Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/JnZB9UdIv6pveTdg13K2KjBR0S4.roa
File: JnZB9UdIv6pveTdg13K2KjBR0S4.roa (raw, json)
Hash identifier: W+X8++cBxPCRpfjy9e+RMt+HvrRQsqzrkq6RfYHVO/g=
Subject key identifier: 26:76:41:F5:47:48:BF:AA:6F:79:37:60:D7:72:B6:2A:30:51:D1:2E
Certificate issuer: /CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
Certificate serial: 1037
Authority key identifier: ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/JnZB9UdIv6pveTdg13K2KjBR0S4.roa
Signing time: Fri 01 Sep 2023 09:44:20 +0000
ROA not before: Fri 01 Sep 2023 09:44:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131633
IP address blocks: 103.127.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4151 (0x1037)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
Validity
Not Before: Sep 1 09:44:20 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=267641F54748BFAA6F793760D772B62A3051D12E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:21:b1:b1:84:c7:e2:60:41:65:6d:5e:a8:64:
34:d9:03:cd:05:7c:b0:41:b8:e4:45:c3:02:17:4e:
78:a3:95:ed:1c:ac:8f:7d:8b:b5:7e:d1:a4:ec:8f:
d9:46:75:f5:f9:f9:ff:fb:e6:5f:d2:89:4c:13:a6:
52:49:91:4e:c9:22:10:93:25:b2:49:b1:01:62:f0:
31:6d:a9:4e:b6:b7:e6:16:cd:12:54:ab:8f:52:b2:
f9:b3:81:72:8a:0a:89:4a:ca:77:84:05:28:37:82:
c3:e4:d7:21:86:71:6a:72:ed:d5:86:3b:08:ef:67:
d1:a4:1f:79:82:39:2f:bd:25:39:f3:c7:ed:71:29:
03:98:8c:21:e0:2f:7d:34:4d:b9:60:c2:55:07:eb:
1d:72:d6:3e:87:43:77:07:3a:d2:15:07:fb:44:13:
d0:1f:5b:f7:ca:30:3c:91:cb:05:66:71:f6:cd:1c:
46:8e:ad:c6:3b:0e:db:2a:d4:31:58:fb:22:ab:31:
1e:10:44:15:93:24:fc:13:65:b1:09:a4:57:bd:75:
3f:69:b3:26:aa:7a:f0:9f:d8:b7:3a:63:2b:b5:10:
5c:15:c3:55:d9:2c:d1:24:c0:53:d8:07:3d:7a:e7:
cf:e7:b9:4b:b6:5b:64:7d:c8:89:cf:52:2e:55:f0:
4c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:76:41:F5:47:48:BF:AA:6F:79:37:60:D7:72:B6:2A:30:51:D1:2E
X509v3 Authority Key Identifier:
keyid:ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/JnZB9UdIv6pveTdg13K2KjBR0S4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.236.0/22
Signature Algorithm: sha256WithRSAEncryption
ea:32:65:8b:31:c9:f6:20:f6:a7:af:3d:92:44:85:39:e9:1b:
bf:24:e9:50:58:f7:36:4c:37:6e:ad:53:b6:c0:84:23:ed:56:
09:99:74:d0:44:c6:b9:6b:0f:ef:c0:95:62:f5:53:61:f2:94:
15:b2:69:1e:08:bd:af:1e:f2:f0:59:2a:b8:be:62:ef:57:c2:
35:d1:aa:94:22:03:0a:ea:5a:76:98:e9:4f:97:99:5b:66:e5:
06:48:80:e8:b2:96:16:92:d1:39:97:50:72:af:6a:5e:f9:17:
8b:78:16:6d:c6:1b:4a:48:3e:8a:88:1f:dc:f9:69:8e:87:e2:
1d:77:c7:6d:5d:77:51:7d:b6:00:b2:1f:7f:39:b0:6e:62:79:
3a:36:9d:f5:b8:f7:0d:76:50:7b:77:92:27:d5:ec:97:bc:5f:
b5:5a:25:6c:19:73:7c:de:be:17:d4:86:40:48:0b:0c:f1:57:
07:75:24:c4:14:91:e8:30:e6:47:b1:96:d3:63:2d:a8:b1:81:
13:08:17:b8:c0:b1:73:3b:46:c4:82:f0:c3:51:7b:7c:ff:76:
46:93:0c:da:ab:54:d5:1a:46:24:81:b7:12:d2:da:67:e3:c6:
64:fe:8b:cd:c0:ba:4a:30:93:50:36:b1:85:c7:af:94:ad:6b:
fc:52:cc:84
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICEDcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUQx
ODZGNjMxNEQ3QjU3MTNFRkZFQ0ZCOTNFQkMzRTgyMTk3RTJFRjAeFw0yMzA5MDEw
OTQ0MjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDI2NzY0MUY1NDc0OEJG
QUE2Rjc5Mzc2MEQ3NzJCNjJBMzA1MUQxMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuIbGxhMfiYEFlbV6oZDTZA80FfLBBuORFwwIXTnijle0crI99
i7V+0aTsj9lGdfX5+f/75l/SiUwTplJJkU7JIhCTJbJJsQFi8DFtqU62t+YWzRJU
q49SsvmzgXKKColKyneEBSg3gsPk1yGGcWpy7dWGOwjvZ9GkH3mCOS+9JTnzx+1x
KQOYjCHgL300TblgwlUH6x1y1j6HQ3cHOtIVB/tEE9AfW/fKMDyRywVmcfbNHEaO
rcY7Dtsq1DFY+yKrMR4QRBWTJPwTZbEJpFe9dT9psyaqevCf2Lc6Yyu1EFwVw1XZ
LNEkwFPYBz1658/nuUu2W2R9yInPUi5V8EyTAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUJnZB9UdIv6pveTdg13K2KjBR0S4wHwYDVR0jBBgwFoAU7RhvYxTXtXE+/+z7
k+vD6CGX4u8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hVTllJ
TkcvN1Jodll4VFh0WEUtXy16N2stdkQ2Q0dYNHU4LmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS83Umh2WXhUWHRYRS1fLXo3ay12RDZDR1g0dTguY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSFVOWUlORy9KblpCOVVkSXY2cHZl
VGRnMTNLMktqQlIwUzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCZ3/sMA0GCSqGSIb3DQEBCwUAA4IBAQDqMmWLMcn2IPanrz2SRIU56Ru/JOlQ
WPc2TDdurVO2wIQj7VYJmXTQRMa5aw/vwJVi9VNh8pQVsmkeCL2vHvLwWSq4vmLv
V8I10aqUIgMK6lp2mOlPl5lbZuUGSIDospYWktE5l1Byr2pe+ReLeBZtxhtKSD6K
iB/c+WmOh+Idd8dtXXdRfbYAsh9/ObBuYnk6Np31uPcNdlB7d5In1eyXvF+1WiVs
GXN83r4X1IZASAsM8VcHdSTEFJHoMOZHsZbTYy2osYETCBe4wLFzO0bEgvDDUXt8
/3ZGkwzaq1TVGkYkgbcS0tpn48Zk/ovNwLpKMJNQNrGFx6+UrWv8UsyE
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org