Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/pJ5z69UCtxT4O-Kh4aIvD4Ay18E.roa
File: pJ5z69UCtxT4O-Kh4aIvD4Ay18E.roa (raw, json)
Hash identifier: qz8oNdPEjCeMnZEV+lZfyC7R8auKckhNHRpfFmlm76k=
Subject key identifier: A4:9E:73:EB:D5:02:B7:14:F8:3B:E2:A1:E1:A2:2F:0F:80:32:D7:C1
Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Certificate serial: 0B85
Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/pJ5z69UCtxT4O-Kh4aIvD4Ay18E.roa
Signing time: Fri 01 Sep 2023 08:54:45 +0000
ROA not before: Fri 01 Sep 2023 08:54:45 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4782
IP address blocks: 61.57.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2949 (0xb85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Validity
Not Before: Sep 1 08:54:45 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A49E73EBD502B714F83BE2A1E1A22F0F8032D7C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3a:e3:27:b1:9a:7f:70:20:3e:49:7d:0c:79:
9f:82:41:49:06:f9:df:69:3f:db:c8:0a:ef:85:7b:
fa:76:94:2d:65:32:a8:ca:ce:5a:18:b0:d8:3c:b6:
95:67:45:b1:7f:38:43:eb:29:17:74:f2:89:27:da:
d1:ac:97:7f:c6:0e:89:43:b0:bb:7f:c4:b6:a4:8a:
65:bb:ca:30:0e:2e:6c:8d:e6:c9:81:42:f7:d0:8a:
14:cc:b9:29:c5:e1:9a:2e:06:bf:96:b8:45:02:09:
58:84:d5:4d:17:e2:b5:a5:86:48:2d:cd:a7:af:93:
c5:8b:14:4e:04:76:47:45:68:c0:21:b4:6e:a7:c1:
81:1a:b3:12:a8:d4:15:77:84:58:9e:94:71:ed:03:
41:13:5f:ce:2a:0c:99:f7:e9:4f:56:d7:8b:eb:06:
ba:d9:60:4e:05:9d:d7:3f:a1:97:f8:76:42:5e:c7:
36:fa:ad:7c:ad:b6:e6:93:2f:7f:80:66:46:3a:47:
65:a7:fe:c5:13:a4:c1:c3:b1:73:0a:0b:99:4f:5b:
2b:ac:bf:11:87:cf:b8:ff:69:fe:2d:f2:de:19:0a:
26:4b:09:5c:a6:ae:b9:7b:af:78:f2:77:04:26:6a:
39:20:86:17:68:a3:c0:80:5b:56:00:0f:b4:67:c2:
a7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9E:73:EB:D5:02:B7:14:F8:3B:E2:A1:E1:A2:2F:0F:80:32:D7:C1
X509v3 Authority Key Identifier:
keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/pJ5z69UCtxT4O-Kh4aIvD4Ay18E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.57.32.0/19
Signature Algorithm: sha256WithRSAEncryption
88:15:23:22:73:47:76:55:b6:4c:b3:f5:66:64:34:9a:66:f7:
09:de:ab:72:c3:d4:44:ed:7a:d3:c4:39:5f:d2:4b:ad:49:06:
e1:97:ef:e6:cc:1a:1f:00:b0:dd:d8:90:04:2c:fa:96:33:04:
9b:08:75:6a:c9:bc:26:6f:10:ba:a0:c9:e7:bb:d1:c8:76:f4:
fd:7c:a3:06:96:91:8e:ab:75:e4:72:36:73:e1:81:4e:f9:d4:
72:39:05:08:cd:ac:b3:b1:a0:3e:09:ae:01:fc:35:ce:18:46:
51:ad:1f:c8:8e:19:94:76:6d:6b:cd:5f:83:16:76:1b:85:a4:
30:ba:e2:5a:47:8c:19:57:4e:3c:e3:15:78:ee:fa:a4:c8:e7:
30:e6:03:90:60:b5:b0:a4:b0:ab:37:68:1d:40:0d:ec:89:36:
ab:2a:8f:f8:a6:84:ce:b9:5c:a0:cb:a2:74:d1:13:1c:ab:56:
7c:75:27:4c:f4:cd:c6:c4:4b:03:be:2c:79:a4:1d:6f:9a:f1:
58:2b:a9:1e:5a:35:1c:af:fe:ae:58:47:5f:e9:5a:26:9d:d6:
28:ab:b5:28:b8:b4:59:5d:f9:ce:c0:90:d2:75:2e:52:af:46:
05:8b:0b:da:04:f6:8a:7f:5f:b8:d9:d0:bf:09:d9:36:2b:ce:
f1:aa:8e:fd
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICC4UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVG
RTUzQzYxMUI0RkQ1NkIzRjY4MzE5RUVDQTYyODlGM0YwRjJBOTAeFw0yMzA5MDEw
ODU0NDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEE0OUU3M0VCRDUwMkI3
MTRGODNCRTJBMUUxQTIyRjBGODAzMkQ3QzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjOuMnsZp/cCA+SX0MeZ+CQUkG+d9pP9vICu+Fe/p2lC1lMqjK
zloYsNg8tpVnRbF/OEPrKRd08okn2tGsl3/GDolDsLt/xLakimW7yjAOLmyN5smB
QvfQihTMuSnF4ZouBr+WuEUCCViE1U0X4rWlhkgtzaevk8WLFE4EdkdFaMAhtG6n
wYEasxKo1BV3hFielHHtA0ETX84qDJn36U9W14vrBrrZYE4Fndc/oZf4dkJexzb6
rXyttuaTL3+AZkY6R2Wn/sUTpMHDsXMKC5lPWyusvxGHz7j/af4t8t4ZCiZLCVym
rrl7r3jydwQmajkghhdoo8CAW1YAD7Rnwqe3AgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUpJ5z69UCtxT4O+Kh4aIvD4Ay18EwHwYDVR0jBBgwFoAUdf5TxhG0/Vaz9oMZ
7spiifPw8qkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL2Rm
NVR4aEcwX1ZhejlvTVo3c3BpaWZQdzhxay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
ZGY1VHhoRzBfVmF6OW9NWjdzcGlpZlB3OHFrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL3BKNXo2OVVDdHhUNE8tS2g0YUl2RDRB
eTE4RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAU9OSAwDQYJ
KoZIhvcNAQELBQADggEBAIgVIyJzR3ZVtkyz9WZkNJpm9wneq3LD1ETtetPEOV/S
S61JBuGX7+bMGh8AsN3YkAQs+pYzBJsIdWrJvCZvELqgyee70ch29P18owaWkY6r
deRyNnPhgU751HI5BQjNrLOxoD4JrgH8Nc4YRlGtH8iOGZR2bWvNX4MWdhuFpDC6
4lpHjBlXTjzjFXju+qTI5zDmA5BgtbCksKs3aB1ADeyJNqsqj/imhM65XKDLonTR
ExyrVnx1J0z0zcbESwO+LHmkHW+a8VgrqR5aNRyv/q5YR1/pWiad1iirtSi4tFld
+c7AkNJ1LlKvRgWLC9oE9op/X7jZ0L8J2TYrzvGqjv0=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org