Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/3lsyDcC1tzgU4dKt0sbjRIetWXQ.roa
File: 3lsyDcC1tzgU4dKt0sbjRIetWXQ.roa (raw, json)
Hash identifier: ng0x7/Qc3kD/ORQQr1ZeVZGvSySfUgWqttuH2SvDo+M=
Subject key identifier: DE:5B:32:0D:C0:B5:B7:38:14:E1:D2:AD:D2:C6:E3:44:87:AD:59:74
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0CD9
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/3lsyDcC1tzgU4dKt0sbjRIetWXQ.roa
Signing time: Fri 01 Sep 2023 09:39:50 +0000
ROA not before: Fri 01 Sep 2023 09:39:50 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38843
IP address blocks: 124.150.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3289 (0xcd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Sep 1 09:39:50 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DE5B320DC0B5B73814E1D2ADD2C6E34487AD5974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:09:64:2b:44:11:f9:35:f9:5b:a3:bb:b3:81:
c5:71:d4:b0:39:08:06:5c:69:7d:50:87:e7:1e:4a:
b7:e5:55:ed:51:86:6c:7f:3c:ce:83:74:59:3d:50:
39:9d:37:22:89:bd:39:87:3b:c8:04:1e:6f:ef:4a:
e1:86:ec:8b:69:73:c8:a3:70:39:13:ca:a8:da:65:
97:9e:c3:85:19:7f:b0:68:da:03:97:ea:86:11:4f:
7d:d1:70:86:84:c2:29:28:87:20:66:8f:24:83:11:
2b:93:17:bb:2d:83:84:55:bf:cc:96:60:cb:83:4d:
97:0b:ea:cb:ad:ed:b1:ab:93:f2:48:35:af:f7:48:
65:35:7f:04:71:8f:71:4d:27:62:a7:ff:8e:a9:ce:
6c:15:f8:9d:64:a9:c3:7c:77:6c:d9:4e:3b:11:85:
ee:5f:35:5f:ad:7c:68:22:c6:62:18:7a:6f:bb:89:
f3:4a:6e:a2:06:98:7e:82:62:9b:06:df:3c:8d:21:
93:a6:84:f6:b0:74:c3:ee:72:3d:9e:b7:cf:67:9a:
2c:39:4e:80:f8:68:9c:3a:69:eb:c7:f9:f9:d6:cb:
5d:b5:76:1f:4a:60:01:3a:21:8e:c8:ed:0e:eb:66:
9f:3a:4d:50:db:6b:79:f6:56:c4:4d:2a:7f:23:9a:
6a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5B:32:0D:C0:B5:B7:38:14:E1:D2:AD:D2:C6:E3:44:87:AD:59:74
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/3lsyDcC1tzgU4dKt0sbjRIetWXQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.150.128.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:96:6f:63:92:d0:5e:50:b3:a7:40:bf:55:ce:0b:ab:ce:16:
5a:3d:b6:e3:29:07:72:6c:ea:6b:cf:87:77:3b:53:77:38:38:
4b:de:ab:c9:79:f2:f8:5e:a0:8b:6a:25:94:f5:99:1c:86:e5:
ec:65:ca:2e:86:35:2d:d7:0f:51:96:08:2d:28:57:69:1d:c5:
b1:67:ac:2d:19:d9:94:f2:af:8d:ce:28:47:85:6c:18:1a:0c:
ce:a1:b1:aa:58:6b:a8:85:ce:7e:3c:53:67:6a:c9:1a:7d:cc:
82:f1:36:de:2a:fa:70:5f:f0:9c:b5:ef:49:23:e3:d9:4b:3c:
e9:70:42:98:80:a9:69:15:a9:01:80:d1:ca:2a:65:5a:63:16:
36:b6:94:bf:bd:9f:42:27:f7:6b:62:ce:fe:2f:c9:93:d5:c1:
af:e9:b1:60:88:4b:33:7c:54:4e:d6:01:f4:55:50:59:7e:ca:
58:4a:b6:26:3d:fa:06:f3:05:0f:0d:8b:e4:f4:a1:5f:be:5e:
10:bc:12:76:ca:9c:e8:b0:29:ab:e1:d6:74:f4:f8:e2:b1:ab:
33:f2:e8:ac:f8:ec:e3:b5:ee:3c:33:55:1d:87:63:1d:fe:e9:
95:17:49:57:48:f1:dd:a5:17:37:f8:b8:64:f6:33:e5:56:f9:
60:f7:26:6a
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDNkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE
RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yMzA5MDEw
OTM5NTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERFNUIzMjBEQzBCNUI3
MzgxNEUxRDJBREQyQzZFMzQ0ODdBRDU5NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmCWQrRBH5Nflbo7uzgcVx1LA5CAZcaX1Qh+ceSrflVe1Rhmx/
PM6DdFk9UDmdNyKJvTmHO8gEHm/vSuGG7Itpc8ijcDkTyqjaZZeew4UZf7Bo2gOX
6oYRT33RcIaEwikohyBmjySDESuTF7stg4RVv8yWYMuDTZcL6sut7bGrk/JINa/3
SGU1fwRxj3FNJ2Kn/46pzmwV+J1kqcN8d2zZTjsRhe5fNV+tfGgixmIYem+7ifNK
bqIGmH6CYpsG3zyNIZOmhPawdMPucj2et89nmiw5ToD4aJw6aevH+fnWy121dh9K
YAE6IY7I7Q7rZp86TVDba3n2VsRNKn8jmmobAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU3lsyDcC1tzgU4dKt0sbjRIetWXQwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80
sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O
TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vM2xzeURjQzF0emdVNGRLdDBzYmpS
SWV0V1hRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3yWgDAN
BgkqhkiG9w0BAQsFAAOCAQEAa5ZvY5LQXlCzp0C/Vc4Lq84WWj224ykHcmzqa8+H
dztTdzg4S96ryXny+F6gi2ollPWZHIbl7GXKLoY1LdcPUZYILShXaR3FsWesLRnZ
lPKvjc4oR4VsGBoMzqGxqlhrqIXOfjxTZ2rJGn3MgvE23ir6cF/wnLXvSSPj2Us8
6XBCmICpaRWpAYDRyiplWmMWNraUv72fQif3a2LO/i/Jk9XBr+mxYIhLM3xUTtYB
9FVQWX7KWEq2Jj36BvMFDw2L5PShX75eELwSdsqc6LApq+HWdPT44rGrM/LorPjs
47XuPDNVHYdjHf7plRdJV0jx3aUXN/i4ZPYz5Vb5YPcmag==
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org