Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/GhP-XFFZ_okVYauo81QZbA0uBYo.roa
File: GhP-XFFZ_okVYauo81QZbA0uBYo.roa (raw, json)
Hash identifier: oP0yDR0oiRQqFRVLTNHisINFNLUTDHbUmFKSKg5IpJM=
Subject key identifier: 1A:13:FE:5C:51:59:FE:89:15:61:AB:A8:F3:54:19:6C:0D:2E:05:8A
Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial: 0BBE
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/GhP-XFFZ_okVYauo81QZbA0uBYo.roa
Signing time: Fri 01 Sep 2023 09:40:37 +0000
ROA not before: Fri 01 Sep 2023 09:40:37 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9676
IP address blocks: 211.79.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3006 (0xbbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Validity
Not Before: Sep 1 09:40:37 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1A13FE5C5159FE891561ABA8F354196C0D2E058A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:8b:5f:3c:51:70:b4:29:90:b5:46:f5:a9:
fb:e5:cc:1b:8c:3b:9f:0e:ea:d2:06:d2:d1:43:28:
be:50:b8:fb:af:e7:3c:99:88:8b:4c:e2:89:23:9a:
19:66:d0:fb:61:d2:8c:34:d9:15:98:83:08:d1:0b:
0c:b2:0b:f7:d0:b9:87:ae:c3:f1:5d:d0:97:8a:3e:
eb:de:33:cd:52:4e:00:95:0c:95:cf:d5:b1:91:88:
31:44:dc:2b:2d:a1:50:ff:01:b4:fc:a9:e2:7e:2f:
7b:bf:46:e8:0d:b9:71:3f:cf:19:c1:36:b9:9f:af:
09:7d:c0:9d:a6:85:ab:2e:61:a8:25:88:9c:b5:11:
69:5a:43:f2:a3:ee:89:cb:c7:e3:c7:4c:fa:cf:08:
bd:b4:56:15:4a:a0:a6:ca:f6:b6:1b:7e:ee:35:d8:
62:ea:5e:77:63:28:d1:37:26:50:96:f4:f7:1c:f6:
22:10:c5:02:51:79:1d:cf:52:e2:bd:7a:7a:46:b6:
cb:ee:2b:95:92:64:1b:29:2a:73:48:74:80:d6:eb:
32:29:e3:9d:fc:32:28:0d:68:1b:59:ab:e2:92:69:
07:fd:b3:56:c6:bd:ff:27:ca:ae:7a:18:fd:1c:a9:
2b:20:42:f3:4e:33:c6:58:a1:54:f3:f7:53:34:4a:
96:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:13:FE:5C:51:59:FE:89:15:61:AB:A8:F3:54:19:6C:0D:2E:05:8A
X509v3 Authority Key Identifier:
keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/GhP-XFFZ_okVYauo81QZbA0uBYo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.79.64.0/19
Signature Algorithm: sha256WithRSAEncryption
4a:be:ef:02:db:c0:a7:d3:bf:6b:96:93:36:53:9f:89:36:af:
97:8c:4d:3a:9a:38:59:90:b5:5f:41:07:98:88:f4:58:ee:96:
80:04:59:e0:29:ba:c4:ff:2c:69:ee:d0:d4:84:74:9a:30:d5:
72:9c:35:d9:93:40:30:09:c1:50:fc:f0:c5:df:1d:3a:3b:54:
bd:37:f9:79:1b:f7:8d:2e:d8:44:b2:f5:87:fc:cc:5b:fb:41:
8b:6d:6a:2d:68:4f:9c:32:c6:7f:68:b1:d9:5d:b7:93:00:3b:
91:31:1f:12:d0:e3:3d:c7:d3:d8:52:e9:c2:43:ad:f6:be:af:
b9:5e:8b:17:b0:c9:b2:ab:34:65:25:44:f6:4f:12:b1:b3:a2:
c1:55:3c:e4:b9:a7:a1:be:6f:52:dd:4f:dc:37:43:97:2a:eb:
a8:08:16:c3:d4:da:03:04:95:20:c8:22:6c:c7:8f:d3:e2:17:
b0:af:30:6a:39:e4:d1:22:91:ca:6b:d5:51:63:16:a2:97:ce:
cb:ef:4f:23:d9:ba:62:63:a0:9b:b9:4c:58:45:36:ca:43:c9:
df:55:19:a0:bb:3d:2e:dc:4e:fd:75:87:f0:b3:cb:f2:d6:a1:
e5:82:d6:b8:b7:36:44:f1:66:41:23:bc:77:ee:55:27:cb:0f:
61:dd:a7:65
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICC74wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDFB
NTMyNjFCMjAwMUZBN0VCNTc3OTNFMkU1NzlCNzMyMkY4RTc2QTAeFw0yMzA5MDEw
OTQwMzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDFBMTNGRTVDNTE1OUZF
ODkxNTYxQUJBOEYzNTQxOTZDMEQyRTA1OEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqVotfPFFwtCmQtUb1qfvlzBuMO58O6tIG0tFDKL5QuPuv5zyZ
iItM4okjmhlm0Pth0ow02RWYgwjRCwyyC/fQuYeuw/Fd0JeKPuveM81STgCVDJXP
1bGRiDFE3CstoVD/AbT8qeJ+L3u/RugNuXE/zxnBNrmfrwl9wJ2mhasuYagliJy1
EWlaQ/Kj7onLx+PHTPrPCL20VhVKoKbK9rYbfu412GLqXndjKNE3JlCW9Pcc9iIQ
xQJReR3PUuK9enpGtsvuK5WSZBspKnNIdIDW6zIp4538MigNaBtZq+KSaQf9s1bG
vf8nyq56GP0cqSsgQvNOM8ZYoVTz91M0SpaHAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUGhP+XFFZ/okVYauo81QZbA0uBYowHwYDVR0jBBgwFoAUAaUyYbIAH6frV3k+
LlebcyL452owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FWRUNP
TS9BYVV5WWJJQUg2ZnJWM2stTGxlYmN5TDQ1Mm8uY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0FhVXlZYklBSDZmclYzay1MbGViY3lMNDUyby5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBVkVDT00vR2hQLVhGRlpfb2tWWWF1
bzgxUVpiQTB1QllvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BdNPQDANBgkqhkiG9w0BAQsFAAOCAQEASr7vAtvAp9O/a5aTNlOfiTavl4xNOpo4
WZC1X0EHmIj0WO6WgARZ4Cm6xP8sae7Q1IR0mjDVcpw12ZNAMAnBUPzwxd8dOjtU
vTf5eRv3jS7YRLL1h/zMW/tBi21qLWhPnDLGf2ix2V23kwA7kTEfEtDjPcfT2FLp
wkOt9r6vuV6LF7DJsqs0ZSVE9k8SsbOiwVU85Lmnob5vUt1P3DdDlyrrqAgWw9Ta
AwSVIMgibMeP0+IXsK8wajnk0SKRymvVUWMWopfOy+9PI9m6YmOgm7lMWEU2ykPJ
31UZoLs9LtxO/XWH8LPL8tah5YLWuLc2RPFmQSO8d+5VJ8sPYd2nZQ==
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org