Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/iIRCdDEdm0abflLw8X4bH5nG4iM.roa
File: iIRCdDEdm0abflLw8X4bH5nG4iM.roa (raw, json)
Hash identifier: dTXDoYygih3eSe05W5MMd8fnk8sh6VI8ygZMB9OTe08=
Subject key identifier: 88:84:42:74:31:1D:9B:46:9B:7E:52:F0:F1:7E:1B:1F:99:C6:E2:23
Certificate issuer: /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Certificate serial: 0B48
Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/iIRCdDEdm0abflLw8X4bH5nG4iM.roa
Signing time: Fri 01 Sep 2023 09:11:15 +0000
ROA not before: Fri 01 Sep 2023 09:11:15 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131619
IP address blocks: 103.116.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2888 (0xb48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Validity
Not Before: Sep 1 09:11:15 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=88844274311D9B469B7E52F0F17E1B1F99C6E223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a0:1c:58:55:37:d5:2c:1d:2b:e0:75:6c:2b:
e1:16:01:3b:7d:92:18:8f:60:85:e1:59:71:0a:5b:
4b:49:c3:46:c8:3d:36:77:a3:d0:88:ae:65:9e:af:
d2:a2:47:e8:50:7a:26:a1:53:12:35:1a:f3:d5:fe:
45:56:1f:a6:20:71:4b:f3:b7:0b:e1:a5:c0:20:b5:
34:53:d1:04:b8:ab:5c:53:e9:4b:c5:88:f4:e5:bb:
34:3f:87:ab:98:26:c7:f2:2a:2b:c8:f6:30:e2:ec:
27:af:5c:38:7e:c8:9d:37:15:ea:4f:fb:8f:3d:65:
83:0d:b4:c6:d5:60:2c:71:30:21:6d:6a:10:1e:07:
dd:e0:cc:81:f1:96:40:ec:79:a5:13:05:6e:c3:05:
8d:f3:29:94:78:5e:66:a6:39:54:07:52:92:9b:68:
83:81:1c:bf:65:03:43:c7:23:ad:75:43:3e:62:bd:
85:59:7f:ba:76:da:16:1e:54:22:b7:da:8e:80:cb:
a1:e4:ef:33:a4:d4:02:f2:e2:53:f9:42:74:5f:24:
9e:17:d8:4e:a7:09:50:60:81:51:af:93:9d:f3:22:
91:27:f6:f7:80:42:c6:95:ce:24:b1:8f:1a:9a:4e:
d5:a5:76:42:9c:87:c2:e9:14:75:70:39:ee:86:e2:
f1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:84:42:74:31:1D:9B:46:9B:7E:52:F0:F1:7E:1B:1F:99:C6:E2:23
X509v3 Authority Key Identifier:
keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/iIRCdDEdm0abflLw8X4bH5nG4iM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.99.0/24
Signature Algorithm: sha256WithRSAEncryption
20:fe:12:8f:45:ba:7f:2a:f3:2c:b5:f6:d5:74:34:70:50:55:
83:da:d7:83:0b:50:09:9f:cb:1b:9b:57:3e:b0:f5:73:89:20:
ad:9c:02:a0:8d:b2:14:63:37:42:15:bb:4c:6a:c1:8b:f6:f3:
9b:99:f5:17:5c:28:97:49:d9:68:94:a5:f8:2f:a0:86:39:60:
29:ea:6f:42:75:03:63:53:61:04:d7:1b:2e:78:0e:bc:cd:2c:
c9:ac:c8:83:c1:de:1a:b8:31:ad:7b:cb:05:0f:b5:b7:cc:52:
10:16:ea:f3:45:ca:2d:86:59:23:c2:7a:38:62:c2:76:57:7b:
cd:2d:86:83:d2:f8:dd:a9:d0:1a:50:30:8e:64:33:83:e8:23:
93:4e:73:fe:3c:37:81:2d:25:32:d2:f3:ae:56:90:15:ae:ae:
a2:3b:77:c5:7f:6b:35:4f:59:08:66:23:86:31:5d:ab:0a:eb:
c5:be:19:0d:71:e3:06:2e:67:22:b4:dc:55:4c:f5:3d:f9:91:
6d:0f:b0:1e:3a:1d:3e:a6:72:b8:4b:18:aa:1c:9b:68:71:14:
0c:bd:22:75:4b:53:1f:b5:12:82:ad:b9:fa:55:5c:c6:5e:df:
9c:89:70:6c:c5:40:b0:e4:45:92:61:3f:65:47:91:25:0e:8b:
f2:fa:48:0b
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICC0gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMw
QkM0NDEwMTYyQTU4RDBEQjE3RTBBMzUxNTUxRkJCM0Q3NTFBMTAeFw0yMzA5MDEw
OTExMTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg4ODQ0Mjc0MzExRDlC
NDY5QjdFNTJGMEYxN0UxQjFGOTlDNkUyMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEoBxYVTfVLB0r4HVsK+EWATt9khiPYIXhWXEKW0tJw0bIPTZ3
o9CIrmWer9KiR+hQeiahUxI1GvPV/kVWH6YgcUvztwvhpcAgtTRT0QS4q1xT6UvF
iPTluzQ/h6uYJsfyKivI9jDi7CevXDh+yJ03FepP+489ZYMNtMbVYCxxMCFtahAe
B93gzIHxlkDseaUTBW7DBY3zKZR4XmamOVQHUpKbaIOBHL9lA0PHI611Qz5ivYVZ
f7p22hYeVCK32o6Ay6Hk7zOk1ALy4lP5QnRfJJ4X2E6nCVBggVGvk53zIpEn9veA
QsaVziSxjxqaTtWldkKch8LpFHVwOe6G4vF5AgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUiIRCdDEdm0abflLw8X4bH5nG4iMwHwYDVR0jBBgwFoAUgwvEQQFipY0NsX4K
NRVR+7PXUaEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSklHRU5U
RUMvZ3d2RVFRRmlwWTBOc1g0S05SVlItN1BYVWFFLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9nd3ZFUVFGaXBZME5zWDRLTlJWUi03UFhVYUUuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9KSUdFTlRFQy9pSVJDZERFZG0wYWJm
bEx3OFg0Ykg1bkc0aU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAZ3RjMA0GCSqGSIb3DQEBCwUAA4IBAQAg/hKPRbp/KvMstfbVdDRwUFWD2teD
C1AJn8sbm1c+sPVziSCtnAKgjbIUYzdCFbtMasGL9vObmfUXXCiXSdlolKX4L6CG
OWAp6m9CdQNjU2EE1xsueA68zSzJrMiDwd4auDGte8sFD7W3zFIQFurzRcothlkj
wno4YsJ2V3vNLYaD0vjdqdAaUDCOZDOD6COTTnP+PDeBLSUy0vOuVpAVrq6iO3fF
f2s1T1kIZiOGMV2rCuvFvhkNceMGLmcitNxVTPU9+ZFtD7AeOh0+pnK4SxiqHJto
cRQMvSJ1S1MftRKCrbn6VVzGXt+ciXBsxUCw5EWSYT9lR5ElDovy+kgL
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org