Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SERVCOMP/Mpt4mcyi60VMh3tcFGyo13a_4tA.roa
File: Mpt4mcyi60VMh3tcFGyo13a_4tA.roa (raw, json)
Hash identifier: Xd9dncJf8iJTQaDff7/yZmqlCZTshPiGPAJKRKk8O7s=
Subject key identifier: 32:9B:78:99:CC:A2:EB:45:4C:87:7B:5C:14:6C:A8:D7:76:BF:E2:D0
Certificate issuer: /CN=0CE68958C4074750F9B01967C18F50F9CB112212
Certificate serial: 0AE1
Authority key identifier: 0C:E6:89:58:C4:07:47:50:F9:B0:19:67:C1:8F:50:F9:CB:11:22:12
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DOaJWMQHR1D5sBlnwY9Q-csRIhI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SERVCOMP/Mpt4mcyi60VMh3tcFGyo13a_4tA.roa
Signing time: Fri 01 Sep 2023 09:41:33 +0000
ROA not before: Fri 01 Sep 2023 09:41:33 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131620
IP address blocks: 103.116.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2785 (0xae1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CE68958C4074750F9B01967C18F50F9CB112212
Validity
Not Before: Sep 1 09:41:33 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=329B7899CCA2EB454C877B5C146CA8D776BFE2D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:a3:49:7d:a1:ea:d8:c0:ac:ec:ab:46:86:
72:f1:2e:17:13:e4:d4:45:8a:bd:d8:24:5e:f5:79:
1c:ad:23:c7:9a:eb:dd:cc:d3:5b:64:39:a1:f9:fe:
7b:6b:57:66:5b:8c:a2:0c:c7:b0:15:0b:76:d8:11:
92:70:df:05:ec:9d:99:37:44:0f:7e:b4:b3:f8:91:
ba:af:4b:b1:c1:0d:19:11:cd:a4:7f:f8:8c:27:64:
89:c8:fb:42:31:4b:1a:c4:61:59:93:e5:17:a2:c7:
3f:72:e7:13:bc:01:df:35:40:5f:ff:62:90:56:ee:
ea:11:f3:98:03:4d:c5:3a:c5:9b:c1:5c:31:d4:ac:
99:bb:f9:cf:c0:94:39:39:b8:6f:b7:0f:2b:76:f2:
ac:96:37:0b:19:8c:52:89:8a:62:b2:38:34:99:78:
a1:98:7d:54:a7:6e:80:98:d3:61:a2:e8:11:6d:78:
05:c8:11:15:b9:46:2f:d6:f9:73:9a:ca:09:c4:c1:
c6:65:96:17:8e:e5:8f:c5:9d:3b:52:af:b9:38:a3:
a2:43:30:44:f8:ef:11:fb:52:ec:83:ad:c6:2c:96:
bc:48:c2:06:1e:09:f6:1a:bf:4c:33:8c:4b:34:b4:
3d:8a:b8:6a:2d:b5:dc:f1:b2:2d:44:33:17:93:e8:
5d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9B:78:99:CC:A2:EB:45:4C:87:7B:5C:14:6C:A8:D7:76:BF:E2:D0
X509v3 Authority Key Identifier:
keyid:0C:E6:89:58:C4:07:47:50:F9:B0:19:67:C1:8F:50:F9:CB:11:22:12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SERVCOMP/DOaJWMQHR1D5sBlnwY9Q-csRIhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOaJWMQHR1D5sBlnwY9Q-csRIhI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SERVCOMP/Mpt4mcyi60VMh3tcFGyo13a_4tA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.68.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:89:17:4e:7a:4e:f3:0e:30:15:ed:a8:02:81:62:ce:e9:91:
7e:1c:05:57:e5:26:bc:6b:9f:2e:4d:16:34:24:79:13:68:c6:
b2:95:59:6c:e3:90:9b:b6:96:d6:80:fc:ff:11:4e:5c:b2:01:
90:f8:e3:6e:9b:91:94:8d:09:c0:3a:9c:f8:ea:c6:63:8d:4c:
e3:d3:0b:94:80:a2:ee:28:d8:f3:a1:73:5b:69:cd:48:72:ae:
91:f6:b1:29:7e:9e:c4:96:f8:65:95:52:86:63:a3:93:bf:dc:
25:f4:4b:43:05:ba:ae:f8:9d:c1:1d:69:9b:78:d5:3e:0d:e1:
5f:f6:a5:63:c9:01:2c:16:ec:66:df:0b:fd:46:01:53:7a:75:
d8:f8:2c:07:aa:3f:9d:a0:77:41:f3:18:b4:96:3e:87:1e:a3:
00:33:3f:d9:ea:8e:37:46:e2:42:c4:b5:43:5d:d8:e2:9c:8a:
fb:f7:d6:88:13:b1:25:f3:22:c0:dd:97:a5:be:4e:26:20:b9:
b5:5d:c5:55:48:90:51:eb:ab:86:88:a3:e7:b7:f7:2d:62:0e:
2f:b2:99:27:56:c4:db:55:5d:ee:31:04:5d:00:2d:5c:15:0e:
98:7d:9e:6e:3d:78:19:94:3c:84:68:32:f2:64:19:11:f5:31:
54:33:9a:c3
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCuEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMENF
Njg5NThDNDA3NDc1MEY5QjAxOTY3QzE4RjUwRjlDQjExMjIxMjAeFw0yMzA5MDEw
OTQxMzNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDMyOUI3ODk5Q0NBMkVC
NDU0Qzg3N0I1QzE0NkNBOEQ3NzZCRkUyRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvc6NJfaHq2MCs7KtGhnLxLhcT5NRFir3YJF71eRytI8ea693M
01tkOaH5/ntrV2ZbjKIMx7AVC3bYEZJw3wXsnZk3RA9+tLP4kbqvS7HBDRkRzaR/
+IwnZInI+0IxSxrEYVmT5Reixz9y5xO8Ad81QF//YpBW7uoR85gDTcU6xZvBXDHU
rJm7+c/AlDk5uG+3Dyt28qyWNwsZjFKJimKyODSZeKGYfVSnboCY02Gi6BFteAXI
ERW5Ri/W+XOaygnEwcZllheO5Y/FnTtSr7k4o6JDMET47xH7UuyDrcYslrxIwgYe
CfYav0wzjEs0tD2KuGottdzxsi1EMxeT6F3dAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUMpt4mcyi60VMh3tcFGyo13a/4tAwHwYDVR0jBBgwFoAUDOaJWMQHR1D5sBln
wY9Q+csRIhIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0VSVkNP
TVAvRE9hSldNUUhSMUQ1c0JsbndZOVEtY3NSSWhJLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9ET2FKV01RSFIxRDVzQmxud1k5US1jc1JJaEkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TRVJWQ09NUC9NcHQ0bWN5aTYwVk1o
M3RjRkd5bzEzYV80dEEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCZ3REMA0GCSqGSIb3DQEBCwUAA4IBAQBLiRdOek7zDjAV7agCgWLO6ZF+HAVX
5Sa8a58uTRY0JHkTaMaylVls45CbtpbWgPz/EU5csgGQ+ONum5GUjQnAOpz46sZj
jUzj0wuUgKLuKNjzoXNbac1Icq6R9rEpfp7ElvhllVKGY6OTv9wl9EtDBbqu+J3B
HWmbeNU+DeFf9qVjyQEsFuxm3wv9RgFTenXY+CwHqj+doHdB8xi0lj6HHqMAMz/Z
6o43RuJCxLVDXdjinIr799aIE7El8yLA3Zelvk4mILm1XcVVSJBR66uGiKPnt/ct
Yg4vspknVsTbVV3uMQRdAC1cFQ6YfZ5uPXgZlDyEaDLyZBkR9TFUM5rD
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org