Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HWME1204/3ziSVri1EsS4pfWOXksjmtNdw9w.roa
File: 3ziSVri1EsS4pfWOXksjmtNdw9w.roa (raw, json)
Hash identifier: aqnQwk5XTtmuua48olbTOOf1eVfqN0ldv4EJXbQx0nE=
Subject key identifier: DF:38:92:56:B8:B5:12:C4:B8:A5:F5:8E:5E:4B:23:9A:D3:5D:C3:DC
Certificate issuer: /CN=E95973EB86F597CAE612C67929ED9352E70B5528
Certificate serial: 1033
Authority key identifier: E9:59:73:EB:86:F5:97:CA:E6:12:C6:79:29:ED:93:52:E7:0B:55:28
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/6Vlz64b1l8rmEsZ5Ke2TUucLVSg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HWME1204/3ziSVri1EsS4pfWOXksjmtNdw9w.roa
Signing time: Fri 01 Sep 2023 09:01:13 +0000
ROA not before: Fri 01 Sep 2023 09:01:13 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18046
IP address blocks: 103.126.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4147 (0x1033)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E95973EB86F597CAE612C67929ED9352E70B5528
Validity
Not Before: Sep 1 09:01:13 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DF389256B8B512C4B8A5F58E5E4B239AD35DC3DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:51:ec:5d:c4:3b:e9:e6:c9:0e:12:4e:ad:
18:9a:9c:95:91:6d:c1:91:38:41:2a:28:25:8b:c3:
53:42:a9:32:95:fa:bf:66:f5:2c:7c:d3:fd:77:0b:
5b:ef:42:e9:26:aa:c0:f7:7d:3b:e5:a6:72:b7:fa:
72:19:a3:ec:7e:00:d8:d1:09:2f:e5:43:58:58:22:
58:69:64:45:8b:21:77:0b:4d:27:b8:27:6c:fb:f6:
4a:7d:46:f3:09:74:1a:aa:65:4c:f6:23:91:f9:da:
f6:75:aa:38:a7:f1:2b:ad:0e:ce:c3:85:bd:b8:ef:
a5:b7:61:90:cc:c1:87:98:7d:26:1e:a4:bf:ff:ed:
71:08:f9:f2:ac:10:cb:e3:00:a4:8e:dd:4f:42:9a:
8b:f4:8c:8e:e5:1b:90:69:9e:a9:b0:60:21:6a:22:
de:d9:39:d3:03:da:43:83:1a:9a:1c:cb:94:00:54:
83:c1:12:ce:64:24:f6:fc:76:01:4c:af:7a:44:8d:
54:7b:d4:80:28:a4:53:22:3e:e0:d6:91:31:7b:79:
03:71:e6:22:18:42:48:df:49:41:4a:58:d6:68:4d:
8e:1f:9b:f9:f1:d4:bd:0b:a6:bf:75:18:a4:a7:53:
21:a3:57:29:2f:d6:d0:1e:6c:11:4a:3c:8a:d9:6f:
37:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:38:92:56:B8:B5:12:C4:B8:A5:F5:8E:5E:4B:23:9A:D3:5D:C3:DC
X509v3 Authority Key Identifier:
keyid:E9:59:73:EB:86:F5:97:CA:E6:12:C6:79:29:ED:93:52:E7:0B:55:28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWME1204/6Vlz64b1l8rmEsZ5Ke2TUucLVSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/6Vlz64b1l8rmEsZ5Ke2TUucLVSg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWME1204/3ziSVri1EsS4pfWOXksjmtNdw9w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.180.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:d8:d7:11:5c:11:76:83:85:06:30:fc:ee:d1:39:b8:16:79:
4b:cd:28:4f:ed:7c:eb:ed:61:7e:f6:cb:eb:88:f8:ae:8a:8a:
7e:e1:c7:e9:5f:48:97:65:6e:7e:98:ad:c0:b1:b6:9e:26:19:
35:9a:78:be:2e:23:84:dc:a0:84:c8:6c:df:3c:ae:eb:b5:43:
a7:89:10:2f:d6:f2:77:28:41:01:a6:18:65:95:fa:0b:b7:92:
4e:8d:9b:e0:78:04:11:09:8e:5a:3a:23:99:10:ae:70:ea:c6:
36:c7:04:1c:ff:1f:2e:9f:a2:d5:ad:a8:01:c4:8c:2a:0b:e4:
60:2b:1e:38:a5:cd:6c:a6:8c:b5:7d:3e:7f:a8:4c:d6:31:c5:
a5:bf:4d:19:1e:b2:ce:16:33:af:a6:eb:9e:3d:69:8e:bd:71:
ec:0c:8f:54:6f:4a:24:97:63:cb:a2:55:4a:60:48:01:d0:08:
a4:43:ab:2b:1b:df:87:28:62:04:69:c3:8b:42:84:4c:b7:26:
37:39:00:45:5a:8b:fd:90:84:12:c1:1a:b5:9c:ab:b8:8e:95:
49:02:3b:4f:ec:39:f4:35:06:f1:4a:9d:63:35:f5:b2:0a:8b:
c9:25:0b:83:aa:5f:93:ec:79:bc:44:4b:5c:7b:9c:6e:2f:34:
38:fe:41:7f
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICEDMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTk1
OTczRUI4NkY1OTdDQUU2MTJDNjc5MjlFRDkzNTJFNzBCNTUyODAeFw0yMzA5MDEw
OTAxMTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERGMzg5MjU2QjhCNTEy
QzRCOEE1RjU4RTVFNEIyMzlBRDM1REMzREMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2mVHsXcQ76ebJDhJOrRianJWRbcGROEEqKCWLw1NCqTKV+r9m
9Sx80/13C1vvQukmqsD3fTvlpnK3+nIZo+x+ANjRCS/lQ1hYIlhpZEWLIXcLTSe4
J2z79kp9RvMJdBqqZUz2I5H52vZ1qjin8SutDs7Dhb2476W3YZDMwYeYfSYepL//
7XEI+fKsEMvjAKSO3U9Cmov0jI7lG5BpnqmwYCFqIt7ZOdMD2kODGpocy5QAVIPB
Es5kJPb8dgFMr3pEjVR71IAopFMiPuDWkTF7eQNx5iIYQkjfSUFKWNZoTY4fm/nx
1L0Lpr91GKSnUyGjVykv1tAebBFKPIrZbze7AgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQU3ziSVri1EsS4pfWOXksjmtNdw9wwHwYDVR0jBBgwFoAU6Vlz64b1l8rmEsZ5
Ke2TUucLVSgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSFdNRTEy
MDQvNlZsejY0YjFsOHJtRXNaNUtlMlRVdWNMVlNnLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS82Vmx6NjRiMWw4cm1Fc1o1S2UyVFV1Y0xWU2cuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9IV01FMTIwNC8zemlTVnJpMUVzUzRw
ZldPWGtzam10TmR3OXcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCZ360MA0GCSqGSIb3DQEBCwUAA4IBAQBd2NcRXBF2g4UGMPzu0Tm4FnlLzShP
7Xzr7WF+9svriPiuiop+4cfpX0iXZW5+mK3AsbaeJhk1mni+LiOE3KCEyGzfPK7r
tUOniRAv1vJ3KEEBphhllfoLt5JOjZvgeAQRCY5aOiOZEK5w6sY2xwQc/x8un6LV
ragBxIwqC+RgKx44pc1spoy1fT5/qEzWMcWlv00ZHrLOFjOvpuuePWmOvXHsDI9U
b0okl2PLolVKYEgB0AikQ6srG9+HKGIEacOLQoRMtyY3OQBFWov9kIQSwRq1nKu4
jpVJAjtP7Dn0NQbxSp1jNfWyCovJJQuDql+T7Hm8REtce5xuLzQ4/kF/
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org