Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SGU/NpcJB5j5yD0obQR2NJ7j25-ydhA.roa
File: NpcJB5j5yD0obQR2NJ7j25-ydhA.roa (raw, json)
Hash identifier: ypWLG8pG/hUyDTX+jUbQqJBPe7+AfhBc1q5FZHcPbSw=
Subject key identifier: 36:97:09:07:98:F9:C8:3D:28:6D:04:76:34:9E:E3:DB:9F:B2:76:10
Certificate issuer: /CN=3294E71902A4A5C31B987BD67D094AF5830A816D
Certificate serial: 0140
Authority key identifier: 32:94:E7:19:02:A4:A5:C3:1B:98:7B:D6:7D:09:4A:F5:83:0A:81:6D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MpTnGQKkpcMbmHvWfQlK9YMKgW0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SGU/NpcJB5j5yD0obQR2NJ7j25-ydhA.roa
Signing time: Fri 01 Sep 2023 09:41:46 +0000
ROA not before: Fri 01 Sep 2023 09:41:46 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 134823
IP address blocks: 103.186.186.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3294E71902A4A5C31B987BD67D094AF5830A816D
Validity
Not Before: Sep 1 09:41:46 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3697090798F9C83D286D0476349EE3DB9FB27610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:75:57:55:23:b3:cd:9a:f3:8d:f4:2b:4d:7d:
aa:92:1a:5c:cc:b0:0b:a5:7e:55:e4:f4:6b:e6:1b:
6b:7d:f5:e8:13:8c:18:a5:bb:2f:59:20:a4:4f:57:
05:e5:a9:9d:61:9e:cd:ff:de:1a:6f:1b:d0:9d:48:
d6:d1:93:f1:1e:81:11:1f:30:05:a1:9e:68:b1:81:
a9:d4:e4:dc:93:bc:3b:61:e8:28:41:a7:84:31:0d:
c7:fc:7e:5e:72:af:d4:74:52:90:cd:2a:0c:af:bd:
ff:54:11:f6:43:67:cb:eb:fe:a0:77:f9:59:d4:3d:
8e:34:e9:31:aa:f0:a5:f9:42:04:9c:40:b4:88:57:
e3:f6:17:0c:4b:92:be:11:46:88:d8:2e:63:ea:ef:
1f:86:df:36:92:af:af:20:8c:25:38:02:37:2e:5e:
14:4e:f8:04:46:78:51:a7:9c:4f:ed:c6:8d:f3:a8:
53:58:96:9a:07:03:a4:82:87:36:70:5b:7e:49:f5:
43:e9:7c:82:46:8e:65:fc:fe:a8:a2:89:0e:f9:f9:
a7:d5:0d:c0:01:66:43:70:6d:e3:52:72:74:69:fd:
2b:59:cc:d3:61:3a:09:ec:de:79:84:a8:05:fa:0f:
3e:68:6d:16:61:c3:1c:35:a5:69:45:5e:96:36:48:
38:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:97:09:07:98:F9:C8:3D:28:6D:04:76:34:9E:E3:DB:9F:B2:76:10
X509v3 Authority Key Identifier:
keyid:32:94:E7:19:02:A4:A5:C3:1B:98:7B:D6:7D:09:4A:F5:83:0A:81:6D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SGU/MpTnGQKkpcMbmHvWfQlK9YMKgW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MpTnGQKkpcMbmHvWfQlK9YMKgW0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SGU/NpcJB5j5yD0obQR2NJ7j25-ydhA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.186.186.0/23
Signature Algorithm: sha256WithRSAEncryption
94:c3:a8:fc:ac:4e:7b:06:75:71:3c:46:1d:f9:03:2d:98:7e:
a1:47:ec:48:d5:d3:c7:cc:61:f2:3e:2c:56:e8:23:ee:9b:2f:
26:6b:7d:da:20:6e:d9:71:f5:67:5a:9c:3b:b7:14:e0:bf:2a:
af:c4:a3:f8:9c:3d:26:36:18:99:bc:35:94:c8:38:3b:90:75:
11:5c:b3:37:9e:bf:ac:cc:33:80:51:2c:59:66:9f:41:62:c5:
f2:25:1b:ad:c6:a1:01:f4:7c:80:c5:34:6a:5d:f4:f6:15:2e:
3b:86:7a:1e:13:ed:13:76:bd:be:19:bb:e1:57:3e:35:9b:52:
96:7e:c1:42:28:ab:89:94:f2:ca:e5:08:da:ff:71:67:94:84:
ac:75:b6:85:fc:c8:5c:86:29:f7:b1:5e:f3:45:fe:ea:fb:b8:
30:75:83:f9:bf:52:a5:b4:f2:46:c5:18:f0:4c:f7:ad:8c:c9:
a8:8a:02:c2:50:99:3c:9e:4e:38:9f:fc:00:65:6d:7a:02:dc:
f9:23:88:01:86:58:b5:b0:09:c2:b3:c9:d2:d7:8c:cc:97:39:
aa:d1:09:49:f9:e2:78:28:1c:82:1a:df:6b:9a:5b:87:a2:47:
c9:2b:c8:8a:2e:51:a0:87:61:c2:17:11:28:36:48:91:21:30:
5f:39:53:09
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzI5
NEU3MTkwMkE0QTVDMzFCOTg3QkQ2N0QwOTRBRjU4MzBBODE2RDAeFw0yMzA5MDEw
OTQxNDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM2OTcwOTA3OThGOUM4
M0QyODZEMDQ3NjM0OUVFM0RCOUZCMjc2MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMdVdVI7PNmvON9CtNfaqSGlzMsAulflXk9GvmG2t99egTjBil
uy9ZIKRPVwXlqZ1hns3/3hpvG9CdSNbRk/EegREfMAWhnmixganU5NyTvDth6ChB
p4QxDcf8fl5yr9R0UpDNKgyvvf9UEfZDZ8vr/qB3+VnUPY406TGq8KX5QgScQLSI
V+P2FwxLkr4RRojYLmPq7x+G3zaSr68gjCU4AjcuXhRO+ARGeFGnnE/txo3zqFNY
lpoHA6SChzZwW35J9UPpfIJGjmX8/qiiiQ75+afVDcABZkNwbeNScnRp/StZzNNh
Ogns3nmEqAX6Dz5obRZhwxw1pWlFXpY2SDgRAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUNpcJB5j5yD0obQR2NJ7j25+ydhAwHwYDVR0jBBgwFoAUMpTnGQKkpcMbmHvW
fQlK9YMKgW0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0dVL01w
VG5HUUtrcGNNYm1IdldmUWxLOVlNS2dXMC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
TXBUbkdRS2twY01ibUh2V2ZRbEs5WU1LZ1cwLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvU0dVL05wY0pCNWo1eUQwb2JRUjJOSjdqMjUt
eWRoQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnurowDQYJ
KoZIhvcNAQELBQADggEBAJTDqPysTnsGdXE8Rh35Ay2YfqFH7EjV08fMYfI+LFbo
I+6bLyZrfdogbtlx9WdanDu3FOC/Kq/Eo/icPSY2GJm8NZTIODuQdRFcszeev6zM
M4BRLFlmn0FixfIlG63GoQH0fIDFNGpd9PYVLjuGeh4T7RN2vb4Zu+FXPjWbUpZ+
wUIoq4mU8srlCNr/cWeUhKx1toX8yFyGKfexXvNF/ur7uDB1g/m/UqW08kbFGPBM
962MyaiKAsJQmTyeTjif/ABlbXoC3PkjiAGGWLWwCcKzydLXjMyXOarRCUn54ngo
HIIa32uaW4eiR8kryIouUaCHYcIXESg2SJEhMF85Uwk=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org