Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/2O7OJSeIp81CBOX7mVe5YHS6EZs.roa
File: 2O7OJSeIp81CBOX7mVe5YHS6EZs.roa (raw, json)
Hash identifier: Alax0mG/RrI4kk9czFFWlJG9SQ8pWOSCW4Xp6D9ZuVU=
Subject key identifier: D8:EE:CE:25:27:88:A7:CD:42:04:E5:FB:99:57:B9:60:74:BA:11:9B
Certificate issuer: /CN=2DEF2B3C3A9A1B53C16C1C70E5511AD5903284FB
Certificate serial: 0737
Authority key identifier: 2D:EF:2B:3C:3A:9A:1B:53:C1:6C:1C:70:E5:51:1A:D5:90:32:84:FB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/2O7OJSeIp81CBOX7mVe5YHS6EZs.roa
Signing time: Fri 01 Sep 2023 09:34:17 +0000
ROA not before: Fri 01 Sep 2023 09:34:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131674
IP address blocks: 103.149.64.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1847 (0x737)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DEF2B3C3A9A1B53C16C1C70E5511AD5903284FB
Validity
Not Before: Sep 1 09:34:17 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D8EECE252788A7CD4204E5FB9957B96074BA119B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c8:63:b3:7c:30:31:29:41:61:f9:48:1c:d7:
f6:2c:5d:51:a4:cc:65:4f:c6:a6:4c:36:48:6a:09:
ce:88:d8:e0:a4:9d:94:b7:f7:16:a1:60:a0:ea:89:
45:6b:e8:e3:74:10:41:20:fe:21:19:54:eb:db:da:
c8:6e:1a:84:6c:08:90:86:05:c2:94:dc:bd:cf:80:
dd:c1:c7:af:2a:9f:84:74:6d:6c:e8:e2:19:58:5d:
66:a6:3a:39:1b:db:b4:cb:ef:96:40:ad:b4:0c:b5:
40:78:5f:af:25:f3:ff:12:5f:9c:5f:b1:a3:83:f7:
85:73:55:00:d4:70:d1:8b:70:5c:31:39:1b:77:6a:
0a:15:5a:49:52:8b:cc:30:1a:40:f8:28:55:86:55:
ef:be:bb:5e:36:e4:b7:d3:55:da:dd:b2:0a:44:e3:
2a:e0:ec:5b:2d:b4:0a:b9:74:ca:c1:e3:99:8c:92:
74:ba:25:19:f3:88:19:3d:59:01:ea:db:ad:89:3b:
f6:fc:fe:d1:db:56:44:53:34:c1:2b:b9:a8:14:b7:
dc:9a:2d:7c:d4:9c:35:64:90:d8:67:5e:66:5f:be:
7c:fa:2d:75:e4:9d:8e:66:ad:b8:ee:e7:bb:b3:62:
00:4a:1f:9c:c4:af:e3:84:3e:b3:cb:40:0e:ca:6a:
6e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EE:CE:25:27:88:A7:CD:42:04:E5:FB:99:57:B9:60:74:BA:11:9B
X509v3 Authority Key Identifier:
keyid:2D:EF:2B:3C:3A:9A:1B:53:C1:6C:1C:70:E5:51:1A:D5:90:32:84:FB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/2O7OJSeIp81CBOX7mVe5YHS6EZs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.149.64.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:e6:77:77:7e:2c:05:69:50:6d:2b:ef:89:29:8e:55:67:84:
eb:c9:1a:e5:7e:aa:d7:8f:cf:37:a9:38:b2:30:43:80:b6:d0:
ae:1a:72:bd:96:be:a6:72:74:41:7b:b1:8c:d4:62:6f:45:65:
69:bc:b0:71:58:38:f6:16:a0:69:bf:39:43:25:fa:89:16:89:
f2:d0:ea:14:df:1a:91:7e:0f:9c:b0:40:f1:31:c3:99:50:c1:
80:0b:6c:b8:b0:40:97:19:7b:d6:0b:5b:fb:d1:f8:f3:d3:ba:
57:d9:0e:b6:a3:13:91:86:8b:e0:f7:33:c6:3c:35:f4:55:fb:
93:eb:16:be:88:f9:3b:e2:6d:55:95:a9:aa:8d:df:e4:2e:0b:
04:ee:35:a2:b3:c0:5e:8a:79:64:e3:c7:66:61:87:16:64:67:
32:cf:11:30:e6:63:f9:47:97:aa:56:50:22:9c:e0:59:af:a8:
a3:63:4b:bc:3a:67:fd:0f:90:3a:1d:ff:f9:3c:f4:ae:e8:18:
bb:63:4a:e9:44:9b:bd:3f:d8:f7:58:f3:86:e5:6e:02:69:78:
c5:29:96:91:31:f0:2f:45:4e:b3:b0:53:5b:fe:f6:e0:29:d4:
e2:2d:bd:1d:0d:a1:9f:c8:32:db:a7:03:88:bc:5e:6a:40:b4:
4a:80:01:12
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICBzcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRF
RjJCM0MzQTlBMUI1M0MxNkMxQzcwRTU1MTFBRDU5MDMyODRGQjAeFw0yMzA5MDEw
OTM0MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ4RUVDRTI1Mjc4OEE3
Q0Q0MjA0RTVGQjk5NTdCOTYwNzRCQTExOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDpyGOzfDAxKUFh+Ugc1/YsXVGkzGVPxqZMNkhqCc6I2OCknZS3
9xahYKDqiUVr6ON0EEEg/iEZVOvb2shuGoRsCJCGBcKU3L3PgN3Bx68qn4R0bWzo
4hlYXWamOjkb27TL75ZArbQMtUB4X68l8/8SX5xfsaOD94VzVQDUcNGLcFwxORt3
agoVWklSi8wwGkD4KFWGVe++u1425LfTVdrdsgpE4yrg7FsttAq5dMrB45mMknS6
JRnziBk9WQHq262JO/b8/tHbVkRTNMEruagUt9yaLXzUnDVkkNhnXmZfvnz6LXXk
nY5mrbju57uzYgBKH5zEr+OEPrPLQA7Kam71AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU2O7OJSeIp81CBOX7mVe5YHS6EZswHwYDVR0jBBgwFoAULe8rPDqaG1PBbBxw
5VEa1ZAyhPswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvT1BFTkZP
Ui9MZThyUERxYUcxUEJiQnh3NVZFYTFaQXloUHMuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0xlOHJQRHFhRzFQQmJCeHc1VkVhMVpBeWhQcy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL09QRU5GT1IvMk83T0pTZUlwODFDQk9Y
N21WZTVZSFM2RVpzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AWeVQDANBgkqhkiG9w0BAQsFAAOCAQEAS+Z3d34sBWlQbSvviSmOVWeE68ka5X6q
14/PN6k4sjBDgLbQrhpyvZa+pnJ0QXuxjNRib0VlabywcVg49hagab85QyX6iRaJ
8tDqFN8akX4PnLBA8THDmVDBgAtsuLBAlxl71gtb+9H489O6V9kOtqMTkYaL4Pcz
xjw19FX7k+sWvoj5O+JtVZWpqo3f5C4LBO41orPAXop5ZOPHZmGHFmRnMs8RMOZj
+UeXqlZQIpzgWa+oo2NLvDpn/Q+QOh3/+Tz0rugYu2NK6USbvT/Y91jzhuVuAml4
xSmWkTHwL0VOs7BTW/724CnU4i29HQ2hn8gy26cDiLxeakC0SoABEg==
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org