2BE97C7AB1852B6656535F
Certificate serial: 1149
Authority key identifier: 68:CA:C1:FA:04:D8:0C:FE:3E:2B:E9:7C:7A:B1:85:2B:66:56:53:5F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aMrB-gTYDP4-K-l8erGFK2ZWU18.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/R_Ymeg3zY-uZkrAqS6WcYmmFRRY.roa
Signing time: Fri 01 Sep 2023 08:54:04 +0000
ROA not before: Fri 01 Sep 2023 08:54:04 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131663
IP address blocks: 103.130.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4425 (0x1149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68CAC1FA04D80CFE3E2BE97C7AB1852B6656535F
Validity
Not Before: Sep 1 08:54:04 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=47F6267A0DF363EB9992B02A4BA59C6269854516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:5f:d3:49:f7:88:9e:b7:02:c1:b1:37:c5:
39:5d:14:ff:29:61:51:6f:78:4b:c2:05:0e:78:d1:
38:67:93:63:d5:b0:67:57:6e:18:07:fb:65:e5:c7:
3a:8c:56:55:84:ff:4b:d0:3b:67:17:1e:de:d3:bd:
55:e7:12:a0:f4:99:5f:9a:ab:e1:71:7c:7e:33:70:
8d:98:44:8a:b1:f1:dc:6b:43:64:f1:60:7c:89:31:
a0:e6:c9:a5:88:9b:37:79:11:a6:58:0c:15:3f:9f:
49:bd:59:5e:04:ba:3b:ed:b9:71:c3:fc:5f:63:3a:
9c:b7:ea:b9:6d:d1:e1:d8:bb:fc:33:3a:cb:c4:79:
50:e5:ff:a7:8c:34:c4:4d:e8:95:fd:ce:e6:bc:e1:
f2:80:79:c6:6c:81:ff:91:c4:f9:cd:79:82:4a:a6:
b9:60:a8:22:45:7f:bc:bb:56:7a:8c:55:b1:5e:b6:
fa:24:ae:82:1b:bf:97:ec:15:7e:78:19:ae:61:02:
12:cb:7a:7c:61:ec:bc:a8:f9:46:db:2d:58:a9:a0:
5d:3f:78:62:7a:af:0f:92:8f:6b:de:7d:fa:1a:a7:
5e:d2:09:14:05:af:be:a6:26:67:76:58:79:f9:fa:
da:93:9d:f3:25:49:1c:49:a4:05:8e:b3:3c:81:65:
b2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F6:26:7A:0D:F3:63:EB:99:92:B0:2A:4B:A5:9C:62:69:85:45:16
X509v3 Authority Key Identifier:
keyid:68:CA:C1:FA:04:D8:0C:FE:3E:2B:E9:7C:7A:B1:85:2B:66:56:53:5F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aMrB-gTYDP4-K-l8erGFK2ZWU18.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/R_Ymeg3zY-uZkrAqS6WcYmmFRRY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.100.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:11:af:58:47:1c:e3:30:27:0a:d4:71:4a:61:0a:df:9a:b1:
8f:90:03:17:e6:c8:b8:5b:86:e9:77:06:06:06:e1:c8:ff:e8:
f1:28:f8:25:b3:87:e2:84:40:e2:fc:9a:72:35:a6:e5:84:d7:
2a:97:eb:d0:04:44:2a:bc:16:43:3b:09:1e:7c:19:92:a6:f9:
89:a0:4d:fd:43:bf:72:52:82:d3:6c:d3:e9:17:fc:25:0c:72:
39:ea:26:cb:62:a7:5a:d4:38:96:6b:27:49:18:a6:ee:1b:07:
59:91:08:4e:9a:51:82:20:0d:c9:8d:13:e4:e7:d9:be:eb:50:
13:0f:0b:ef:5b:00:20:66:be:7e:cd:f8:19:f9:55:1d:9a:1b:
35:56:22:78:ec:ab:ed:dc:66:be:5a:70:a6:9d:e4:42:65:fb:
92:d9:3c:40:c2:cf:78:7c:43:84:ce:a9:80:39:06:d2:97:04:
8d:73:cd:98:00:fe:ef:0e:16:eb:61:ea:b3:59:c8:69:3b:b9:
6a:38:99:b3:ff:06:fd:0e:6a:8a:9f:82:0f:ed:36:6b:d6:ef:
09:58:54:4b:20:56:f3:f0:62:0c:73:6a:92:d8:7c:9c:f7:ee:
07:ed:8c:59:26:42:72:6e:44:cf:c3:6e:71:bf:d1:d2:2d:19:
fa:7f:c2:36
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICEUkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjhD
QUMxRkEwNEQ4MENGRTNFMkJFOTdDN0FCMTg1MkI2NjU2NTM1RjAeFw0yMzA5MDEw
ODU0MDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ3RjYyNjdBMERGMzYz
RUI5OTkyQjAyQTRCQTU5QzYyNjk4NTQ1MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAHF/TSfeInrcCwbE3xTldFP8pYVFveEvCBQ540Thnk2PVsGdX
bhgH+2XlxzqMVlWE/0vQO2cXHt7TvVXnEqD0mV+aq+FxfH4zcI2YRIqx8dxrQ2Tx
YHyJMaDmyaWImzd5EaZYDBU/n0m9WV4EujvtuXHD/F9jOpy36rlt0eHYu/wzOsvE
eVDl/6eMNMRN6JX9zua84fKAecZsgf+RxPnNeYJKprlgqCJFf7y7VnqMVbFetvok
roIbv5fsFX54Ga5hAhLLenxh7Lyo+UbbLVipoF0/eGJ6rw+Sj2veffoap17SCRQF
r76mJmd2WHn5+tqTnfMlSRxJpAWOszyBZbJpAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUR/Ymeg3zY+uZkrAqS6WcYmmFRRYwHwYDVR0jBBgwFoAUaMrB+gTYDP4+K+l8
erGFK2ZWU18wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0lHQUJZ
VEUvYU1yQi1nVFlEUDQtSy1sOGVyR0ZLMlpXVTE4LmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9hTXJCLWdUWURQNC1LLWw4ZXJHRksyWldVMTguY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HSUdBQllURS9SX1ltZWczelktdVpr
ckFxUzZXY1ltbUZSUlkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCZ4JkMA0GCSqGSIb3DQEBCwUAA4IBAQC/Ea9YRxzjMCcK1HFKYQrfmrGPkAMX
5si4W4bpdwYGBuHI/+jxKPgls4fihEDi/JpyNablhNcql+vQBEQqvBZDOwkefBmS
pvmJoE39Q79yUoLTbNPpF/wlDHI56ibLYqda1DiWaydJGKbuGwdZkQhOmlGCIA3J
jRPk59m+61ATDwvvWwAgZr5+zfgZ+VUdmhs1ViJ47Kvt3Ga+WnCmneRCZfuS2TxA
ws94fEOEzqmAOQbSlwSNc82YAP7vDhbrYeqzWchpO7lqOJmz/wb9DmqKn4IP7TZr
1u8JWFRLIFbz8GIMc2qS2Hyc9+4H7YxZJkJybkTPw25xv9HSLRn6f8I2
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org