Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/mBI6RUYzSttoGpYfQIRJaF8MXZU.roa
File: mBI6RUYzSttoGpYfQIRJaF8MXZU.roa (raw, json)
Hash identifier: 1Gb0u79xw66uaPTDi20SxtcsJ9C7/rpnEoO3cQvREJk=
Subject key identifier: 98:12:3A:45:46:33:4A:DB:68:1A:96:1F:40:84:49:68:5F:0C:5D:95
Certificate issuer: /CN=3122A9292CC930152ADE5A25848C1BDC4044C902
Certificate serial: 039C
Authority key identifier: 31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/mBI6RUYzSttoGpYfQIRJaF8MXZU.roa
Signing time: Mon 26 Aug 2024 05:23:06 +0000
ROA not before: Mon 26 Aug 2024 05:23:06 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 132369
IP address blocks: 103.159.88.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 924 (0x39c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3122A9292CC930152ADE5A25848C1BDC4044C902
Validity
Not Before: Aug 26 05:23:06 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=98123A4546334ADB681A961F408449685F0C5D95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:11:83:40:5c:c9:78:24:7c:9e:4a:42:f2:
a8:ca:72:2f:6e:e4:b0:b6:26:42:07:21:59:55:df:
65:d0:a0:f5:1f:1e:6c:d3:e8:4e:1f:61:20:6c:c7:
0b:68:5d:1b:8e:cc:33:87:8f:49:99:0b:58:bf:57:
1a:a9:d9:49:0e:55:7c:63:75:01:da:ca:0c:5b:20:
e6:41:df:34:b3:aa:4d:49:9a:0d:26:62:17:7f:dd:
c8:4a:17:80:99:19:89:ba:a7:83:13:34:e9:2c:e2:
e6:43:63:cd:2c:74:c5:d6:d7:7b:e1:a2:ab:de:23:
b6:40:34:47:19:89:64:d9:b1:64:40:df:a5:d9:fd:
f3:3a:ff:e4:f2:a0:18:72:61:ce:eb:b9:e3:fa:d3:
48:ff:67:70:c0:d2:58:2a:95:0c:8f:f5:cd:cc:f3:
57:4f:c7:4c:56:02:0e:dc:36:7e:55:70:db:00:7a:
38:31:58:0c:72:07:0d:e7:e3:46:f7:34:95:ab:8d:
09:86:49:dc:b8:48:6a:48:81:15:54:f9:c2:a8:30:
ee:bb:bb:fa:d3:13:c1:fc:e9:99:98:c8:5d:19:98:
ee:04:9a:04:9d:95:8b:c8:92:f5:aa:14:d6:90:4a:
d9:a9:2a:49:59:a4:4c:47:60:49:bc:2c:98:3d:56:
d2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:12:3A:45:46:33:4A:DB:68:1A:96:1F:40:84:49:68:5F:0C:5D:95
X509v3 Authority Key Identifier:
keyid:31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/mBI6RUYzSttoGpYfQIRJaF8MXZU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.88.0/23
Signature Algorithm: sha256WithRSAEncryption
46:01:62:e9:13:ac:46:16:cc:ad:4c:79:64:4c:f2:5d:28:85:
d2:16:27:d6:9a:80:95:db:02:1a:5d:2c:de:59:c7:52:c3:da:
33:21:1f:be:99:9a:8e:9d:9e:4d:48:fe:f1:5a:02:3b:4f:c7:
96:f5:6c:ac:94:11:b1:97:75:75:f6:bc:10:a5:20:85:f2:04:
76:40:f0:30:c2:68:b8:99:50:6c:dd:dd:08:70:4e:a8:b9:5a:
fa:3a:97:b0:b5:4e:66:87:ad:85:ff:c2:db:12:dc:78:78:41:
87:ae:7a:84:74:38:e1:af:fc:a2:fc:72:48:4e:54:76:a4:92:
95:01:bc:8b:0e:16:e1:21:f7:30:e7:7e:ce:9a:3a:94:68:f2:
f0:1f:89:75:98:00:64:79:1a:5b:f0:ac:81:29:3a:2f:97:a1:
33:ef:a8:c4:22:34:39:96:70:6c:be:7e:92:88:51:15:db:86:
36:20:97:e6:59:22:e6:47:e7:65:b6:3f:8f:61:eb:79:2c:2f:
c5:bb:d4:88:1d:66:d0:7b:57:20:53:98:04:ab:d7:7c:ce:e9:
7b:71:48:5a:95:11:85:42:a0:3d:a2:ba:bd:f0:2a:a3:78:7e:
78:53:ef:8e:b2:35:3b:b8:b4:a4:50:f4:ed:c3:5b:08:2f:86:
2b:a9:60:cb
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICA5wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzEy
MkE5MjkyQ0M5MzAxNTJBREU1QTI1ODQ4QzFCREM0MDQ0QzkwMjAeFw0yNDA4MjYw
NTIzMDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk4MTIzQTQ1NDYzMzRB
REI2ODFBOTYxRjQwODQ0OTY4NUYwQzVEOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtFhGDQFzJeCR8nkpC8qjKci9u5LC2JkIHIVlV32XQoPUfHmzT
6E4fYSBsxwtoXRuOzDOHj0mZC1i/Vxqp2UkOVXxjdQHaygxbIOZB3zSzqk1Jmg0m
Yhd/3chKF4CZGYm6p4MTNOks4uZDY80sdMXW13vhoqveI7ZANEcZiWTZsWRA36XZ
/fM6/+TyoBhyYc7rueP600j/Z3DA0lgqlQyP9c3M81dPx0xWAg7cNn5VcNsAejgx
WAxyBw3n40b3NJWrjQmGSdy4SGpIgRVU+cKoMO67u/rTE8H86ZmYyF0ZmO4EmgSd
lYvIkvWqFNaQStmpKklZpExHYEm8LJg9VtLLAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUmBI6RUYzSttoGpYfQIRJaF8MXZUwHwYDVR0jBBgwFoAUMSKpKSzJMBUq3lol
hIwb3EBEyQIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTklNQlVT
Q09NL01TS3BLU3pKTUJVcTNsb2xoSXdiM0VCRXlRSS5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvTVNLcEtTekpNQlVxM2xvbGhJd2IzRUJFeVFJLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTklNQlVTQ09NL21CSTZSVVl6U3R0
b0dwWWZRSVJKYUY4TVhaVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFnn1gwDQYJKoZIhvcNAQELBQADggEBAEYBYukTrEYWzK1MeWRM8l0ohdIW
J9aagJXbAhpdLN5Zx1LD2jMhH76Zmo6dnk1I/vFaAjtPx5b1bKyUEbGXdXX2vBCl
IIXyBHZA8DDCaLiZUGzd3QhwTqi5Wvo6l7C1TmaHrYX/wtsS3Hh4QYeueoR0OOGv
/KL8ckhOVHakkpUBvIsOFuEh9zDnfs6aOpRo8vAfiXWYAGR5GlvwrIEpOi+XoTPv
qMQiNDmWcGy+fpKIURXbhjYgl+ZZIuZH52W2P49h63ksL8W71IgdZtB7VyBTmASr
13zO6XtxSFqVEYVCoD2iur3wKqN4fnhT746yNTu4tKRQ9O3DWwgvhiupYMs=
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:18:12 2025 by rpki-client