Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/eYmaamoQa5bYuDKujJCZaNSrt78.roa
File: eYmaamoQa5bYuDKujJCZaNSrt78.roa (raw, json)
Hash identifier: gbqxnEUFmbvjje2pLHiB3Myaa3M1K2q/jFiviJHtjyY=
Subject key identifier: 79:89:9A:6A:6A:10:6B:96:D8:B8:32:AE:8C:90:99:68:D4:AB:B7:BF
Certificate issuer: /CN=F5A44B5E078865BAEF9351369D961D6BA2556D47
Certificate serial: F1
Authority key identifier: F5:A4:4B:5E:07:88:65:BA:EF:93:51:36:9D:96:1D:6B:A2:55:6D:47
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/eYmaamoQa5bYuDKujJCZaNSrt78.roa
Signing time: Wed 27 Mar 2024 15:28:58 +0000
ROA not before: Wed 27 Mar 2024 15:28:58 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 8075
IP address blocks: 103.131.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5A44B5E078865BAEF9351369D961D6BA2556D47
Validity
Not Before: Mar 27 15:28:58 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=79899A6A6A106B96D8B832AE8C909968D4ABB7BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6e:8e:82:56:17:82:f6:26:cf:7a:d2:bc:5f:
05:b9:96:f9:bf:35:93:62:89:ce:9a:2c:24:c4:4f:
54:aa:f4:37:63:ae:18:4b:a9:ba:d8:26:a5:92:49:
d4:81:ac:75:88:40:74:47:e4:f4:8d:70:f3:0d:c8:
43:03:82:3b:8c:1b:d5:da:d1:82:49:35:ab:b3:a2:
a9:fa:2a:8e:27:ec:f2:e4:5c:df:dd:52:d2:8a:a8:
9e:2c:41:97:4d:b0:32:00:f1:9f:5f:72:54:01:1b:
50:15:64:61:bf:71:9e:58:c6:6d:af:39:0c:4a:08:
5b:a3:f4:8c:f9:70:0f:61:76:fa:2d:02:9b:24:9a:
64:06:02:97:72:b1:c8:ec:cc:68:d7:30:85:e2:36:
bf:07:81:e7:94:dc:8c:f2:34:25:64:35:32:b5:1a:
94:3a:aa:f2:bb:3d:d0:96:56:0d:0a:a5:6f:d3:44:
9f:c1:52:a9:2f:54:71:d4:32:c2:f1:74:73:c4:28:
04:34:39:eb:6a:69:89:d3:ad:ff:df:45:ac:ec:d4:
25:4d:df:80:d1:46:bc:60:db:15:38:32:48:12:34:
ff:3b:de:35:18:f2:88:d0:2b:eb:09:17:dc:84:55:
66:b7:6c:42:1a:e8:83:28:d4:2b:e7:22:1c:7f:9f:
4c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:89:9A:6A:6A:10:6B:96:D8:B8:32:AE:8C:90:99:68:D4:AB:B7:BF
X509v3 Authority Key Identifier:
keyid:F5:A4:4B:5E:07:88:65:BA:EF:93:51:36:9D:96:1D:6B:A2:55:6D:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/eYmaamoQa5bYuDKujJCZaNSrt78.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.149.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:3d:3b:31:42:ae:e0:0a:31:0f:6d:13:ed:2d:f3:c0:c8:1d:
d1:e9:57:1a:c7:46:d4:51:99:3a:14:7a:1c:5d:6a:e6:56:d0:
17:a8:67:53:74:0e:d8:6b:0c:09:cc:2c:4d:d7:e4:f1:dd:30:
c9:78:17:45:8d:0e:c1:37:56:4a:ce:a8:5a:86:95:eb:7b:ca:
8b:4f:6e:f4:73:cf:eb:d0:6e:dd:ba:85:8e:2e:62:6a:1d:ff:
f5:44:ac:99:7d:6a:a7:fc:09:b2:f7:ad:f2:28:20:31:e8:a9:
19:5d:5f:89:1a:9d:0d:fb:16:5c:c5:94:a1:10:61:4e:af:b2:
24:e1:d4:07:8e:4c:2b:de:f7:19:82:02:34:fa:49:c4:5a:fd:
e6:f8:b6:bf:1e:e2:cb:ee:85:42:f3:d5:84:f4:e5:5d:3f:2f:
45:34:5d:84:26:56:d7:7f:df:b3:72:25:0a:dd:22:aa:ef:bf:
10:8e:bd:30:38:78:80:c0:b2:ec:74:92:6d:e9:ae:f4:bc:95:
75:43:d7:6e:2c:cc:6a:8f:63:17:c8:a8:7a:52:a5:fe:f7:d4:
1f:b7:22:a3:da:17:96:f0:03:8f:cb:a6:6a:64:47:f8:7f:c5:
47:eb:bb:51:66:53:61:d8:9a:2d:ed:4f:9a:c5:6c:8d:ca:47:
88:fb:62:20
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjVB
NDRCNUUwNzg4NjVCQUVGOTM1MTM2OUQ5NjFENkJBMjU1NkQ0NzAeFw0yNDAzMjcx
NTI4NThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc5ODk5QTZBNkExMDZC
OTZEOEI4MzJBRThDOTA5OTY4RDRBQkI3QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCcbo6CVheC9ibPetK8XwW5lvm/NZNiic6aLCTET1Sq9DdjrhhL
qbrYJqWSSdSBrHWIQHRH5PSNcPMNyEMDgjuMG9Xa0YJJNauzoqn6Ko4n7PLkXN/d
UtKKqJ4sQZdNsDIA8Z9fclQBG1AVZGG/cZ5Yxm2vOQxKCFuj9Iz5cA9hdvotApsk
mmQGApdyscjszGjXMIXiNr8HgeeU3IzyNCVkNTK1GpQ6qvK7PdCWVg0KpW/TRJ/B
UqkvVHHUMsLxdHPEKAQ0OetqaYnTrf/fRazs1CVN34DRRrxg2xU4MkgSNP873jUY
8ojQK+sJF9yEVWa3bEIa6IMo1CvnIhx/n0yVAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUeYmaamoQa5bYuDKujJCZaNSrt78wHwYDVR0jBBgwFoAU9aRLXgeIZbrvk1E2
nZYda6JVbUcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvT05FREVH
UkVFLzlhUkxYZ2VJWmJydmsxRTJuWllkYTZKVmJVYy5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvOWFSTFhnZUlaYnJ2azFFMm5aWWRhNkpWYlVjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvT05FREVHUkVFL2VZbWFhbW9RYTVi
WXVES3VqSkNaYU5TcnQ3OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABng5UwDQYJKoZIhvcNAQELBQADggEBAC89OzFCruAKMQ9tE+0t88DIHdHp
VxrHRtRRmToUehxdauZW0BeoZ1N0DthrDAnMLE3X5PHdMMl4F0WNDsE3VkrOqFqG
let7yotPbvRzz+vQbt26hY4uYmod//VErJl9aqf8CbL3rfIoIDHoqRldX4kanQ37
FlzFlKEQYU6vsiTh1AeOTCve9xmCAjT6ScRa/eb4tr8e4svuhULz1YT05V0/L0U0
XYQmVtd/37NyJQrdIqrvvxCOvTA4eIDAsux0km3prvS8lXVD124szGqPYxfIqHpS
pf731B+3IqPaF5bwA4/LpmpkR/h/xUfru1FmU2HYmi3tT5rFbI3KR4j7YiA=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org