Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEICITY260/prqKO3GwvwcB1GbbNP6x18ywIN8.roa
File: prqKO3GwvwcB1GbbNP6x18ywIN8.roa (raw, json)
Hash identifier: PcrYaaFHn4C/qmt8SrgDU2ZqJezXFS39ip6tLNRPE7U=
Subject key identifier: A6:BA:8A:3B:71:B0:BF:07:01:D4:66:DB:34:FE:B1:D7:CC:B0:20:DF
Certificate issuer: /CN=8477B4B9FE729925D912C66D00B681DDA10A2A01
Certificate serial: 0B2B
Authority key identifier: 84:77:B4:B9:FE:72:99:25:D9:12:C6:6D:00:B6:81:DD:A1:0A:2A:01
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hHe0uf5ymSXZEsZtALaB3aEKKgE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICITY260/prqKO3GwvwcB1GbbNP6x18ywIN8.roa
Signing time: Fri 01 Sep 2023 09:35:40 +0000
ROA not before: Fri 01 Sep 2023 09:35:40 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131627
IP address blocks: 103.117.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2859 (0xb2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8477B4B9FE729925D912C66D00B681DDA10A2A01
Validity
Not Before: Sep 1 09:35:40 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A6BA8A3B71B0BF0701D466DB34FEB1D7CCB020DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:39:6a:24:ad:67:94:e7:05:1e:ac:89:9e:5c:
d4:a8:bc:95:99:e9:77:c7:42:a7:c3:63:f1:e9:86:
7f:99:a8:73:95:d1:2c:ae:48:f1:9b:31:51:ab:fc:
c7:e8:33:39:d4:05:01:f0:86:09:4f:f4:cb:90:63:
2f:58:19:ef:b7:a0:e1:df:ab:84:7d:b4:44:69:ff:
e4:73:e5:74:a3:72:6e:36:b9:d6:4c:fb:df:03:52:
db:aa:54:cd:b0:ef:32:e8:08:85:28:2d:13:3f:61:
ac:2d:b0:dd:e8:09:06:c1:83:9a:92:e0:fd:73:7a:
1c:4c:2c:0e:9c:b1:9b:13:fd:bd:d6:ec:1f:21:81:
5e:06:40:fe:66:6a:ae:64:ed:93:4f:76:00:42:ca:
b7:86:77:5d:a8:46:19:0b:e7:6a:ea:dc:16:00:e5:
d6:26:a5:32:6b:ec:43:da:10:68:66:0f:fe:45:98:
0e:d7:82:69:e5:12:80:05:ba:d2:a5:ea:32:dc:d1:
47:77:78:fb:b7:1c:3e:70:38:ef:ad:9c:89:b4:ab:
19:49:7b:fa:b3:35:3f:f4:a9:50:c0:05:44:d1:d1:
02:ca:ed:3e:15:e5:56:f5:ae:5c:fc:7e:cc:43:c5:
98:f5:d5:70:ac:ec:1d:10:9f:0b:7c:4a:07:03:98:
e3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BA:8A:3B:71:B0:BF:07:01:D4:66:DB:34:FE:B1:D7:CC:B0:20:DF
X509v3 Authority Key Identifier:
keyid:84:77:B4:B9:FE:72:99:25:D9:12:C6:6D:00:B6:81:DD:A1:0A:2A:01
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICITY260/hHe0uf5ymSXZEsZtALaB3aEKKgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hHe0uf5ymSXZEsZtALaB3aEKKgE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICITY260/prqKO3GwvwcB1GbbNP6x18ywIN8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.117.224.0/22
Signature Algorithm: sha256WithRSAEncryption
70:04:0e:ba:24:a4:5c:c1:ef:31:e4:f2:0f:13:0b:a6:7a:cb:
fb:d7:d1:53:63:35:c8:cd:77:eb:50:48:7d:0c:fa:d1:71:4f:
ba:bb:6f:78:5a:77:84:63:70:cb:98:9a:60:4a:14:23:98:ef:
32:00:da:67:c2:dc:92:5d:23:d2:0e:5f:0b:71:44:79:63:7e:
49:95:a0:46:22:37:9d:a2:0f:6f:83:ad:ec:da:08:64:5d:48:
21:09:65:35:70:40:88:0f:57:f4:09:26:90:46:24:13:d8:aa:
45:15:48:0c:74:b1:92:29:ef:07:44:1c:7e:6c:a7:d9:32:af:
ec:23:79:75:10:5e:04:93:49:70:9a:1a:3c:f9:95:4a:13:95:
48:b8:72:4b:b4:a9:62:2e:73:8a:78:02:b8:46:de:d4:75:d7:
17:19:d1:82:97:98:08:67:5b:4b:49:d3:cc:22:30:37:f1:a1:
e5:bb:df:c5:cf:55:76:96:4b:24:de:ad:1f:a3:ac:c7:21:6c:
c2:59:ae:d0:41:31:3b:9a:5d:e5:5a:f0:f9:c6:1a:b8:84:ed:
a5:b4:b5:57:76:70:12:27:83:54:56:be:9e:e0:63:62:74:65:
bc:4b:b0:e9:a6:b1:b0:6d:4c:ba:0f:2b:b9:8f:70:e6:4b:1b:
67:0f:a0:cf
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICCyswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODQ3
N0I0QjlGRTcyOTkyNUQ5MTJDNjZEMDBCNjgxRERBMTBBMkEwMTAeFw0yMzA5MDEw
OTM1NDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEE2QkE4QTNCNzFCMEJG
MDcwMUQ0NjZEQjM0RkVCMUQ3Q0NCMDIwREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD5OWokrWeU5wUerImeXNSovJWZ6XfHQqfDY/Hphn+ZqHOV0Syu
SPGbMVGr/MfoMznUBQHwhglP9MuQYy9YGe+3oOHfq4R9tERp/+Rz5XSjcm42udZM
+98DUtuqVM2w7zLoCIUoLRM/YawtsN3oCQbBg5qS4P1zehxMLA6csZsT/b3W7B8h
gV4GQP5maq5k7ZNPdgBCyreGd12oRhkL52rq3BYA5dYmpTJr7EPaEGhmD/5FmA7X
gmnlEoAFutKl6jLc0Ud3ePu3HD5wOO+tnIm0qxlJe/qzNT/0qVDABUTR0QLK7T4V
5Vb1rlz8fsxDxZj11XCs7B0Qnwt8SgcDmOPLAgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUprqKO3GwvwcB1GbbNP6x18ywIN8wHwYDVR0jBBgwFoAUhHe0uf5ymSXZEsZt
ALaB3aEKKgEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEVJQ0lU
WTI2MC9oSGUwdWY1eW1TWFpFc1p0QUxhQjNhRUtLZ0UuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL2hIZTB1ZjV5bVNYWkVzWnRBTGFCM2FFS0tnRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BFSUNJVFkyNjAvcHJxS08zR3d2
d2NCMUdiYk5QNngxOHl3SU44LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmd14DANBgkqhkiG9w0BAQsFAAOCAQEAcAQOuiSkXMHvMeTyDxMLpnrL
+9fRU2M1yM1361BIfQz60XFPurtveFp3hGNwy5iaYEoUI5jvMgDaZ8Lckl0j0g5f
C3FEeWN+SZWgRiI3naIPb4Ot7NoIZF1IIQllNXBAiA9X9AkmkEYkE9iqRRVIDHSx
kinvB0Qcfmyn2TKv7CN5dRBeBJNJcJoaPPmVShOVSLhyS7SpYi5zingCuEbe1HXX
FxnRgpeYCGdbS0nTzCIwN/Gh5bvfxc9VdpZLJN6tH6OsxyFswlmu0EExO5pd5Vrw
+cYauITtpbS1V3ZwEieDVFa+nuBjYnRlvEuw6aaxsG1Mug8ruY9w5ksbZw+gzw==
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org