Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/__iHDiiyDNPOURf9Z4mQcHmdOVE.roa
File: __iHDiiyDNPOURf9Z4mQcHmdOVE.roa (raw, json)
Hash identifier: N7W8piepzVcfX25R+WzWMNnyxqulZT1M+k/t/hnN27I=
Subject key identifier: FF:F8:87:0E:28:B2:0C:D3:CE:51:17:FD:67:89:90:70:79:9D:39:51
Certificate issuer: /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Certificate serial: 0BA5
Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/__iHDiiyDNPOURf9Z4mQcHmdOVE.roa
Signing time: Fri 01 Sep 2023 09:11:32 +0000
ROA not before: Fri 01 Sep 2023 09:11:32 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18042
IP address blocks: 58.86.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2981 (0xba5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Validity
Not Before: Sep 1 09:11:32 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FFF8870E28B20CD3CE5117FD67899070799D3951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:48:a0:3f:e1:da:8e:30:6c:fb:ea:53:1f:52:
f8:73:aa:84:c9:71:2c:64:b1:7a:db:84:6a:f7:cc:
7d:57:4d:16:21:e6:8a:c2:99:71:3f:ff:97:6d:07:
41:76:bc:45:03:20:60:cc:23:a9:19:7c:f8:d1:76:
e4:cf:ff:93:d5:20:78:03:43:dc:a5:50:dc:0d:0c:
9d:11:9d:50:f2:1a:b9:bc:0d:04:e4:30:c4:85:74:
1d:94:dd:ff:07:db:a9:8f:83:5f:fa:43:ff:c6:19:
63:b9:10:a2:20:7f:17:86:3f:d5:0c:3a:84:3e:28:
3c:cb:aa:07:34:c4:63:cc:69:26:e0:9c:c5:65:7e:
80:4b:ac:50:d1:4e:74:90:56:dc:41:73:2c:d2:c7:
a4:4f:c9:7d:3e:00:3b:0b:7d:ca:e2:5e:3c:c7:59:
72:2a:34:9c:4f:60:ea:e6:3a:60:57:d3:c4:47:03:
51:f7:20:df:e6:49:7b:dc:b2:ae:ca:cb:3a:0a:92:
97:34:54:b2:04:94:57:84:39:92:b3:1d:a2:40:0f:
f4:4e:d2:f3:aa:7d:31:b3:81:19:55:ca:5c:b7:d0:
78:14:29:5d:73:da:c5:c6:8b:fd:eb:5e:45:d8:de:
6f:87:d0:86:c0:69:0d:3a:cc:77:a8:eb:be:3a:72:
6e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F8:87:0E:28:B2:0C:D3:CE:51:17:FD:67:89:90:70:79:9D:39:51
X509v3 Authority Key Identifier:
keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/__iHDiiyDNPOURf9Z4mQcHmdOVE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
58.86.38.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:4f:c5:39:25:5b:5d:54:20:a3:9e:0b:ba:56:78:6e:65:bd:
00:14:03:28:f1:7d:a1:8c:8c:b3:0c:01:d7:d3:9b:69:6e:1a:
e3:1e:f9:2b:09:3c:99:40:e1:05:bb:3a:2a:58:d1:43:c9:36:
29:2d:92:7e:91:73:78:39:9a:8b:7b:09:ab:26:8d:23:41:e8:
c7:08:ca:36:00:a4:0f:49:77:38:1a:44:7f:f0:4c:af:d9:f6:
18:17:69:15:cf:44:a8:ef:81:b4:28:9c:64:77:52:92:e4:7a:
66:96:e8:1a:be:9e:ba:1f:78:b1:0b:d7:32:71:1c:f9:9f:9f:
90:44:11:2b:79:61:57:8c:20:ee:45:11:11:fb:bb:ae:a0:8a:
1d:13:84:e4:d9:90:85:ff:0e:0d:38:8a:f5:2c:33:d7:83:a5:
f9:af:70:1d:f0:aa:41:a3:50:7d:43:7a:17:e7:5b:80:cd:1a:
9e:b9:56:a8:31:47:7b:49:e2:db:e7:c4:85:a5:ce:6f:bd:82:
46:c8:15:51:c6:9d:68:90:8e:c8:1a:78:e0:b1:13:57:80:d9:
1c:07:03:24:d1:ca:76:a6:ca:9e:ba:93:8c:eb:d5:f7:26:c8:
f1:c4:a8:88:87:a8:13:5c:f7:95:df:81:eb:68:b2:13:e2:9c:
f5:d1:fb:7a
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICC6UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRC
RUQ3NTFEQThGMDE5MzA0MThFMkRFMjQzMkQwRDAzQTk3REE3QzAeFw0yMzA5MDEw
OTExMzJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZGRjg4NzBFMjhCMjBD
RDNDRTUxMTdGRDY3ODk5MDcwNzk5RDM5NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClSKA/4dqOMGz76lMfUvhzqoTJcSxksXrbhGr3zH1XTRYh5orC
mXE//5dtB0F2vEUDIGDMI6kZfPjRduTP/5PVIHgDQ9ylUNwNDJ0RnVDyGrm8DQTk
MMSFdB2U3f8H26mPg1/6Q//GGWO5EKIgfxeGP9UMOoQ+KDzLqgc0xGPMaSbgnMVl
foBLrFDRTnSQVtxBcyzSx6RPyX0+ADsLfcriXjzHWXIqNJxPYOrmOmBX08RHA1H3
IN/mSXvcsq7KyzoKkpc0VLIElFeEOZKzHaJAD/RO0vOqfTGzgRlVyly30HgUKV1z
2sXGi/3rXkXY3m+H0IbAaQ06zHeo6746cm4JAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQU//iHDiiyDNPOURf9Z4mQcHmdOVEwHwYDVR0jBBgwFoAULb7XUdqPAZMEGOLe
JDLQ0DqX2nwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0JUL0xi
N1hVZHFQQVpNRUdPTGVKRExRMERxWDJudy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
TGI3WFVkcVBBWk1FR09MZUpETFEwRHFYMm53LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvS0JUL19faUhEaWl5RE5QT1VSZjlaNG1RY0ht
ZE9WRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA6ViYwDQYJ
KoZIhvcNAQELBQADggEBAGtPxTklW11UIKOeC7pWeG5lvQAUAyjxfaGMjLMMAdfT
m2luGuMe+SsJPJlA4QW7OipY0UPJNiktkn6Rc3g5mot7CasmjSNB6McIyjYApA9J
dzgaRH/wTK/Z9hgXaRXPRKjvgbQonGR3UpLkemaW6Bq+nrofeLEL1zJxHPmfn5BE
ESt5YVeMIO5FERH7u66gih0ThOTZkIX/Dg04ivUsM9eDpfmvcB3wqkGjUH1Dehfn
W4DNGp65VqgxR3tJ4tvnxIWlzm+9gkbIFVHGnWiQjsgaeOCxE1eA2RwHAyTRynam
yp66k4zr1fcmyPHEqIiHqBNc95XfgetoshPinPXR+3o=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org