Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/StE-piNdnNtJ9mQyB7y0U929XPI.roa
File: StE-piNdnNtJ9mQyB7y0U929XPI.roa (raw, json)
Hash identifier: qobxeEv+dajR1ecHrY6h3UyJBvUSwRX11NveMEv9Uyg=
Subject key identifier: 4A:D1:3E:A6:23:5D:9C:DB:49:F6:64:32:07:BC:B4:53:DD:BD:5C:F2
Certificate issuer: /CN=F95F0AA4EEE346F077A0CEEC8D06CC498F9B1AB9
Certificate serial: 04
Authority key identifier: F9:5F:0A:A4:EE:E3:46:F0:77:A0:CE:EC:8D:06:CC:49:8F:9B:1A:B9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-V8KpO7jRvB3oM7sjQbMSY-bGrk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/StE-piNdnNtJ9mQyB7y0U929XPI.roa
Signing time: Thu 16 Nov 2023 08:10:59 +0000
ROA not before: Thu 16 Nov 2023 08:10:59 +0000
ROA not after: Wed 13 Nov 2024 15:30:20 +0000
asID: 131642
IP address blocks: 202.47.172.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F95F0AA4EEE346F077A0CEEC8D06CC498F9B1AB9
Validity
Not Before: Nov 16 08:10:59 2023 GMT
Not After : Nov 13 15:30:20 2024 GMT
Subject: CN=4AD13EA6235D9CDB49F6643207BCB453DDBD5CF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:70:2b:22:e5:db:a8:9b:9a:2a:ff:49:2a:
15:e8:83:ad:f3:0c:f0:11:ab:5b:14:47:5e:10:31:
15:40:f9:7a:c9:12:24:8d:ac:41:50:5b:a2:cd:2a:
e0:ab:9f:ad:e9:1d:2f:61:fd:74:5a:67:9a:db:ed:
5e:40:9a:e0:1b:39:74:da:be:50:02:c3:7b:a3:b5:
fa:e6:5f:a7:52:85:4d:09:a7:5b:c2:b0:a0:84:a2:
14:5c:4f:5c:7f:15:5c:25:84:43:c3:d2:65:a9:ea:
5b:03:a5:a6:14:67:be:02:d6:df:7a:e1:5e:2e:d4:
bc:bd:11:7f:9b:52:8f:7a:03:42:40:fe:39:0d:96:
de:22:38:20:0f:4d:cd:6d:18:29:37:0d:69:55:6d:
25:17:6c:42:3f:71:a6:b6:b2:67:49:36:fc:32:64:
9d:d7:67:dc:ff:ca:c9:09:4d:4b:0b:ad:cb:e1:2f:
03:73:52:1e:31:73:47:dc:81:7a:38:97:91:0c:3c:
d0:c0:90:67:11:ea:70:4b:de:71:01:00:33:c2:0d:
29:9a:73:71:a9:2b:03:6b:67:1a:36:79:48:c1:bb:
8f:d0:45:1c:08:b5:b4:60:f3:00:c8:8e:28:60:64:
f1:f3:35:58:d0:79:d8:65:31:e8:ff:5c:01:91:be:
cb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D1:3E:A6:23:5D:9C:DB:49:F6:64:32:07:BC:B4:53:DD:BD:5C:F2
X509v3 Authority Key Identifier:
keyid:F9:5F:0A:A4:EE:E3:46:F0:77:A0:CE:EC:8D:06:CC:49:8F:9B:1A:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/-V8KpO7jRvB3oM7sjQbMSY-bGrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-V8KpO7jRvB3oM7sjQbMSY-bGrk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/StE-piNdnNtJ9mQyB7y0U929XPI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.47.172.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:dc:7d:7e:35:ce:9b:42:3d:82:c2:ee:f6:13:79:9f:b8:a3:
3b:0b:69:52:8a:4d:b8:79:8a:92:26:9a:d1:78:86:69:52:08:
6f:a8:18:d7:b0:ec:f3:6e:d0:75:e6:9c:d5:53:8d:d9:77:81:
29:76:93:c1:f7:9a:6d:d9:68:16:98:6f:8d:24:62:c1:47:6e:
80:03:66:f4:0f:a7:c2:eb:7b:d8:e5:38:cc:b5:c0:ea:2e:7f:
74:2f:3d:ef:a9:aa:7e:0d:6c:33:b5:a9:2b:d1:79:b2:19:44:
49:cc:b2:14:4e:5b:da:df:fe:b3:93:81:63:2a:83:00:c5:97:
f3:51:30:b3:d2:2a:63:fb:96:69:e7:5d:cc:7b:bd:39:fd:ad:
b5:01:85:6d:91:c9:b0:b7:e4:ed:26:1b:95:c3:cf:16:89:e8:
b0:39:be:19:17:48:6c:28:1f:bc:ba:1d:e8:38:7a:a4:ef:2f:
1f:17:85:44:ca:c5:4f:32:af:58:61:8c:08:c6:eb:b1:ce:8a:
e0:b7:98:d0:82:62:3f:7c:6b:e9:d1:4f:8a:a9:96:f1:48:a9:
c9:9a:1e:6d:4c:01:0d:25:d8:92:60:d3:ed:ac:60:05:64:62:
42:aa:9e:30:a4:ee:5a:93:c0:8b:fc:f2:12:45:45:e9:ab:0e:
84:02:c8:bc
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGOTVG
MEFBNEVFRTM0NkYwNzdBMENFRUM4RDA2Q0M0OThGOUIxQUI5MB4XDTIzMTExNjA4
MTA1OVoXDTI0MTExMzE1MzAyMFowMzExMC8GA1UEAxMoNEFEMTNFQTYyMzVEOUNE
QjQ5RjY2NDMyMDdCQ0I0NTNEREJENUNGMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMDHcCsi5duom5oq/0kqFeiDrfMM8BGrWxRHXhAxFUD5eskSJI2s
QVBbos0q4KufrekdL2H9dFpnmtvtXkCa4Bs5dNq+UALDe6O1+uZfp1KFTQmnW8Kw
oISiFFxPXH8VXCWEQ8PSZanqWwOlphRnvgLW33rhXi7UvL0Rf5tSj3oDQkD+OQ2W
3iI4IA9NzW0YKTcNaVVtJRdsQj9xprayZ0k2/DJknddn3P/KyQlNSwuty+EvA3NS
HjFzR9yBejiXkQw80MCQZxHqcEvecQEAM8INKZpzcakrA2tnGjZ5SMG7j9BFHAi1
tGDzAMiOKGBk8fM1WNB52GUx6P9cAZG+yw0CAwEAAaOCAe4wggHqMB0GA1UdDgQW
BBRK0T6mI12c20n2ZDIHvLRT3b1c8jAfBgNVHSMEGDAWgBT5Xwqk7uNG8HegzuyN
BsxJj5sauTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP
oE2GS3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9LQUlXRUkv
LVY4S3BPN2pSdkIzb003c2pRYk1TWS1iR3JrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS8tVjhLcE83alJ2QjNvTTdzalFiTVNZLWJHcmsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9LQUlXRUkvU3RFLXBpTmRuTnRKOW1ReUI3
eTBVOTI5WFBJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3
L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcov
rDANBgkqhkiG9w0BAQsFAAOCAQEAtdx9fjXOm0I9gsLu9hN5n7ijOwtpUopNuHmK
kiaa0XiGaVIIb6gY17Ds827Qdeac1VON2XeBKXaTwfeabdloFphvjSRiwUdugANm
9A+nwut72OU4zLXA6i5/dC8976mqfg1sM7WpK9F5shlEScyyFE5b2t/+s5OBYyqD
AMWX81Ews9IqY/uWaeddzHu9Of2ttQGFbZHJsLfk7SYblcPPFonosDm+GRdIbCgf
vLod6Dh6pO8vHxeFRMrFTzKvWGGMCMbrsc6K4LeY0IJiP3xr6dFPiqmW8UipyZoe
bUwBDSXYkmDT7axgBWRiQqqeMKTuWpPAi/zyEkVF6asOhALIvA==
-----END CERTIFICATE-----
Generated at Sun Sep 22 22:34:31 2024 by rpki-client on console-fra.rpki-client.org