Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/_BKkiOtrPcYDgXsPH1_5JQ226OM.roa
File: _BKkiOtrPcYDgXsPH1_5JQ226OM.roa (raw, json)
Hash identifier: fXvq4SDjz2g03t7EGUR93SJ7kLimxzXkkFNYexBXnzs=
Subject key identifier: FC:12:A4:88:EB:6B:3D:C6:03:81:7B:0F:1F:5F:F9:25:0D:B6:E8:E3
Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial: 0575
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/_BKkiOtrPcYDgXsPH1_5JQ226OM.roa
Signing time: Fri 01 Sep 2023 08:59:50 +0000
ROA not before: Fri 01 Sep 2023 08:59:50 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 134823
IP address blocks: 103.153.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1397 (0x575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
Validity
Not Before: Sep 1 08:59:50 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FC12A488EB6B3DC603817B0F1F5FF9250DB6E8E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:75:47:0c:07:28:73:1f:a3:80:7b:b5:f6:21:
c2:84:4c:6a:c9:0e:1a:8d:d0:dc:21:2e:39:d2:47:
aa:d1:f7:bd:f5:1b:f2:a2:c6:8c:6e:1a:d5:1c:c5:
2d:46:3e:3b:4c:91:cb:34:1a:38:06:74:f2:81:96:
bc:65:d1:49:54:32:ed:37:e0:a8:de:63:53:bf:f8:
c4:eb:d0:06:9f:44:a2:de:e9:06:ad:27:f9:34:56:
e8:de:e7:38:3a:63:9e:2a:f7:05:d5:26:ef:01:b5:
fe:a7:5e:7d:c2:53:cc:d6:19:ae:65:f8:a4:1c:ec:
44:18:e4:8f:a6:d8:0b:67:3a:bd:de:4b:75:e7:61:
27:ce:6a:e3:50:7f:91:35:54:d5:0c:75:ec:46:9d:
fe:81:4f:49:82:d9:3f:14:ce:8d:81:37:26:7c:66:
34:fd:23:c0:20:96:5b:b1:c5:af:2e:64:20:b9:5a:
fe:9a:2f:03:ee:07:06:dc:87:cc:18:c3:05:39:d1:
6a:c9:b1:6c:5f:3b:12:cd:b9:c9:e7:82:42:8f:e8:
ca:cd:8b:95:ea:bd:52:3f:ee:d9:e4:a6:a9:07:e7:
ee:a0:4d:99:91:a1:cd:84:23:47:2e:c8:60:75:0e:
af:ce:6c:ed:7a:82:1f:cb:91:11:f3:2c:a6:d2:27:
1e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:12:A4:88:EB:6B:3D:C6:03:81:7B:0F:1F:5F:F9:25:0D:B6:E8:E3
X509v3 Authority Key Identifier:
keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/_BKkiOtrPcYDgXsPH1_5JQ226OM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.177.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a7:a2:67:9c:36:d6:7a:b3:28:67:8b:88:2f:30:f4:3d:4a:
d5:14:65:37:f0:48:2a:c7:56:25:7c:19:bc:19:3a:05:df:99:
4f:8c:00:91:4f:e4:b0:a4:11:bf:69:80:83:3d:05:b3:f2:f7:
1d:84:75:2a:b5:f2:87:bd:c0:65:73:28:cf:d3:2b:b4:7a:51:
e9:88:7c:15:cb:e2:fc:de:d1:2b:f4:e0:24:8a:31:67:bd:02:
ac:21:db:3d:95:18:30:8d:3d:60:58:ec:e2:fd:ff:ba:32:0a:
2d:e8:20:17:42:56:32:74:81:05:df:88:67:ba:15:df:ae:8c:
55:cb:65:85:b8:26:8c:a9:50:72:65:11:d0:af:5d:93:ce:c2:
61:04:dd:1f:9c:22:13:a0:79:9d:01:ae:d3:b4:64:26:f8:fe:
3f:5a:0f:f4:ea:5a:73:34:f5:c7:61:51:60:10:b6:17:08:67:
7f:cb:0c:d1:62:0e:4f:2b:2e:8f:0f:2d:33:19:fa:ef:74:5a:
cb:9e:a6:91:32:af:51:ab:ff:67:ca:17:2b:f1:17:e8:85:ce:
d9:25:8c:9e:d1:40:f1:a1:a4:45:cf:41:b7:76:e2:dd:09:ad:
41:b7:51:bd:e5:7a:04:46:df:e4:cd:bb:57:d3:bf:61:80:87:
7a:46:24:87
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBXUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3
REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yMzA5MDEw
ODU5NTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZDMTJBNDg4RUI2QjNE
QzYwMzgxN0IwRjFGNUZGOTI1MERCNkU4RTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDodUcMByhzH6OAe7X2IcKETGrJDhqN0NwhLjnSR6rR9731G/Ki
xoxuGtUcxS1GPjtMkcs0GjgGdPKBlrxl0UlUMu034KjeY1O/+MTr0AafRKLe6Qat
J/k0Vuje5zg6Y54q9wXVJu8Btf6nXn3CU8zWGa5l+KQc7EQY5I+m2AtnOr3eS3Xn
YSfOauNQf5E1VNUMdexGnf6BT0mC2T8Uzo2BNyZ8ZjT9I8Aglluxxa8uZCC5Wv6a
LwPuBwbch8wYwwU50WrJsWxfOxLNucnngkKP6MrNi5XqvVI/7tnkpqkH5+6gTZmR
oc2EI0cuyGB1Dq/ObO16gh/LkRHzLKbSJx49AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU/BKkiOtrPcYDgXsPH1/5JQ226OMwHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB
T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB
L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL19CS2tpT3RyUGNZRGdYc1BI
MV81SlEyMjZPTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn
mbEwDQYJKoZIhvcNAQELBQADggEBAJWnomecNtZ6syhni4gvMPQ9StUUZTfwSCrH
ViV8GbwZOgXfmU+MAJFP5LCkEb9pgIM9BbPy9x2EdSq18oe9wGVzKM/TK7R6UemI
fBXL4vze0Sv04CSKMWe9Aqwh2z2VGDCNPWBY7OL9/7oyCi3oIBdCVjJ0gQXfiGe6
Fd+ujFXLZYW4JoypUHJlEdCvXZPOwmEE3R+cIhOgeZ0BrtO0ZCb4/j9aD/TqWnM0
9cdhUWAQthcIZ3/LDNFiDk8rLo8PLTMZ+u90WsueppEyr1Gr/2fKFyvxF+iFztkl
jJ7RQPGhpEXPQbd24t0JrUG3Ub3legRG3+TNu1fTv2GAh3pGJIc=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org