Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HYA/WikzBUCNDoRzPSS-K8zYObTSExI.roa
File: WikzBUCNDoRzPSS-K8zYObTSExI.roa (raw, json)
Hash identifier: g3HJyhBbuM5FUJxnyMe9xA3Y7//4BUDbrG9WLFzuWGc=
Subject key identifier: 5A:29:33:05:40:8D:0E:84:73:3D:24:BE:2B:CC:D8:39:B4:D2:13:12
Certificate issuer: /CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4
Certificate serial: 0B26
Authority key identifier: 0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/WikzBUCNDoRzPSS-K8zYObTSExI.roa
Signing time: Fri 01 Sep 2023 09:01:26 +0000
ROA not before: Fri 01 Sep 2023 09:01:26 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 10085
IP address blocks: 114.29.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2854 (0xb26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4
Validity
Not Before: Sep 1 09:01:26 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5A293305408D0E84733D24BE2BCCD839B4D21312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8f:e2:da:75:2a:1a:2b:74:12:07:4f:d6:c2:
25:7f:36:f4:8e:f9:51:7d:f8:98:83:8e:93:71:58:
46:4e:39:f0:ce:45:42:22:e0:62:bd:6a:79:2d:1e:
01:8e:d7:b0:d6:9e:a1:3e:d7:fa:3b:80:e2:68:ce:
80:97:ef:4e:e3:5e:a3:30:88:9f:e9:84:0a:6c:2c:
f8:bc:6f:bb:1d:35:b9:6c:c7:df:a5:88:fd:c9:d0:
4c:12:d5:2a:5c:85:57:ee:08:99:bf:2d:a6:13:6d:
0e:f9:f9:bc:20:8c:c2:04:86:5c:ef:1a:fa:0a:a0:
44:28:04:be:96:de:5c:21:c9:eb:cd:a8:82:85:5b:
e7:71:84:81:e8:b6:7a:a0:2b:c1:94:c5:97:3d:6f:
ef:d5:de:4f:de:74:ae:53:d3:10:fe:7c:f2:d5:9a:
da:1c:d0:ab:02:0c:46:d6:ec:4e:2f:79:ad:fe:93:
8b:f8:56:9b:bb:c1:f6:7c:c2:08:77:fe:20:c7:96:
bd:bb:80:fb:f2:16:50:ec:6c:79:98:b8:3a:a2:13:
e6:b1:0a:61:f8:73:a3:92:db:b4:54:40:05:8e:8e:
85:04:fa:dc:9c:b2:ca:f7:bd:98:fd:69:b1:f6:ad:
e6:02:d2:b5:3b:1b:3e:66:3d:55:6a:77:7d:97:8c:
be:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:29:33:05:40:8D:0E:84:73:3D:24:BE:2B:CC:D8:39:B4:D2:13:12
X509v3 Authority Key Identifier:
keyid:0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/WikzBUCNDoRzPSS-K8zYObTSExI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.29.240.0/22
Signature Algorithm: sha256WithRSAEncryption
27:c4:c7:b0:2f:f8:d7:47:b4:da:58:d0:a1:ff:a1:1e:53:e5:
49:48:58:74:5c:b1:bc:4d:18:f7:b0:e8:b4:72:7d:f4:f7:5d:
fa:d6:9d:26:60:d1:71:66:c6:db:40:de:22:d9:7f:cc:1d:78:
6c:4c:b3:e2:d8:3d:a3:5c:c9:9c:b6:91:63:7d:3e:98:a8:04:
b2:e8:2d:ab:7d:74:43:06:51:5a:d4:63:22:6a:2e:e6:fa:7e:
7a:11:df:23:d6:30:96:bd:98:52:64:13:d6:b8:46:33:11:6a:
da:76:88:cb:93:01:ed:8d:f4:5c:5b:2a:4a:78:47:72:c2:0b:
25:91:11:62:1c:ed:d1:e9:98:79:e4:04:80:8b:e3:5a:f2:5e:
fb:74:d1:fa:96:45:bf:ec:11:26:be:4d:99:98:be:2f:d0:f1:
44:94:72:69:73:7d:9c:ce:10:b6:c4:16:72:d6:18:1f:a8:0c:
62:40:dd:07:bb:7e:db:25:62:7a:37:e4:7c:c3:d1:b9:e5:df:
f5:ed:47:f8:24:e0:c3:26:3a:26:b2:ed:da:b1:c6:5d:59:61:
d3:2f:c6:84:b7:24:90:94:06:8a:5e:3b:a9:20:36:15:8f:af:
81:17:fe:ae:78:f9:ff:71:71:a5:89:f2:22:21:83:53:12:46:
b2:b5:b2:d4
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICCyYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEVB
RTJEMzMxRjJDNDI4MEMxNkFBOEJBRkUxNkZERENDRTM3MTVCNDAeFw0yMzA5MDEw
OTAxMjZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDVBMjkzMzA1NDA4RDBF
ODQ3MzNEMjRCRTJCQ0NEODM5QjREMjEzMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8j+LadSoaK3QSB0/WwiV/NvSO+VF9+JiDjpNxWEZOOfDORUIi
4GK9anktHgGO17DWnqE+1/o7gOJozoCX707jXqMwiJ/phApsLPi8b7sdNblsx9+l
iP3J0EwS1SpchVfuCJm/LaYTbQ75+bwgjMIEhlzvGvoKoEQoBL6W3lwhyevNqIKF
W+dxhIHotnqgK8GUxZc9b+/V3k/edK5T0xD+fPLVmtoc0KsCDEbW7E4vea3+k4v4
Vpu7wfZ8wgh3/iDHlr27gPvyFlDsbHmYuDqiE+axCmH4c6OS27RUQAWOjoUE+tyc
ssr3vZj9abH2reYC0rU7Gz5mPVVqd32XjL7XAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUWikzBUCNDoRzPSS+K8zYObTSExIwHwYDVR0jBBgwFoAUDq4tMx8sQoDBaqi6
/hb93M43FbQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSFlBL0Rx
NHRNeDhzUW9EQmFxaTZfaGI5M000M0ZiUS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
RHE0dE14OHNRb0RCYXFpNl9oYjkzTTQzRmJRLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvSFlBL1dpa3pCVUNORG9SelBTUy1LOHpZT2JU
U0V4SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJyHfAwDQYJ
KoZIhvcNAQELBQADggEBACfEx7Av+NdHtNpY0KH/oR5T5UlIWHRcsbxNGPew6LRy
ffT3XfrWnSZg0XFmxttA3iLZf8wdeGxMs+LYPaNcyZy2kWN9PpioBLLoLat9dEMG
UVrUYyJqLub6fnoR3yPWMJa9mFJkE9a4RjMRatp2iMuTAe2N9FxbKkp4R3LCCyWR
EWIc7dHpmHnkBICL41ryXvt00fqWRb/sESa+TZmYvi/Q8USUcmlzfZzOELbEFnLW
GB+oDGJA3Qe7ftslYno35HzD0bnl3/XtR/gk4MMmOiay7dqxxl1ZYdMvxoS3JJCU
BopeO6kgNhWPr4EX/q54+f9xcaWJ8iIhg1MSRrK1stQ=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org