Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PQS/046092z_Ev-Cv28s3XD0GhMwa9A.roa
File: 046092z_Ev-Cv28s3XD0GhMwa9A.roa (raw, json)
Hash identifier: vHP5s1fqB7I8jVExUpbiKms3DV7echM4otI2NQxiBbk=
Subject key identifier: D3:8E:B4:F7:6C:FF:12:FF:82:BF:6F:2C:DD:70:F4:1A:13:30:6B:D0
Certificate issuer: /CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439
Certificate serial: 0D56
Authority key identifier: C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/046092z_Ev-Cv28s3XD0GhMwa9A.roa
Signing time: Thu 15 Sep 2022 02:38:07 +0000
ROA not before: Thu 15 Sep 2022 02:38:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38042
IP address blocks: 103.137.62.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3414 (0xd56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439
Validity
Not Before: Sep 15 02:38:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D38EB4F76CFF12FF82BF6F2CDD70F41A13306BD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:56:1c:6a:fa:c9:ae:2d:66:5b:42:56:4e:e4:
15:a5:2a:cb:9b:7d:8e:93:b1:d1:bb:b8:1e:18:e8:
5f:a9:78:ce:d8:1d:86:c6:ae:b7:e1:58:f1:91:b5:
ca:d3:7d:63:3f:87:57:5d:00:c6:01:ee:1b:25:3c:
67:ed:0f:ee:2d:16:b6:21:66:92:83:58:26:48:a3:
ea:84:5d:56:73:5f:8e:c8:69:d8:9a:0b:87:48:37:
27:c9:a6:58:63:09:a3:98:43:39:c4:7b:a6:0c:6e:
7a:3c:e3:c6:ae:72:5b:f3:41:dd:1f:f8:0f:b4:2c:
ec:da:7e:ed:7b:32:38:04:aa:a5:5e:58:14:1b:b0:
12:03:9b:7b:0f:24:6c:5f:1b:2d:e1:37:b6:cf:c8:
08:d9:67:73:4e:e7:26:7b:7b:9e:8e:b8:87:42:d5:
36:f0:4e:7f:d4:43:f2:26:91:c5:2e:b8:e4:be:ee:
53:9b:0a:2f:3c:61:2b:13:38:56:d0:8c:56:21:71:
e5:5f:dc:76:85:8e:1a:cc:a3:fe:ed:c4:0d:c8:18:
76:ed:de:77:39:90:44:ef:5d:3a:f3:3a:18:cf:18:
49:a5:fc:a2:86:a8:f4:d1:83:34:56:b4:98:66:3e:
12:31:38:e7:0f:d4:b2:09:ad:46:ba:aa:49:d2:a0:
4c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8E:B4:F7:6C:FF:12:FF:82:BF:6F:2C:DD:70:F4:1A:13:30:6B:D0
X509v3 Authority Key Identifier:
keyid:C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/wU-s_UXCwCdo6CcvT7g_su2vdDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/046092z_Ev-Cv28s3XD0GhMwa9A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.62.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:f1:ab:58:e7:c2:b1:c8:ab:3d:d4:2c:be:76:0a:7b:ff:21:
16:78:03:50:d5:86:0b:ec:8c:9a:84:21:c8:26:e4:a6:67:80:
29:60:e3:03:2c:2f:0b:c6:eb:24:dc:e8:ca:cd:39:6d:3b:c1:
95:0d:c6:27:4b:f5:4a:83:17:54:9d:45:0e:c0:a2:4f:9d:19:
59:3c:ea:c1:34:2a:11:7d:f1:91:d0:f0:ee:6c:d2:5b:9c:4c:
a6:d5:d1:ed:0c:72:5a:f2:b8:de:19:67:a9:8d:10:57:bf:25:
00:c0:19:25:56:79:b5:b2:29:f3:b7:b3:33:24:52:b3:7a:31:
af:5a:02:34:2f:41:04:da:ab:6f:8d:3b:66:26:42:b5:c1:3d:
e2:fa:6f:47:22:4f:c6:6b:b1:e2:c2:c2:64:0b:09:52:2a:25:
61:fd:57:53:c6:62:b6:ce:a2:21:b7:50:f5:36:47:a0:3e:9d:
d5:13:45:02:d3:d2:0e:fc:cd:2e:8d:dd:f9:08:24:ba:52:4d:
f9:e8:69:d8:b3:13:bc:37:81:72:a5:81:00:48:92:3a:9e:7d:
5c:9e:da:65:9a:bd:43:09:2a:cc:78:48:23:e9:e3:a1:90:77:
2b:8e:55:2d:b6:c6:ad:ec:3a:09:57:32:de:82:8f:1e:fc:24:
52:92:f0:29
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDVYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzE0
RkFDRkQ0NUMyQzAyNzY4RTgyNzJGNEZCODNGQjJFREFGNzQzOTAeFw0yMjA5MTUw
MjM4MDdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEQzOEVCNEY3NkNGRjEy
RkY4MkJGNkYyQ0RENzBGNDFBMTMzMDZCRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjVhxq+smuLWZbQlZO5BWlKsubfY6TsdG7uB4Y6F+peM7YHYbG
rrfhWPGRtcrTfWM/h1ddAMYB7hslPGftD+4tFrYhZpKDWCZIo+qEXVZzX47Iadia
C4dINyfJplhjCaOYQznEe6YMbno848auclvzQd0f+A+0LOzafu17MjgEqqVeWBQb
sBIDm3sPJGxfGy3hN7bPyAjZZ3NO5yZ7e56OuIdC1TbwTn/UQ/ImkcUuuOS+7lOb
Ci88YSsTOFbQjFYhceVf3HaFjhrMo/7txA3IGHbt3nc5kETvXTrzOhjPGEml/KKG
qPTRgzRWtJhmPhIxOOcP1LIJrUa6qknSoEzdAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQU046092z/Ev+Cv28s3XD0GhMwa9AwHwYDVR0jBBgwFoAUwU+s/UXCwCdo6Ccv
T7g/su2vdDkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFFTL3dV
LXNfVVhDd0NkbzZDY3ZUN2dfc3UydmREay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
d1Utc19VWEN3Q2RvNkNjdlQ3Z19zdTJ2ZERrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvUFFTLzA0NjA5MnpfRXYtQ3YyOHMzWEQwR2hN
d2E5QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFniT4wDQYJ
KoZIhvcNAQELBQADggEBALPxq1jnwrHIqz3ULL52Cnv/IRZ4A1DVhgvsjJqEIcgm
5KZngClg4wMsLwvG6yTc6MrNOW07wZUNxidL9UqDF1SdRQ7Aok+dGVk86sE0KhF9
8ZHQ8O5s0lucTKbV0e0MclryuN4ZZ6mNEFe/JQDAGSVWebWyKfO3szMkUrN6Ma9a
AjQvQQTaq2+NO2YmQrXBPeL6b0ciT8ZrseLCwmQLCVIqJWH9V1PGYrbOoiG3UPU2
R6A+ndUTRQLT0g78zS6N3fkIJLpSTfnoadizE7w3gXKlgQBIkjqefVye2mWavUMJ
Ksx4SCPp46GQdyuOVS22xq3sOglXMt6Cjx78JFKS8Ck=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:52:28 2025 by rpki-client