Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/META/3sC_xWTYOCRhjRpfY6BlhG6qMY8.roa
File: 3sC_xWTYOCRhjRpfY6BlhG6qMY8.roa (raw, json)
Hash identifier: rakLdUcEbckxMUq5OY2IB9IVMaCmqWPd6aLKqf4TLlY=
Subject key identifier: DE:C0:BF:C5:64:D8:38:24:61:8D:1A:5F:63:A0:65:84:6E:AA:31:8F
Certificate issuer: /CN=C87695C6B48F13DD56A76B299DD54D8F1EB369D5
Certificate serial: 0E32
Authority key identifier: C8:76:95:C6:B4:8F:13:DD:56:A7:6B:29:9D:D5:4D:8F:1E:B3:69:D5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/yHaVxrSPE91Wp2spndVNjx6zadU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/META/3sC_xWTYOCRhjRpfY6BlhG6qMY8.roa
Signing time: Tue 29 Sep 2020 10:04:57 +0000
ROA not before: Tue 29 Sep 2020 10:04:57 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131631
IP address blocks: 103.131.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3634 (0xe32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C87695C6B48F13DD56A76B299DD54D8F1EB369D5
Validity
Not Before: Sep 29 10:04:57 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DEC0BFC564D83824618D1A5F63A065846EAA318F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e9:20:8a:c0:a4:0e:eb:15:12:44:49:6f:fc:
7e:ff:c2:99:e9:cd:c1:8c:ef:d3:11:fc:98:d5:0f:
50:2b:2b:4c:10:69:41:93:28:6b:46:50:4c:46:d5:
c1:5c:bf:24:21:73:f3:63:34:06:fe:ce:cb:a4:3c:
77:ca:b1:4f:7c:24:57:f8:8a:a2:ef:e5:77:f4:48:
3b:03:9d:95:bc:ff:3d:d8:ec:17:44:d3:9c:2b:1c:
b6:0f:2e:1e:af:d3:e5:c9:01:ba:fe:22:ff:00:0d:
23:57:d3:7d:6b:83:63:d1:e4:87:72:d2:6f:62:8c:
f4:c5:77:2e:db:b6:4e:47:2b:0f:b6:ec:2a:f8:b4:
0f:a7:67:aa:e0:fd:22:4c:79:43:32:a7:f7:aa:7b:
f4:31:3e:47:e4:1b:00:b9:ca:fc:3e:b5:42:07:a6:
64:0b:b6:48:e0:2c:9a:c7:bb:ad:54:8a:8f:a5:67:
c6:ca:70:fd:c5:1a:2a:c3:90:4b:87:3e:9b:e2:84:
eb:8d:d7:b2:f2:76:7b:72:cf:c1:a6:ce:34:4e:a7:
22:bb:33:45:21:e1:cd:8a:d9:63:89:03:9b:73:0a:
41:99:45:29:31:6a:fe:2b:78:da:ae:e0:7e:1c:46:
da:3f:a9:9d:83:f5:c7:c0:1c:b2:d4:23:8b:8e:a4:
06:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C0:BF:C5:64:D8:38:24:61:8D:1A:5F:63:A0:65:84:6E:AA:31:8F
X509v3 Authority Key Identifier:
keyid:C8:76:95:C6:B4:8F:13:DD:56:A7:6B:29:9D:D5:4D:8F:1E:B3:69:D5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/META/yHaVxrSPE91Wp2spndVNjx6zadU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/yHaVxrSPE91Wp2spndVNjx6zadU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/META/3sC_xWTYOCRhjRpfY6BlhG6qMY8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.150.0/24
Signature Algorithm: sha256WithRSAEncryption
16:d6:ff:11:b6:a8:b4:9a:5e:d8:d0:ca:a2:04:1c:dc:6a:b6:
ee:ef:42:89:8f:c3:42:af:bb:f1:a1:49:8f:ab:b5:9b:44:60:
2c:75:2f:a9:81:32:d8:bb:1a:ab:7e:52:27:c5:4e:b3:00:62:
4a:d1:ad:fe:c4:7a:45:98:ee:a0:f1:e9:9c:10:3c:e9:0d:6f:
72:65:48:c9:ff:ea:d3:83:d2:57:b6:07:5d:44:1d:c8:81:66:
d4:df:f1:76:44:8e:a9:7d:ba:8c:b4:8d:fe:74:31:50:6f:5b:
79:35:77:0f:89:5b:1a:9b:70:92:08:5a:9e:85:19:0d:80:76:
e3:e8:55:fb:a8:4a:c0:f7:02:6a:f9:9b:61:de:c0:47:8f:7f:
8a:a0:bb:27:90:01:5c:52:7c:29:36:c3:1a:21:29:f2:95:18:
f5:de:3a:8f:9e:7a:05:75:17:ab:64:91:0f:84:c4:93:fd:de:
96:ee:19:d9:b5:f5:c5:e8:7f:d5:04:44:d4:ce:83:9d:3a:30:
e6:31:6e:2f:98:64:51:d8:0f:2d:74:3f:b3:ec:a2:42:fc:99:
97:4b:8d:fa:c4:54:8a:57:b8:41:7d:00:59:35:f9:02:f4:47:
da:ce:bd:bc:a5:55:ba:ad:1a:64:59:8e:9c:a6:bb:33:aa:e2:
ef:a6:07:91
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDjIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzg3
Njk1QzZCNDhGMTNERDU2QTc2QjI5OURENTREOEYxRUIzNjlENTAeFw0yMDA5Mjkx
MDA0NTdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKERFQzBCRkM1NjREODM4
MjQ2MThEMUE1RjYzQTA2NTg0NkVBQTMxOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDV6SCKwKQO6xUSRElv/H7/wpnpzcGM79MR/JjVD1ArK0wQaUGT
KGtGUExG1cFcvyQhc/NjNAb+zsukPHfKsU98JFf4iqLv5Xf0SDsDnZW8/z3Y7BdE
05wrHLYPLh6v0+XJAbr+Iv8ADSNX031rg2PR5Idy0m9ijPTFdy7btk5HKw+27Cr4
tA+nZ6rg/SJMeUMyp/eqe/QxPkfkGwC5yvw+tUIHpmQLtkjgLJrHu61Uio+lZ8bK
cP3FGirDkEuHPpvihOuN17Lydntyz8GmzjROpyK7M0Uh4c2K2WOJA5tzCkGZRSkx
av4reNqu4H4cRto/qZ2D9cfAHLLUI4uOpAYpAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU3sC/xWTYOCRhjRpfY6BlhG6qMY8wHwYDVR0jBBgwFoAUyHaVxrSPE91Wp2sp
ndVNjx6zadUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUVUQS95
SGFWeHJTUEU5MVdwMnNwbmRWTmp4NnphZFUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L3lIYVZ4clNQRTkxV3Ayc3BuZFZOang2emFkVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL01FVEEvM3NDX3hXVFlPQ1JoalJwZlk2Qmxo
RzZxTVk4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeDljAN
BgkqhkiG9w0BAQsFAAOCAQEAFtb/EbaotJpe2NDKogQc3Gq27u9CiY/DQq+78aFJ
j6u1m0RgLHUvqYEy2Lsaq35SJ8VOswBiStGt/sR6RZjuoPHpnBA86Q1vcmVIyf/q
04PSV7YHXUQdyIFm1N/xdkSOqX26jLSN/nQxUG9beTV3D4lbGptwkghanoUZDYB2
4+hV+6hKwPcCavmbYd7AR49/iqC7J5ABXFJ8KTbDGiEp8pUY9d46j556BXUXq2SR
D4TEk/3elu4Z2bX1xeh/1QRE1M6DnTow5jFuL5hkUdgPLXQ/s+yiQvyZl0uN+sRU
ile4QX0AWTX5AvRH2s69vKVVuq0aZFmOnKa7M6ri76YHkQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org