Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JFT/ubplESY14Z9Eg-vyBvYHEkZiFd8.roa
File: ubplESY14Z9Eg-vyBvYHEkZiFd8.roa (raw, json)
Hash identifier: 7QN0US9FyNmTIaGGwSiGxhr100pEXZab0SWn+8y8Cio=
Subject key identifier: B9:BA:65:11:26:35:E1:9F:44:83:EB:F2:06:F6:07:12:46:62:15:DF
Certificate issuer: /CN=627D675FF5E2C8BA90F4B655B108B6925DAF1595
Certificate serial: 0D
Authority key identifier: 62:7D:67:5F:F5:E2:C8:BA:90:F4:B6:55:B1:08:B6:92:5D:AF:15:95
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/ubplESY14Z9Eg-vyBvYHEkZiFd8.roa
Signing time: Tue 05 Sep 2023 07:56:55 +0000
ROA not before: Tue 05 Sep 2023 07:56:55 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18041
IP address blocks: 103.236.226.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=627D675FF5E2C8BA90F4B655B108B6925DAF1595
Validity
Not Before: Sep 5 07:56:55 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B9BA65112635E19F4483EBF206F60712466215DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:50:30:99:86:2d:b0:b6:34:f8:f3:a9:95:61:
57:3d:56:7b:41:3b:73:87:b8:d7:b7:98:97:98:c7:
11:55:93:c5:87:ec:3d:5d:b6:a6:37:47:90:6e:74:
ea:00:aa:e4:67:5a:0d:8c:b6:01:01:a9:aa:dd:9c:
83:4a:19:d6:ea:0e:61:2c:13:76:ef:1c:2b:37:87:
f9:a7:14:f7:7f:29:09:ba:33:81:32:04:63:fd:9a:
a2:75:81:e0:d8:34:db:6d:d0:47:8b:6f:e2:7b:ff:
bd:9c:96:bd:70:a9:13:f4:ce:5a:85:3a:8f:93:39:
b5:74:57:52:3b:9a:63:40:1e:00:75:27:26:74:dc:
9b:e9:78:33:08:f1:b7:86:0e:94:24:08:ef:72:19:
79:f0:d4:c0:33:a3:7a:ba:14:5d:4b:13:e0:35:b5:
15:66:03:18:4b:13:fb:f9:2a:77:5f:25:f7:d6:39:
7d:d4:20:0e:a7:fc:59:7e:03:dd:69:e4:3d:3c:c1:
75:1a:4e:d3:7f:f8:6d:d7:99:c5:3f:33:3d:cd:ce:
82:aa:dd:a2:91:fc:4b:7e:cb:ec:0f:e6:37:73:a6:
3d:2a:36:44:22:db:13:3e:52:e0:c0:5c:02:63:0f:
b7:e9:71:5b:34:df:bf:f3:90:ec:20:3c:57:c8:9e:
0c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BA:65:11:26:35:E1:9F:44:83:EB:F2:06:F6:07:12:46:62:15:DF
X509v3 Authority Key Identifier:
keyid:62:7D:67:5F:F5:E2:C8:BA:90:F4:B6:55:B1:08:B6:92:5D:AF:15:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/ubplESY14Z9Eg-vyBvYHEkZiFd8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.236.226.0/23
Signature Algorithm: sha256WithRSAEncryption
03:68:0d:2b:41:02:95:30:56:0a:46:07:19:46:bf:19:10:87:
78:de:03:71:f4:e9:03:b6:51:7c:c8:c1:99:f0:fe:f7:69:e8:
1b:e3:88:0f:c1:18:f5:24:b1:9c:75:91:66:52:41:ce:bd:fe:
12:9d:f2:1d:10:7a:1e:f6:7e:05:c1:31:d4:e6:0b:30:fa:9e:
2a:28:47:5d:3a:2d:91:b5:4b:97:61:9d:ac:fa:61:f6:b5:59:
95:1b:cb:4f:08:da:05:76:29:66:77:ac:9c:b7:44:8e:6c:d4:
9d:3e:39:55:59:a0:97:c5:89:86:ee:d3:0a:d1:0f:09:b3:dc:
04:0f:1a:ae:6f:f6:40:d6:22:e5:e2:c8:56:43:58:bb:80:fe:
f9:cb:a1:90:c1:90:ca:62:b3:61:45:f6:39:ff:68:b6:b2:bf:
80:b6:c5:c8:37:39:8d:0a:12:25:c1:dd:b6:a5:e3:40:98:f1:
17:d8:6a:4c:a6:ec:a5:70:f1:80:1c:1e:1a:33:36:c1:15:08:
c8:31:fa:0c:6f:10:0b:dc:91:13:c5:c3:26:08:29:1b:9a:fc:
c6:db:4e:1b:e9:01:eb:c3:f9:6e:69:90:bb:cf:d1:79:90:62:
6a:0a:d6:63:50:cf:19:28:4d:82:3c:7d:26:36:ca:e1:82:4b:
41:2f:fe:a8
-----BEGIN CERTIFICATE-----
MIIEyzCCA7OgAwIBAgIBDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MjdE
Njc1RkY1RTJDOEJBOTBGNEI2NTVCMTA4QjY5MjVEQUYxNTk1MB4XDTIzMDkwNTA3
NTY1NVoXDTI0MDgzMTAzMTA1M1owMzExMC8GA1UEAxMoQjlCQTY1MTEyNjM1RTE5
RjQ0ODNFQkYyMDZGNjA3MTI0NjYyMTVERjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKVQMJmGLbC2NPjzqZVhVz1We0E7c4e417eYl5jHEVWTxYfsPV22
pjdHkG506gCq5GdaDYy2AQGpqt2cg0oZ1uoOYSwTdu8cKzeH+acU938pCbozgTIE
Y/2aonWB4Ng0223QR4tv4nv/vZyWvXCpE/TOWoU6j5M5tXRXUjuaY0AeAHUnJnTc
m+l4Mwjxt4YOlCQI73IZefDUwDOjeroUXUsT4DW1FWYDGEsT+/kqd18l99Y5fdQg
Dqf8WX4D3WnkPTzBdRpO03/4bdeZxT8zPc3OgqrdopH8S37L7A/mN3OmPSo2RCLb
Ez5S4MBcAmMPt+lxWzTfv/OQ7CA8V8ieDMcCAwEAAaOCAegwggHkMB0GA1UdDgQW
BBS5umURJjXhn0SD6/IG9gcSRmIV3zAfBgNVHSMEGDAWgBRifWdf9eLIupD0tlWx
CLaSXa8VlTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGA1UdHwRSMFAwTqBM
oEqGSHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9KRlQvWW4x
blhfWGl5THFROUxaVnNRaTJrbDJ2RlpVLmNybDBgBggrBgEFBQcBAQRUMFIwUAYI
KwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9Z
bjFuWF9YaXlMcVE5TFpWc1FpMmtsMnZGWlUuY2VyMA4GA1UdDwEB/wQEAwIHgDCB
mQYIKwYBBQUHAQsEgYwwgYkwVAYIKwYBBQUHMAuGSHJzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS9KRlQvdWJwbEVTWTE0WjlFZy12eUJ2WUhFa1pp
RmQ4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv
bm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWfs4jANBgkq
hkiG9w0BAQsFAAOCAQEAA2gNK0EClTBWCkYHGUa/GRCHeN4DcfTpA7ZRfMjBmfD+
92noG+OID8EY9SSxnHWRZlJBzr3+Ep3yHRB6HvZ+BcEx1OYLMPqeKihHXTotkbVL
l2GdrPph9rVZlRvLTwjaBXYpZnesnLdEjmzUnT45VVmgl8WJhu7TCtEPCbPcBA8a
rm/2QNYi5eLIVkNYu4D++cuhkMGQymKzYUX2Of9otrK/gLbFyDc5jQoSJcHdtqXj
QJjxF9hqTKbspXDxgBweGjM2wRUIyDH6DG8QC9yRE8XDJggpG5r8xttOG+kB68P5
bmmQu8/ReZBiagrWY1DPGShNgjx9JjbK4YJLQS/+qA==
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org