Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKSMF/ngZIVAFZ5_hqPBEsk1xP5HqTzFA.roa
File: ngZIVAFZ5_hqPBEsk1xP5HqTzFA.roa (raw, json)
Hash identifier: b2/9U12uRp8jrfpTr/pkHVg9Yhit9cQ2JI365g0tv1Y=
Subject key identifier: 9E:06:48:54:01:59:E7:F8:6A:3C:11:2C:93:5C:4F:E4:7A:93:CC:50
Certificate issuer: /CN=FBCFA1880AC86CE4FB99F974E9953F3597DCDE0A
Certificate serial: 0C38
Authority key identifier: FB:CF:A1:88:0A:C8:6C:E4:FB:99:F9:74:E9:95:3F:35:97:DC:DE:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-8-hiArIbOT7mfl06ZU_NZfc3go.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKSMF/ngZIVAFZ5_hqPBEsk1xP5HqTzFA.roa
Signing time: Fri 01 Sep 2023 09:14:56 +0000
ROA not before: Fri 01 Sep 2023 09:14:56 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131645
IP address blocks: 103.142.42.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3128 (0xc38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBCFA1880AC86CE4FB99F974E9953F3597DCDE0A
Validity
Not Before: Sep 1 09:14:56 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9E0648540159E7F86A3C112C935C4FE47A93CC50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:3f:4a:70:f7:3b:c0:06:c8:78:2f:81:e7:
7f:c5:80:06:fd:c8:20:c7:fb:32:18:86:c2:f7:df:
3c:49:60:5e:a9:df:97:8d:b5:7c:33:07:c8:f8:d8:
32:be:0b:7f:d4:77:fb:a4:dc:58:21:be:1e:37:e3:
bd:6e:5a:03:fd:87:41:4a:f2:8c:77:f6:71:cb:a7:
1c:57:15:16:5f:c2:ef:5f:a1:a0:0e:fe:be:b7:4b:
63:77:68:11:85:e2:ac:3d:7d:7d:d7:4e:d6:49:ad:
d1:0c:e8:de:e1:b1:23:87:d9:2d:07:d4:eb:8b:84:
fe:2d:90:84:7b:bd:e5:a9:09:b0:78:90:8f:cc:bd:
92:ff:24:07:bb:74:23:fe:59:23:07:f2:39:23:fc:
a6:94:63:07:c2:49:06:e7:60:8f:d6:8d:c2:26:79:
80:24:bd:3b:c0:c8:2c:4f:73:2d:fb:0a:ce:e0:24:
44:21:dc:db:06:b2:ed:90:23:b2:80:61:96:58:b0:
dc:d1:3c:bd:33:9f:df:5f:1f:ba:b3:a8:8d:1a:db:
bb:cb:71:d8:e3:23:ae:7c:ac:44:32:41:8c:d5:3e:
71:ca:52:67:1a:4d:f7:c5:fc:67:7e:58:5e:d6:8f:
eb:fa:6f:42:55:9c:a8:c4:45:bb:26:24:74:29:0a:
93:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:06:48:54:01:59:E7:F8:6A:3C:11:2C:93:5C:4F:E4:7A:93:CC:50
X509v3 Authority Key Identifier:
keyid:FB:CF:A1:88:0A:C8:6C:E4:FB:99:F9:74:E9:95:3F:35:97:DC:DE:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKSMF/-8-hiArIbOT7mfl06ZU_NZfc3go.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-8-hiArIbOT7mfl06ZU_NZfc3go.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKSMF/ngZIVAFZ5_hqPBEsk1xP5HqTzFA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.42.0/23
Signature Algorithm: sha256WithRSAEncryption
72:e7:6d:a1:eb:1e:96:0c:d5:f9:a2:63:8a:ba:7c:11:24:00:
0a:84:5c:2c:a9:0d:dc:c1:57:6f:56:ff:8f:f5:1c:b2:d6:de:
4f:3b:62:14:50:5d:60:de:1d:8a:a5:37:85:5f:36:6b:84:17:
b6:d3:c6:26:23:bd:1f:50:65:4f:0e:26:da:23:cf:1c:07:91:
31:82:ff:a5:f1:0f:3c:86:90:0c:75:36:ec:31:05:d1:70:eb:
10:a0:ae:09:5d:d3:ed:10:1d:19:45:7e:7e:ec:79:c8:1c:cd:
ce:8a:66:e2:cb:00:34:5d:10:c3:40:c7:7b:c6:b8:55:05:a9:
81:a7:e8:15:eb:ca:96:e3:dc:c0:d8:34:11:11:ab:f2:17:a7:
6a:c8:14:d9:be:03:65:29:06:47:3b:a1:02:1b:f3:2b:04:49:
56:4d:43:f4:7a:7f:9a:54:30:93:a5:07:e1:47:4b:00:f8:0c:
d7:96:c5:ae:96:0b:26:10:ba:47:00:26:70:3c:2b:b5:d8:64:
1c:fe:9b:4c:19:50:62:93:2d:16:a5:97:be:bc:da:54:e0:42:
8a:c6:b4:74:bb:b8:ae:d8:28:2c:02:8e:e6:ea:35:d9:b7:16:
be:d7:ad:41:3f:ca:04:86:eb:79:0e:41:0e:be:a4:3b:a0:d4:
42:28:5e:85
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDDgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkJD
RkExODgwQUM4NkNFNEZCOTlGOTc0RTk5NTNGMzU5N0RDREUwQTAeFw0yMzA5MDEw
OTE0NTZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlFMDY0ODU0MDE1OUU3
Rjg2QTNDMTEyQzkzNUM0RkU0N0E5M0NDNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCthD9KcPc7wAbIeC+B53/FgAb9yCDH+zIYhsL33zxJYF6p35eN
tXwzB8j42DK+C3/Ud/uk3Fghvh43471uWgP9h0FK8ox39nHLpxxXFRZfwu9foaAO
/r63S2N3aBGF4qw9fX3XTtZJrdEM6N7hsSOH2S0H1OuLhP4tkIR7veWpCbB4kI/M
vZL/JAe7dCP+WSMH8jkj/KaUYwfCSQbnYI/WjcImeYAkvTvAyCxPcy37Cs7gJEQh
3NsGsu2QI7KAYZZYsNzRPL0zn99fH7qzqI0a27vLcdjjI658rEQyQYzVPnHKUmca
TffF/Gd+WF7Wj+v6b0JVnKjERbsmJHQpCpMvAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUngZIVAFZ5/hqPBEsk1xP5HqTzFAwHwYDVR0jBBgwFoAU+8+hiArIbOT7mfl0
6ZU/NZfc3gowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0tTTUYv
LTgtaGlBckliT1Q3bWZsMDZaVV9OWmZjM2dvLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS8tOC1oaUFySWJPVDdtZmwwNlpVX05aZmMzZ28uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9LS1NNRi9uZ1pJVkFGWjVfaHFQQkVzazF4
UDVIcVR6RkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ44q
MA0GCSqGSIb3DQEBCwUAA4IBAQBy522h6x6WDNX5omOKunwRJAAKhFwsqQ3cwVdv
Vv+P9Ryy1t5PO2IUUF1g3h2KpTeFXzZrhBe208YmI70fUGVPDibaI88cB5Exgv+l
8Q88hpAMdTbsMQXRcOsQoK4JXdPtEB0ZRX5+7HnIHM3OimbiywA0XRDDQMd7xrhV
BamBp+gV68qW49zA2DQREavyF6dqyBTZvgNlKQZHO6ECG/MrBElWTUP0en+aVDCT
pQfhR0sA+AzXlsWulgsmELpHACZwPCu12GQc/ptMGVBiky0WpZe+vNpU4EKKxrR0
u7iu2CgsAo7m6jXZtxa+161BP8oEhut5DkEOvqQ7oNRCKF6F
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org