Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/mI3KgCFpKHksesaUWjwOX4P9Ja4.roa
File: mI3KgCFpKHksesaUWjwOX4P9Ja4.roa (raw, json)
Hash identifier: pKxconpKPEckTRGE4Qj50WVX/Op9QfUnngHwExkZKW8=
Subject key identifier: 98:8D:CA:80:21:69:28:79:2C:7A:C6:94:5A:3C:0E:5F:83:FD:25:AE
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0C0D
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/mI3KgCFpKHksesaUWjwOX4P9Ja4.roa
Signing time: Fri 01 Sep 2023 09:13:56 +0000
ROA not before: Fri 01 Sep 2023 09:13:56 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18049
IP address blocks: 61.61.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3085 (0xc0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 1 09:13:56 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=988DCA80216928792C7AC6945A3C0E5F83FD25AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:3e:0a:7f:04:7b:a3:48:28:86:dc:9e:12:
a2:8a:a6:d5:9a:37:58:00:4a:63:68:f8:2b:b9:f8:
74:7e:b9:16:49:e4:6b:fe:e6:ca:0d:4f:e9:f7:f8:
cc:9a:24:26:49:af:38:34:91:bd:99:85:4e:be:11:
30:6b:06:8e:be:79:8d:20:fc:2a:df:aa:80:fe:ed:
ea:7f:f1:71:19:d1:13:18:a9:6c:3a:3b:66:87:25:
80:9f:cd:00:40:e2:81:d5:01:0c:08:b3:fd:f1:e6:
b8:64:42:71:e4:30:6d:5c:1d:22:1e:08:56:5c:23:
4f:a4:94:78:c9:16:31:7e:e0:62:5f:a0:1f:d1:31:
38:93:80:1c:14:24:8f:63:a6:85:94:fd:fe:8c:fe:
89:dc:21:00:8f:af:33:68:63:64:c7:a8:77:8e:b5:
02:92:f9:63:6f:de:3f:eb:34:c5:cc:ab:46:59:15:
bf:35:c6:d3:70:81:56:45:e0:88:d6:12:0a:14:73:
04:27:fa:be:b3:bc:3c:01:40:d2:c1:f2:d5:12:d9:
88:1b:45:cd:38:64:16:37:9a:56:7d:fe:8d:b7:8b:
35:a2:93:43:d5:04:ef:88:de:2d:04:c0:6e:ee:3a:
42:d8:35:7b:1a:73:67:3e:e8:86:c4:76:b3:a6:24:
ec:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8D:CA:80:21:69:28:79:2C:7A:C6:94:5A:3C:0E:5F:83:FD:25:AE
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/mI3KgCFpKHksesaUWjwOX4P9Ja4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.52.0/22
Signature Algorithm: sha256WithRSAEncryption
30:38:ea:ca:6b:d7:0d:46:4e:01:cd:61:8b:a3:a8:4c:64:e1:
67:9c:4d:30:19:8e:f5:e0:1e:15:8b:a1:05:e5:36:78:8b:41:
30:82:f1:fb:3c:dd:1a:03:80:e5:9b:8c:cc:88:cd:ba:2c:59:
70:59:68:7e:b4:8d:0e:ac:a3:ae:df:22:ae:73:b5:05:7a:01:
28:0b:67:34:e3:72:98:91:91:77:4f:5d:97:0e:22:96:10:bf:
8f:a1:8b:2d:55:bc:19:25:61:90:9e:10:74:08:df:bd:7f:5d:
5e:97:e3:3e:17:64:48:79:a3:bb:6e:46:09:32:a6:4a:a7:2f:
ab:01:c1:6b:78:39:12:b1:1b:6b:e8:4e:09:ca:02:74:3b:a6:
37:12:d5:8b:99:81:42:b1:b6:75:38:2c:18:b1:8e:33:aa:9e:
4b:fa:bd:8d:34:06:39:fe:87:3c:19:36:ba:c5:d3:65:b6:e2:
d6:fa:73:76:20:2d:e9:07:61:d4:4b:f0:04:00:04:95:52:34:
1a:f8:d6:27:04:dd:8c:ad:a6:11:8f:0c:94:4a:91:75:cd:fe:
5a:8a:25:3d:85:67:2d:f7:67:eb:1d:c6:91:be:0d:b5:6a:8f:
05:d0:d6:cc:c9:ff:c5:18:7f:1a:8f:07:3f:3b:ae:70:19:11:
e5:c2:f8:32
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDA0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3
MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yMzA5MDEw
OTEzNTZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk4OERDQTgwMjE2OTI4
NzkyQzdBQzY5NDVBM0MwRTVGODNGRDI1QUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6fj4KfwR7o0gohtyeEqKKptWaN1gASmNo+Cu5+HR+uRZJ5Gv+
5soNT+n3+MyaJCZJrzg0kb2ZhU6+ETBrBo6+eY0g/CrfqoD+7ep/8XEZ0RMYqWw6
O2aHJYCfzQBA4oHVAQwIs/3x5rhkQnHkMG1cHSIeCFZcI0+klHjJFjF+4GJfoB/R
MTiTgBwUJI9jpoWU/f6M/oncIQCPrzNoY2THqHeOtQKS+WNv3j/rNMXMq0ZZFb81
xtNwgVZF4IjWEgoUcwQn+r6zvDwBQNLB8tUS2YgbRc04ZBY3mlZ9/o23izWik0PV
BO+I3i0EwG7uOkLYNXsac2c+6IbEdrOmJOxZAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUmI3KgCFpKHksesaUWjwOX4P9Ja4wHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL
JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz
TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL21JM0tnQ0ZwS0hrc2VzYVVXandPWDRQ
OUphNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9PTQwDQYJ
KoZIhvcNAQELBQADggEBADA46spr1w1GTgHNYYujqExk4WecTTAZjvXgHhWLoQXl
NniLQTCC8fs83RoDgOWbjMyIzbosWXBZaH60jQ6so67fIq5ztQV6ASgLZzTjcpiR
kXdPXZcOIpYQv4+hiy1VvBklYZCeEHQI371/XV6X4z4XZEh5o7tuRgkypkqnL6sB
wWt4ORKxG2voTgnKAnQ7pjcS1YuZgUKxtnU4LBixjjOqnkv6vY00Bjn+hzwZNrrF
02W24tb6c3YgLekHYdRL8AQABJVSNBr41icE3YytphGPDJRKkXXN/lqKJT2FZy33
Z+sdxpG+DbVqjwXQ1szJ/8UYfxqPBz87rnAZEeXC+DI=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:21 2024 by rpki-client on console-fra.rpki-client.org