Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MKY/BalBOrYy9dlaoToEQjGPsF5hlSA.roa
File: BalBOrYy9dlaoToEQjGPsF5hlSA.roa (raw, json)
Hash identifier: nYrXhGhteZm2wR9bTU/gLDX7ku/MiCh1hBM00b2xYkY=
Subject key identifier: 05:A9:41:3A:B6:32:F5:D9:5A:A1:3A:04:42:31:8F:B0:5E:61:95:20
Certificate issuer: /CN=9D9E97B00D2E15C41AE7071732018C2B137E53A1
Certificate serial: 0B37
Authority key identifier: 9D:9E:97:B0:0D:2E:15:C4:1A:E7:07:17:32:01:8C:2B:13:7E:53:A1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MKY/BalBOrYy9dlaoToEQjGPsF5hlSA.roa
Signing time: Fri 01 Sep 2023 09:20:30 +0000
ROA not before: Fri 01 Sep 2023 09:20:30 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7478
IP address blocks: 211.76.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2871 (0xb37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D9E97B00D2E15C41AE7071732018C2B137E53A1
Validity
Not Before: Sep 1 09:20:30 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=05A9413AB632F5D95AA13A0442318FB05E619520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:c9:b2:93:1c:9c:3b:cb:3f:34:52:96:f0:
5e:3b:ca:16:ed:d6:56:31:6b:70:84:72:ff:d6:3f:
5b:d2:e4:10:ff:11:32:32:b1:0f:93:11:36:14:5d:
d8:e5:a0:59:b0:5f:41:b0:94:65:e6:74:af:11:1a:
27:36:c8:15:50:b2:9a:78:49:37:21:5e:3d:6e:78:
72:18:89:df:57:b2:10:00:f7:fc:c5:b6:33:7a:9f:
41:ca:ff:d1:df:7c:a8:0f:6f:07:f1:7e:a2:59:3f:
ce:4a:db:65:a4:fd:19:ef:ff:fe:68:2c:35:80:16:
e1:6d:c9:90:c4:4d:c9:fa:35:be:fd:d7:48:e8:d3:
c8:0c:6a:13:e7:37:fa:f4:0a:6b:74:1f:45:ef:f6:
a4:80:3b:00:63:b0:c0:27:a6:6d:e1:27:98:02:e4:
c5:7f:c6:fa:35:55:e2:94:f2:69:77:c3:05:c0:78:
c3:65:52:24:3e:c7:cf:1c:c8:05:ba:e0:84:dd:93:
4d:33:2f:36:2b:be:8a:8f:53:e5:61:1a:26:ce:eb:
4d:8b:95:fb:4f:d7:c9:aa:21:5a:ff:e2:b6:54:3f:
de:ad:ac:df:d8:ba:10:8d:8d:ab:f4:b2:a0:04:d7:
f4:1a:7b:52:3b:6e:6e:f3:7a:8b:09:5e:79:1f:48:
59:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A9:41:3A:B6:32:F5:D9:5A:A1:3A:04:42:31:8F:B0:5E:61:95:20
X509v3 Authority Key Identifier:
keyid:9D:9E:97:B0:0D:2E:15:C4:1A:E7:07:17:32:01:8C:2B:13:7E:53:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MKY/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MKY/BalBOrYy9dlaoToEQjGPsF5hlSA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.0.0/19
Signature Algorithm: sha256WithRSAEncryption
99:ed:fd:d9:90:b1:d0:1d:dd:0d:f4:45:87:79:f6:d5:3b:20:
18:aa:72:13:85:f2:38:f9:11:4a:ef:c7:2e:22:14:c3:ee:5c:
d9:03:9f:77:59:95:2d:ca:26:4a:35:01:c0:40:cf:44:a1:07:
1c:e0:26:c5:de:9b:8b:9a:8c:c7:52:bf:56:2a:f3:b0:fc:86:
65:03:24:0d:a5:84:9e:58:aa:cf:85:72:3d:dc:48:5e:bb:73:
e3:20:aa:10:64:ff:dc:56:85:db:9e:a5:25:46:2f:55:ab:2f:
db:f8:e9:40:d2:ce:e0:a2:bc:eb:69:91:92:c4:02:ec:03:91:
99:99:7c:6b:cf:0b:ff:eb:6c:e9:ba:65:16:1a:12:b3:88:cb:
bf:88:89:31:3f:96:5c:f3:de:5f:27:2a:1f:73:43:12:f1:bb:
70:1a:d5:85:04:89:f6:b9:50:d4:ae:97:9a:24:ef:ab:79:6f:
cf:30:30:67:60:39:58:24:9c:97:ed:00:d8:a4:03:f3:69:3f:
6e:1a:e6:0d:e8:26:69:3a:14:1a:82:bf:be:bc:6c:f4:a1:38:
be:d7:0f:de:59:66:dd:9c:99:94:2a:ab:82:55:c9:66:69:f5:
b2:b2:fd:c6:d6:e9:9f:b5:01:4c:92:f3:f9:1f:1d:cc:1d:52:
3e:1c:03:c5
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICCzcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUQ5
RTk3QjAwRDJFMTVDNDFBRTcwNzE3MzIwMThDMkIxMzdFNTNBMTAeFw0yMzA5MDEw
OTIwMzBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA1QTk0MTNBQjYzMkY1
RDk1QUExM0EwNDQyMzE4RkIwNUU2MTk1MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxd8mykxycO8s/NFKW8F47yhbt1lYxa3CEcv/WP1vS5BD/ETIy
sQ+TETYUXdjloFmwX0GwlGXmdK8RGic2yBVQspp4STchXj1ueHIYid9XshAA9/zF
tjN6n0HK/9HffKgPbwfxfqJZP85K22Wk/Rnv//5oLDWAFuFtyZDETcn6Nb7910jo
08gMahPnN/r0Cmt0H0Xv9qSAOwBjsMAnpm3hJ5gC5MV/xvo1VeKU8ml3wwXAeMNl
UiQ+x88cyAW64ITdk00zLzYrvoqPU+VhGibO602LlftP18mqIVr/4rZUP96trN/Y
uhCNjav0sqAE1/Qae1I7bm7zeosJXnkfSFkBAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUBalBOrYy9dlaoToEQjGPsF5hlSAwHwYDVR0jBBgwFoAUnZ6XsA0uFcQa5wcX
MgGMKxN+U6EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUtZL25a
NlhzQTB1RmNRYTV3Y1hNZ0dNS3hOLVU2RS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
blo2WHNBMHVGY1FhNXdjWE1nR01LeE4tVTZFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvTUtZL0JhbEJPcll5OWRsYW9Ub0VRakdQc0Y1
aGxTQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXTTAAwDQYJ
KoZIhvcNAQELBQADggEBAJnt/dmQsdAd3Q30RYd59tU7IBiqchOF8jj5EUrvxy4i
FMPuXNkDn3dZlS3KJko1AcBAz0ShBxzgJsXem4uajMdSv1Yq87D8hmUDJA2lhJ5Y
qs+Fcj3cSF67c+MgqhBk/9xWhduepSVGL1WrL9v46UDSzuCivOtpkZLEAuwDkZmZ
fGvPC//rbOm6ZRYaErOIy7+IiTE/llzz3l8nKh9zQxLxu3Aa1YUEifa5UNSul5ok
76t5b88wMGdgOVgknJftANikA/NpP24a5g3oJmk6FBqCv768bPShOL7XD95ZZt2c
mZQqq4JVyWZp9bKy/cbW6Z+1AUyS8/kfHcwdUj4cA8U=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org