Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/BZ9DWuJXoDv4y7eXdvSPrCpUWiM.roa
File: BZ9DWuJXoDv4y7eXdvSPrCpUWiM.roa (raw, json)
Hash identifier: vpG3bt/AM/E8Zd7aCrgZar9f22BciwWR1ZKfcKiBrDI=
Subject key identifier: 05:9F:43:5A:E2:57:A0:3B:F8:CB:B7:97:76:F4:8F:AC:2A:54:5A:23
Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Certificate serial: 12A2
Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/BZ9DWuJXoDv4y7eXdvSPrCpUWiM.roa
Signing time: Mon 12 Feb 2024 16:30:37 +0000
ROA not before: Mon 12 Feb 2024 16:30:37 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131631
IP address blocks: 103.123.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4770 (0x12a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Validity
Not Before: Feb 12 16:30:37 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=059F435AE257A03BF8CBB79776F48FAC2A545A23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:80:21:26:93:4e:07:2b:e2:50:e3:dd:de:78:
56:00:a8:e5:78:47:8f:82:db:5f:a7:16:a9:c8:ff:
58:55:9f:0c:8c:e7:00:9c:a2:6b:11:c2:ce:4c:bb:
01:ec:b0:e7:9f:54:00:ef:6c:7c:8c:ac:82:48:52:
d2:3b:88:65:c7:d5:62:b9:0a:64:aa:db:78:27:9e:
af:9a:10:7f:b0:e3:fd:87:85:26:ac:a7:df:e2:ac:
19:84:ba:91:d8:8d:48:17:df:5d:5f:35:f3:ce:57:
85:90:78:da:41:6c:62:aa:60:86:83:c0:c0:c6:6c:
0d:41:af:d4:32:77:8a:cc:4d:2d:a4:6f:d6:a9:35:
f2:24:0b:b2:5d:eb:b0:91:80:3f:7f:7a:1e:3d:61:
bc:7f:05:09:c6:bc:9b:de:86:08:51:4d:d3:1c:08:
11:33:22:fe:6d:95:a9:6c:8a:f5:42:84:9b:90:01:
56:7e:93:4e:a9:13:ee:0d:80:14:9d:b3:71:c8:ca:
1b:95:ce:d3:0e:a1:93:d5:c6:06:d5:23:fe:a7:dc:
c0:bc:5d:af:2d:e7:17:d3:0f:74:df:c6:d2:67:8c:
dd:bb:4a:a5:a0:da:6b:d2:91:0d:27:80:7d:fb:0b:
b3:35:50:9d:4c:69:8d:3b:28:d8:4e:60:72:a6:6f:
32:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9F:43:5A:E2:57:A0:3B:F8:CB:B7:97:76:F4:8F:AC:2A:54:5A:23
X509v3 Authority Key Identifier:
keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/BZ9DWuJXoDv4y7eXdvSPrCpUWiM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.218.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e6:1b:a0:a0:eb:50:6f:b0:88:8b:3b:2e:01:b7:0d:7e:e6:
c1:d3:ac:8f:ce:06:f0:5b:b3:a4:9c:ec:73:e2:86:27:ec:61:
64:d8:7f:cf:91:c4:cb:0d:ee:7d:f4:8d:4e:51:20:17:0a:b2:
23:dd:fe:97:2d:ee:91:81:2b:8b:40:7e:ea:ed:4b:a9:36:ce:
83:5b:76:12:fd:64:a7:f6:b1:94:85:72:18:e5:7c:d3:b6:a0:
a9:45:ec:1e:0d:ff:3a:8f:1e:f0:4e:fd:3d:6b:7f:4e:25:fa:
cf:a2:e0:57:aa:21:2b:ce:8b:25:8c:b0:45:9c:68:eb:5d:a7:
b2:f4:ab:06:08:27:dd:02:82:04:e1:c8:8e:89:0c:2d:79:81:
60:c9:43:03:4a:b4:32:27:6b:e6:30:a6:6c:08:08:c1:ab:f2:
44:5e:3f:13:6a:9a:b3:96:11:f6:dc:a3:0d:3d:c4:62:e9:8a:
e2:39:00:f7:7f:0b:5c:07:23:2b:b5:11:0e:4e:91:95:dd:c2:
5b:77:e0:b4:56:da:69:6a:34:5c:f6:7f:41:5f:7b:e4:f9:0f:
d5:9d:e0:cf:87:c9:9f:b1:d9:d7:1d:45:85:7d:db:89:99:29:
62:55:a7:e2:41:42:03:b6:b1:29:f2:e4:e2:bc:06:d0:10:1d:
43:b3:f9:7f
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEqIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzQ5
QjlDRTkwQUUwM0RBRDE5QkM1NERGRjYzQUU4QzQxRTIyMzk0ODAeFw0yNDAyMTIx
NjMwMzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA1OUY0MzVBRTI1N0Ew
M0JGOENCQjc5Nzc2RjQ4RkFDMkE1NDVBMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdgCEmk04HK+JQ493eeFYAqOV4R4+C21+nFqnI/1hVnwyM5wCc
omsRws5MuwHssOefVADvbHyMrIJIUtI7iGXH1WK5CmSq23gnnq+aEH+w4/2HhSas
p9/irBmEupHYjUgX311fNfPOV4WQeNpBbGKqYIaDwMDGbA1Br9Qyd4rMTS2kb9ap
NfIkC7Jd67CRgD9/eh49Ybx/BQnGvJvehghRTdMcCBEzIv5tlalsivVChJuQAVZ+
k06pE+4NgBSds3HIyhuVztMOoZPVxgbVI/6n3MC8Xa8t5xfTD3TfxtJnjN27SqWg
2mvSkQ0ngH37C7M1UJ1MaY07KNhOYHKmbzLVAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUBZ9DWuJXoDv4y7eXdvSPrCpUWiMwHwYDVR0jBBgwFoAUNJuc6QrgPa0ZvFTf
9jroxB4iOUgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0NORVQv
Tkp1YzZRcmdQYTBadkZUZjlqcm94QjRpT1VnLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9OSnVjNlFyZ1BhMFp2RlRmOWpyb3hCNGlPVWcuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TQ05FVC9CWjlEV3VKWG9EdjR5N2VYZHZT
UHJDcFVXaU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3va
MA0GCSqGSIb3DQEBCwUAA4IBAQBo5hugoOtQb7CIizsuAbcNfubB06yPzgbwW7Ok
nOxz4oYn7GFk2H/PkcTLDe599I1OUSAXCrIj3f6XLe6RgSuLQH7q7UupNs6DW3YS
/WSn9rGUhXIY5XzTtqCpReweDf86jx7wTv09a39OJfrPouBXqiErzosljLBFnGjr
Xaey9KsGCCfdAoIE4ciOiQwteYFgyUMDSrQyJ2vmMKZsCAjBq/JEXj8TapqzlhH2
3KMNPcRi6YriOQD3fwtcByMrtREOTpGV3cJbd+C0VtppajRc9n9BX3vk+Q/VneDP
h8mfsdnXHUWFfduJmSliVafiQUIDtrEp8uTivAbQEB1Ds/l/
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org