Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/BrQE6rFFrt2iuUBCQwKu47dfUGQ.roa
File: BrQE6rFFrt2iuUBCQwKu47dfUGQ.roa (raw, json)
Hash identifier: 8VHJ8rgxWQA/TE86a9eMcQi5LdtoaGYEx0CpZiq3Auk=
Subject key identifier: 06:B4:04:EA:B1:45:AE:DD:A2:B9:40:42:43:02:AE:E3:B7:5F:50:64
Certificate issuer: /CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
Certificate serial: 0B25
Authority key identifier: 99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/BrQE6rFFrt2iuUBCQwKu47dfUGQ.roa
Signing time: Sat 07 Oct 2023 08:04:12 +0000
ROA not before: Sat 07 Oct 2023 08:04:12 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18464
IP address blocks: 103.122.22.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2853 (0xb25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
Validity
Not Before: Oct 7 08:04:12 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=06B404EAB145AEDDA2B940424302AEE3B75F5064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0d:4e:4a:87:7a:60:ec:d1:e2:96:05:03:b1:
2d:7a:3e:09:72:b5:80:fc:1e:44:04:ac:b2:f8:90:
37:2c:29:84:22:2e:06:35:94:68:3e:f5:37:9c:d5:
60:79:8d:78:84:48:3d:ca:4e:e3:36:86:a8:49:4c:
8e:7d:8d:a6:30:57:29:2b:06:b6:33:3b:19:fe:65:
fd:a5:3a:b1:9a:5d:2f:02:cb:e5:fc:6a:fd:60:a0:
b6:ee:c8:a8:87:cb:38:8b:da:d3:e3:a5:4f:79:2a:
a2:ba:e6:e2:ef:5f:d4:7d:68:e4:f2:11:1e:23:4a:
29:60:f4:f7:8f:c5:7b:cb:81:b1:77:42:04:45:22:
54:31:5e:18:ff:cb:b8:28:94:d2:5c:b8:15:a5:ec:
09:86:be:6a:42:18:2b:eb:59:d3:0c:c0:8a:a8:b0:
b3:8f:5a:c0:8f:f4:26:54:f0:49:16:44:95:7c:c0:
05:b1:09:53:7d:2c:96:57:7f:ef:e5:72:14:67:3b:
21:c5:54:b2:e3:31:82:c0:aa:10:75:3b:16:d2:63:
ff:3f:e9:bb:b3:c8:16:10:db:73:b6:37:ec:f0:f7:
82:cf:d7:ad:a5:c5:4d:a4:a7:6f:2a:1f:51:41:40:
81:f4:f3:e7:58:98:b3:e8:ce:9e:6d:0c:0c:97:6e:
bc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B4:04:EA:B1:45:AE:DD:A2:B9:40:42:43:02:AE:E3:B7:5F:50:64
X509v3 Authority Key Identifier:
keyid:99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/BrQE6rFFrt2iuUBCQwKu47dfUGQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.22.0/23
Signature Algorithm: sha256WithRSAEncryption
59:cd:0d:ba:ce:5d:5e:b7:5f:b7:9d:2b:e8:20:70:e1:12:8a:
02:5a:ff:7e:18:b5:20:04:1c:af:04:12:a7:82:2e:77:7b:97:
36:35:40:53:44:81:f0:68:de:07:17:71:82:61:69:25:ba:f7:
e1:27:a6:ad:65:ad:3d:56:d4:b3:fe:07:f1:25:9f:7e:03:64:
7a:44:8b:fd:42:cf:4c:fe:d5:13:7b:eb:6c:50:85:4a:b2:49:
1f:05:88:d0:27:72:76:61:b0:fe:9f:c8:49:ee:8a:2d:c0:bd:
a0:d9:91:f3:6c:55:2e:bf:b7:27:fe:c2:d7:65:3d:a0:b5:b1:
03:40:7c:56:00:1c:ed:09:6c:5c:0f:74:9b:81:5d:f4:b3:ec:
08:59:9b:15:01:b9:c4:b7:76:25:43:f9:09:aa:5e:fe:96:eb:
8d:06:68:ac:94:e0:da:32:4f:1c:8d:d1:ba:ad:fb:2d:fc:e9:
64:f3:56:e7:45:7f:d4:d0:28:bb:98:f6:30:f6:c7:01:aa:9a:
5c:85:ed:b1:c9:d3:67:76:95:07:bd:63:b5:cf:ed:cf:45:cb:
a1:9f:e7:7e:75:c3:ee:e4:11:c2:e4:de:3c:3f:24:8f:66:46:
d1:e5:82:9f:29:f2:65:63:80:11:4a:ee:60:c8:c2:5c:c7:ce:
70:c5:32:71
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICCyUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTkz
RjcyODBGMUY5QjY1NDM5REQ2NUFERkI2OENBMEQ2Qzk5QkVDNTAeFw0yMzEwMDcw
ODA0MTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA2QjQwNEVBQjE0NUFF
RERBMkI5NDA0MjQzMDJBRUUzQjc1RjUwNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEDU5Kh3pg7NHilgUDsS16PglytYD8HkQErLL4kDcsKYQiLgY1
lGg+9Tec1WB5jXiESD3KTuM2hqhJTI59jaYwVykrBrYzOxn+Zf2lOrGaXS8Cy+X8
av1goLbuyKiHyziL2tPjpU95KqK65uLvX9R9aOTyER4jSilg9PePxXvLgbF3QgRF
IlQxXhj/y7golNJcuBWl7AmGvmpCGCvrWdMMwIqosLOPWsCP9CZU8EkWRJV8wAWx
CVN9LJZXf+/lchRnOyHFVLLjMYLAqhB1OxbSY/8/6buzyBYQ23O2N+zw94LP162l
xU2kp28qH1FBQIH08+dYmLPozp5tDAyXbrxdAgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUBrQE6rFFrt2iuUBCQwKu47dfUGQwHwYDVR0jBBgwFoAUmT9ygPH5tlQ53WWt
+2jKDWyZvsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FLVVJB
SE9TVC9tVDl5Z1BINXRsUTUzV1d0LTJqS0RXeVp2c1UuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL21UOXlnUEg1dGxRNTNXV3QtMmpLRFd5WnZzVS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBS1VSQUhPU1QvQnJRRTZyRkZy
dDJpdVVCQ1F3S3U0N2RmVUdRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAWd6FjANBgkqhkiG9w0BAQsFAAOCAQEAWc0Nus5dXrdft50r6CBw4RKK
Alr/fhi1IAQcrwQSp4Iud3uXNjVAU0SB8GjeBxdxgmFpJbr34SemrWWtPVbUs/4H
8SWffgNkekSL/ULPTP7VE3vrbFCFSrJJHwWI0CdydmGw/p/ISe6KLcC9oNmR82xV
Lr+3J/7C12U9oLWxA0B8VgAc7QlsXA90m4Fd9LPsCFmbFQG5xLd2JUP5Cape/pbr
jQZorJTg2jJPHI3Ruq37LfzpZPNW50V/1NAou5j2MPbHAaqaXIXtscnTZ3aVB71j
tc/tz0XLoZ/nfnXD7uQRwuTePD8kj2ZG0eWCnynyZWOAEUruYMjCXMfOcMUycQ==
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org