Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NETGUARD/RnzjQisgN-xDlHGj7C86RjJxaA0.roa
File: RnzjQisgN-xDlHGj7C86RjJxaA0.roa (raw, json)
Hash identifier: LRU6D5cM9TVO2nLHvjtG58IUH0GZkECtoQE8G1izWaM=
Subject key identifier: 46:7C:E3:42:2B:20:37:EC:43:94:71:A3:EC:2F:3A:46:32:71:68:0D
Certificate issuer: /CN=B2C11A2BBD411878ED1B44D79F137D9689C86840
Certificate serial: 78
Authority key identifier: B2:C1:1A:2B:BD:41:18:78:ED:1B:44:D7:9F:13:7D:96:89:C8:68:40
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ssEaK71BGHjtG0TXnxN9lonIaEA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NETGUARD/RnzjQisgN-xDlHGj7C86RjJxaA0.roa
Signing time: Wed 25 Oct 2023 12:01:25 +0000
ROA not before: Wed 25 Oct 2023 12:01:25 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131652
IP address blocks: 103.160.224.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120 (0x78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2C11A2BBD411878ED1B44D79F137D9689C86840
Validity
Not Before: Oct 25 12:01:25 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=467CE3422B2037EC439471A3EC2F3A463271680D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:12:4d:30:0b:d1:4b:7f:0b:d8:9b:e4:b5:e7:
21:1e:23:6f:eb:fe:ee:28:ad:78:d9:1b:c3:1c:14:
1f:75:f7:a6:e7:88:e4:e1:48:0c:b9:da:15:4e:02:
3d:9b:e2:14:95:f1:86:5a:b8:d8:5c:49:21:74:b9:
6d:a8:59:54:c0:f6:36:23:a7:62:ff:dd:4b:30:20:
f9:67:85:d6:2e:e8:fd:42:41:5a:e2:02:da:df:b6:
fb:d4:e5:a6:52:4b:3f:44:a4:58:ac:84:bb:08:67:
9b:3a:04:cf:a6:08:d1:49:20:41:9a:01:55:fa:d8:
75:30:7e:1e:bb:c5:f4:ed:e6:ec:62:a8:fa:39:a4:
65:9c:8e:fa:7d:a6:e7:e9:0a:49:da:de:f2:ac:97:
cf:d7:1d:85:0f:4d:14:56:71:4f:90:26:44:bb:bc:
02:9e:1b:d4:b9:44:0f:45:9a:b5:e8:92:7f:27:cd:
67:3c:1b:0a:5d:0f:ea:9b:ae:2f:83:4d:28:e7:a4:
d9:e3:e7:ff:95:b4:f8:c8:94:73:18:92:b7:c7:71:
3a:a3:1d:81:df:df:59:5a:9d:70:dd:58:67:29:55:
09:82:17:da:14:5c:83:ba:f5:e5:9f:48:b5:4a:c0:
ac:48:6f:dc:ce:96:6a:62:25:1b:02:59:16:48:97:
39:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7C:E3:42:2B:20:37:EC:43:94:71:A3:EC:2F:3A:46:32:71:68:0D
X509v3 Authority Key Identifier:
keyid:B2:C1:1A:2B:BD:41:18:78:ED:1B:44:D7:9F:13:7D:96:89:C8:68:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NETGUARD/ssEaK71BGHjtG0TXnxN9lonIaEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ssEaK71BGHjtG0TXnxN9lonIaEA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NETGUARD/RnzjQisgN-xDlHGj7C86RjJxaA0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.224.0/23
Signature Algorithm: sha256WithRSAEncryption
97:b2:31:a3:3c:9d:d9:cb:8f:f3:e8:af:29:33:78:ab:d1:4f:
69:3e:72:ce:23:1f:bf:c6:10:6d:93:bb:6d:bf:b6:92:2c:0e:
71:a4:11:36:6f:77:52:17:93:05:48:e5:69:ce:b8:b5:6e:c8:
71:83:a9:0d:2d:95:4e:a3:94:9b:53:09:b6:f4:e4:11:c2:f7:
f0:c6:eb:6f:2a:70:10:46:1f:a5:90:ba:04:f5:d5:6d:eb:23:
79:c0:dc:e9:27:ca:22:81:18:ac:e3:32:84:c8:48:5f:a2:98:
91:bd:c1:42:73:cf:24:44:ad:fd:53:6c:43:e1:e3:03:a7:73:
e6:70:e0:b8:9f:11:db:16:24:85:c4:ee:51:cc:05:99:1a:3a:
4e:6e:e9:d1:2a:e9:44:45:85:aa:f8:b0:86:00:a1:62:46:9c:
45:cb:40:7f:29:05:8b:98:87:aa:3e:03:f5:6b:07:28:a0:d5:
1d:9d:e6:ed:2c:3a:07:47:fb:f9:22:e2:ff:0c:3d:af:60:49:
d1:3a:70:68:0f:82:dc:12:78:f0:d1:75:31:53:73:16:9f:14:
2b:be:66:9a:df:9d:58:0f:dc:90:c2:cd:de:f4:3e:ea:48:cf:
a1:19:20:ea:c9:df:c0:06:29:ef:c8:7c:74:fd:c3:e1:3e:f7:
28:28:f9:33
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIBeDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMkMx
MUEyQkJENDExODc4RUQxQjQ0RDc5RjEzN0Q5Njg5Qzg2ODQwMB4XDTIzMTAyNTEy
MDEyNVoXDTI0MDgzMTAzMTA1M1owMzExMC8GA1UEAxMoNDY3Q0UzNDIyQjIwMzdF
QzQzOTQ3MUEzRUMyRjNBNDYzMjcxNjgwRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMgSTTAL0Ut/C9ib5LXnIR4jb+v+7iiteNkbwxwUH3X3pueI5OFI
DLnaFU4CPZviFJXxhlq42FxJIXS5bahZVMD2NiOnYv/dSzAg+WeF1i7o/UJBWuIC
2t+2+9TlplJLP0SkWKyEuwhnmzoEz6YI0UkgQZoBVfrYdTB+HrvF9O3m7GKo+jmk
ZZyO+n2m5+kKSdre8qyXz9cdhQ9NFFZxT5AmRLu8Ap4b1LlED0WateiSfyfNZzwb
Cl0P6puuL4NNKOek2ePn/5W0+MiUcxiSt8dxOqMdgd/fWVqdcN1YZylVCYIX2hRc
g7r15Z9ItUrArEhv3M6WamIlGwJZFkiXOY0CAwEAAaOCAfIwggHuMB0GA1UdDgQW
BBRGfONCKyA37EOUcaPsLzpGMnFoDTAfBgNVHSMEGDAWgBSywRorvUEYeO0bRNef
E32WichoQDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GA1UdHwRXMFUwU6BR
oE+GTXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ORVRHVUFS
RC9zc0VhSzcxQkdIanRHMFRYbnhOOWxvbklhRUEuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL3NzRWFLNzFCR0hqdEcwVFhueE45bG9uSWFFQS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGeBggrBgEFBQcBCwSBkTCBjjBZBggrBgEFBQcwC4ZNcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL05FVEdVQVJEL1JuempRaXNnTi14RGxI
R2o3Qzg2UmpKeGFBMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25p
Yy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAFnoOAwDQYJKoZIhvcNAQELBQADggEBAJeyMaM8ndnLj/PorykzeKvRT2k+cs4j
H7/GEG2Tu22/tpIsDnGkETZvd1IXkwVI5WnOuLVuyHGDqQ0tlU6jlJtTCbb05BHC
9/DG628qcBBGH6WQugT11W3rI3nA3OknyiKBGKzjMoTISF+imJG9wUJzzyRErf1T
bEPh4wOnc+Zw4LifEdsWJIXE7lHMBZkaOk5u6dEq6URFhar4sIYAoWJGnEXLQH8p
BYuYh6o+A/VrByig1R2d5u0sOgdH+/ki4v8MPa9gSdE6cGgPgtwSePDRdTFTcxaf
FCu+ZprfnVgP3JDCzd70PupIz6EZIOrJ38AGKe/IfHT9w+E+9ygo+TM=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org