Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/psmhMdaQrq-_jyu_Pyzwo3wFy6I.roa
File: psmhMdaQrq-_jyu_Pyzwo3wFy6I.roa (raw, json)
Hash identifier: JF2w3hVq7MF8sXMxjAdUDBpyCPWqksKpKVB3EdOS+7Q=
Subject key identifier: A6:C9:A1:31:D6:90:AE:AF:BF:8F:2B:BF:3F:2C:F0:A3:7C:05:CB:A2
Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Certificate serial: 0B82
Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/psmhMdaQrq-_jyu_Pyzwo3wFy6I.roa
Signing time: Fri 01 Sep 2023 08:54:44 +0000
ROA not before: Fri 01 Sep 2023 08:54:44 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4782
IP address blocks: 211.79.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2946 (0xb82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Validity
Not Before: Sep 1 08:54:44 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A6C9A131D690AEAFBF8F2BBF3F2CF0A37C05CBA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:b8:54:63:af:33:26:fd:f4:70:a5:dd:45:
f3:01:55:f8:e9:07:9f:96:7c:a9:3d:ec:cc:1a:de:
49:e9:8e:c4:45:ee:23:b5:5d:84:1e:05:8a:89:21:
09:56:bd:c8:64:06:d2:d7:b7:5a:59:57:55:6f:5a:
92:8d:42:84:0e:f3:bc:a2:b7:f6:92:33:50:9a:9d:
97:a9:6c:e8:8a:b8:58:a2:56:7c:9a:29:d3:8b:14:
6f:95:44:88:bd:d5:32:6c:5f:f2:07:47:7c:5a:f6:
c1:24:b7:59:97:36:00:d9:70:dd:c5:16:b0:a1:f6:
f2:27:b6:c2:66:47:58:a9:a4:46:b9:7b:7f:33:5d:
dd:86:7a:7b:70:b2:df:37:d3:d2:f7:d9:0c:1a:77:
c1:81:6c:61:e9:a3:03:c0:63:bd:4f:13:31:77:df:
51:f9:63:c4:1e:91:1e:d2:b4:44:0a:72:53:bc:1e:
b9:5b:4b:4e:a7:74:7d:44:42:a3:0a:64:ff:b0:98:
71:11:3d:76:b5:15:4f:37:89:ef:a8:ed:82:e6:60:
16:be:a5:04:8a:cf:58:14:f0:c9:a8:ad:7a:c5:35:
b8:b4:86:3f:a0:1c:af:a2:28:94:25:4f:7d:2a:bf:
ae:96:8e:58:e3:6c:90:de:6e:19:3c:ec:32:f4:16:
75:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C9:A1:31:D6:90:AE:AF:BF:8F:2B:BF:3F:2C:F0:A3:7C:05:CB:A2
X509v3 Authority Key Identifier:
keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/psmhMdaQrq-_jyu_Pyzwo3wFy6I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.79.160.0/19
Signature Algorithm: sha256WithRSAEncryption
2b:f1:31:06:43:e6:0e:a7:8b:b0:f4:9f:c5:82:15:85:cf:10:
2f:44:7b:93:55:0d:a2:fc:7b:d8:e5:f6:0e:ce:36:8f:bf:93:
83:8b:da:5e:76:b5:7e:a9:41:4c:20:79:06:27:5a:da:d7:05:
9a:cb:9a:19:33:ac:5f:dd:2e:87:d0:a9:8d:18:24:66:f9:3b:
b6:ef:65:81:db:51:75:b9:1e:a8:94:44:0b:10:f0:d3:c1:08:
37:2e:54:d7:d2:c0:8a:18:18:05:eb:66:dc:57:a8:77:55:f2:
6b:71:cf:d6:de:d8:07:2a:a4:01:0f:35:65:bc:98:d1:52:80:
75:bc:33:77:e9:b6:40:86:d0:8c:77:f5:f8:e0:4d:b5:f4:5f:
79:7f:85:54:01:5a:10:4a:d4:d6:cb:8c:02:03:6e:06:11:61:
7d:12:7b:37:fc:49:88:fa:dd:c0:6d:aa:93:7d:b1:0e:a6:40:
bf:32:a2:44:96:65:10:5b:4b:6c:08:3a:26:db:4b:ec:ed:15:
a3:9c:61:d2:13:38:cb:75:d9:f6:29:b8:51:10:d7:af:9e:06:
40:2e:c8:b9:79:ac:9b:1b:20:78:c3:29:a0:8d:fe:cb:8e:7a:
66:6b:a0:8f:a4:1d:d3:70:75:49:f9:d0:d7:c3:91:a0:bf:36:
03:b8:c7:c6
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICC4IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVG
RTUzQzYxMUI0RkQ1NkIzRjY4MzE5RUVDQTYyODlGM0YwRjJBOTAeFw0yMzA5MDEw
ODU0NDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEE2QzlBMTMxRDY5MEFF
QUZCRjhGMkJCRjNGMkNGMEEzN0MwNUNCQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDS7bhUY68zJv30cKXdRfMBVfjpB5+WfKk97Mwa3knpjsRF7iO1
XYQeBYqJIQlWvchkBtLXt1pZV1VvWpKNQoQO87yit/aSM1CanZepbOiKuFiiVnya
KdOLFG+VRIi91TJsX/IHR3xa9sEkt1mXNgDZcN3FFrCh9vIntsJmR1ippEa5e38z
Xd2Gentwst8309L32Qwad8GBbGHpowPAY71PEzF331H5Y8QekR7StEQKclO8Hrlb
S06ndH1EQqMKZP+wmHERPXa1FU83ie+o7YLmYBa+pQSKz1gU8MmorXrFNbi0hj+g
HK+iKJQlT30qv66WjljjbJDebhk87DL0FnXHAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUpsmhMdaQrq+/jyu/Pyzwo3wFy6IwHwYDVR0jBBgwFoAUdf5TxhG0/Vaz9oMZ
7spiifPw8qkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL2Rm
NVR4aEcwX1ZhejlvTVo3c3BpaWZQdzhxay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
ZGY1VHhoRzBfVmF6OW9NWjdzcGlpZlB3OHFrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL3BzbWhNZGFRcnEtX2p5dV9QeXp3bzN3
Rnk2SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXTT6AwDQYJ
KoZIhvcNAQELBQADggEBACvxMQZD5g6ni7D0n8WCFYXPEC9Ee5NVDaL8e9jl9g7O
No+/k4OL2l52tX6pQUwgeQYnWtrXBZrLmhkzrF/dLofQqY0YJGb5O7bvZYHbUXW5
HqiURAsQ8NPBCDcuVNfSwIoYGAXrZtxXqHdV8mtxz9be2AcqpAEPNWW8mNFSgHW8
M3fptkCG0Ix39fjgTbX0X3l/hVQBWhBK1NbLjAIDbgYRYX0Sezf8SYj63cBtqpN9
sQ6mQL8yokSWZRBbS2wIOibbS+ztFaOcYdITOMt12fYpuFEQ16+eBkAuyLl5rJsb
IHjDKaCN/suOemZroI+kHdNwdUn50NfDkaC/NgO4x8Y=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org