Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/-4MYn2CbJITR8IfNEsYIGH0K9NI.roa
File: -4MYn2CbJITR8IfNEsYIGH0K9NI.roa (raw, json)
Hash identifier: B0PrBCo7fsGpmM5tsu4AwHXDhwqfeDL2ZNwJiD1cs48=
Subject key identifier: FB:83:18:9F:60:9B:24:84:D1:F0:87:CD:12:C6:08:18:7D:0A:F4:D2
Certificate issuer: /CN=EDC0457A140B2D436CE7FAE67D8491CFFC6E7F3E
Certificate serial: 0AE4
Authority key identifier: ED:C0:45:7A:14:0B:2D:43:6C:E7:FA:E6:7D:84:91:CF:FC:6E:7F:3E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7cBFehQLLUNs5_rmfYSRz_xufz4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/-4MYn2CbJITR8IfNEsYIGH0K9NI.roa
Signing time: Fri 01 Sep 2023 09:16:01 +0000
ROA not before: Fri 01 Sep 2023 09:16:01 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9676
IP address blocks: 103.123.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2788 (0xae4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDC0457A140B2D436CE7FAE67D8491CFFC6E7F3E
Validity
Not Before: Sep 1 09:16:01 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FB83189F609B2484D1F087CD12C608187D0AF4D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:73:0f:29:0f:b6:a6:b6:fe:6c:c7:31:46:8f:
8d:01:36:cc:1e:26:bc:1e:f2:6b:01:ba:34:0c:7b:
eb:4c:25:20:33:c5:7d:c5:60:6a:7b:ea:c2:ca:ca:
fb:4f:7a:8a:0b:c7:bc:6e:d5:39:19:f7:f4:82:a6:
5f:71:89:3c:b3:a0:08:36:e9:70:a8:bc:99:e5:1d:
37:94:ed:d3:da:db:10:5a:86:d3:04:ad:8c:bf:f2:
84:22:7e:45:1f:c6:21:60:74:4c:7d:30:49:be:ee:
fa:15:7d:c0:ab:8e:86:53:c3:30:b1:00:0d:93:82:
06:67:2d:cd:37:33:b2:55:e4:a7:93:ed:54:5a:a4:
bc:ae:2e:da:e1:4f:cc:48:51:78:99:d0:ae:1e:43:
53:ba:73:fd:81:4b:b3:60:ba:d1:73:3d:b2:79:ad:
e9:f5:52:71:07:eb:c3:10:aa:71:b3:cf:b1:2e:16:
b4:e7:89:f4:0b:10:67:db:20:45:aa:16:57:c0:15:
ca:7f:0b:90:a5:f3:ed:5c:46:d8:16:4b:25:ea:a0:
e8:42:6b:e6:a7:e8:73:73:c6:af:0e:eb:d1:8c:e8:
19:3b:06:ad:13:15:b0:97:c6:53:1b:72:f7:d1:68:
d1:98:50:58:7f:e1:31:1a:87:3c:ce:b6:73:07:df:
1a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:83:18:9F:60:9B:24:84:D1:F0:87:CD:12:C6:08:18:7D:0A:F4:D2
X509v3 Authority Key Identifier:
keyid:ED:C0:45:7A:14:0B:2D:43:6C:E7:FA:E6:7D:84:91:CF:FC:6E:7F:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/7cBFehQLLUNs5_rmfYSRz_xufz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7cBFehQLLUNs5_rmfYSRz_xufz4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/-4MYn2CbJITR8IfNEsYIGH0K9NI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.0.0/24
Signature Algorithm: sha256WithRSAEncryption
44:00:41:c0:ae:1a:57:de:33:d9:c1:db:fa:0f:2d:24:05:b4:
3e:4b:2b:31:60:e7:bc:db:7d:51:fd:a4:96:42:e5:58:68:a2:
de:49:54:5d:08:16:05:b8:01:82:c9:97:82:ac:25:1c:c6:58:
4a:1d:11:c0:32:f9:94:8f:d3:c4:0b:59:64:36:66:bf:85:a3:
a9:0a:8c:24:f2:52:71:c5:05:7e:68:2d:8b:86:9a:79:e6:e4:
ee:1f:95:37:49:35:6c:2f:96:26:36:68:b7:b4:ce:8b:e1:bd:
7f:3d:66:52:82:04:90:6e:8d:46:98:09:84:f7:65:68:19:ad:
1a:3e:02:62:93:59:2d:21:c2:cd:d5:6b:89:ec:a7:a3:5d:72:
5c:d0:d8:8b:73:d7:82:d0:67:1a:2e:61:25:15:53:f8:82:9e:
36:cc:bf:bc:38:03:b8:0d:50:d9:7d:63:95:51:ff:9d:b9:12:
18:e2:70:52:ce:d4:37:7d:3c:ae:c7:a6:f9:7a:7c:b4:fc:d3:
a4:7d:c6:ea:17:f7:29:b5:92:d0:e7:ac:6b:f9:1e:16:60:01:
e3:d1:e9:ce:af:bf:52:33:43:fb:af:a6:f8:f8:3a:58:a6:85:
6e:fd:69:21:48:99:4a:a9:58:39:6f:8e:b8:2d:27:56:2a:1f:
bc:a5:6e:54
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCuQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRURD
MDQ1N0ExNDBCMkQ0MzZDRTdGQUU2N0Q4NDkxQ0ZGQzZFN0YzRTAeFw0yMzA5MDEw
OTE2MDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZCODMxODlGNjA5QjI0
ODREMUYwODdDRDEyQzYwODE4N0QwQUY0RDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDzcw8pD7amtv5sxzFGj40BNsweJrwe8msBujQMe+tMJSAzxX3F
YGp76sLKyvtPeooLx7xu1TkZ9/SCpl9xiTyzoAg26XCovJnlHTeU7dPa2xBahtME
rYy/8oQifkUfxiFgdEx9MEm+7voVfcCrjoZTwzCxAA2TggZnLc03M7JV5KeT7VRa
pLyuLtrhT8xIUXiZ0K4eQ1O6c/2BS7NgutFzPbJ5ren1UnEH68MQqnGzz7EuFrTn
ifQLEGfbIEWqFlfAFcp/C5Cl8+1cRtgWSyXqoOhCa+an6HNzxq8O69GM6Bk7Bq0T
FbCXxlMbcvfRaNGYUFh/4TEahzzOtnMH3xqbAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU+4MYn2CbJITR8IfNEsYIGH0K9NIwHwYDVR0jBBgwFoAU7cBFehQLLUNs5/rm
fYSRz/xufz4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEVUU1dJ
Ti83Y0JGZWhRTExVTnM1X3JtZllTUnpfeHVmejQuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBLzdjQkZlaFFMTFVOczVfcm1mWVNSel94dWZ6NC5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0xFVFNXSU4vLTRNWW4yQ2JKSVRSOElm
TkVzWUlHSDBLOU5JLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AGd7ADANBgkqhkiG9w0BAQsFAAOCAQEARABBwK4aV94z2cHb+g8tJAW0PksrMWDn
vNt9Uf2klkLlWGii3klUXQgWBbgBgsmXgqwlHMZYSh0RwDL5lI/TxAtZZDZmv4Wj
qQqMJPJSccUFfmgti4aaeebk7h+VN0k1bC+WJjZot7TOi+G9fz1mUoIEkG6NRpgJ
hPdlaBmtGj4CYpNZLSHCzdVrieyno11yXNDYi3PXgtBnGi5hJRVT+IKeNsy/vDgD
uA1Q2X1jlVH/nbkSGOJwUs7UN308rsem+Xp8tPzTpH3G6hf3KbWS0Oesa/keFmAB
49Hpzq+/UjND+6+m+Pg6WKaFbv1pIUiZSqlYOW+OuC0nViofvKVuVA==
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:21 2024 by rpki-client on console-fra.rpki-client.org