Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/TJUwSNCtihx7Fgd5lT24xVrZAkQ.roa
File: TJUwSNCtihx7Fgd5lT24xVrZAkQ.roa (raw, json)
Hash identifier: WaJdfGKdtL9nQ8Jvt/4/DH1oLqW6tanPW1AQNNzFfmU=
Subject key identifier: 4C:95:30:48:D0:AD:8A:1C:7B:16:07:79:95:3D:B8:C5:5A:D9:02:44
Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial: 0BB3
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/TJUwSNCtihx7Fgd5lT24xVrZAkQ.roa
Signing time: Fri 01 Sep 2023 09:44:58 +0000
ROA not before: Fri 01 Sep 2023 09:44:58 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4780
IP address blocks: 124.109.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2995 (0xbb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Validity
Not Before: Sep 1 09:44:58 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4C953048D0AD8A1C7B160779953DB8C55AD90244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:aa:d5:d0:33:86:92:34:40:44:60:6c:a8:
07:0b:20:07:4d:4f:58:29:65:5e:57:00:2d:f7:e3:
83:f4:81:23:12:64:f7:b1:b3:d1:ba:a7:19:f6:22:
0b:a5:03:ce:ff:b6:a7:02:3f:39:be:42:23:68:0f:
a8:fe:0b:4b:5d:53:08:9c:13:04:40:44:48:b4:8b:
04:a2:ca:76:61:b0:f5:5a:4e:e8:70:5c:d4:9c:55:
58:a3:20:30:17:bf:aa:33:2b:6f:36:e2:ae:67:fb:
28:59:c7:f5:0b:b5:3a:64:c5:4e:58:df:2b:fc:f0:
41:fe:b5:de:b5:8d:1c:b5:df:82:71:48:a6:d6:f6:
49:ca:89:0e:50:d1:e5:63:d8:59:8e:b3:f5:ec:97:
4e:98:92:6f:8b:eb:c5:b5:c8:60:75:91:62:a6:7f:
76:a9:fc:b1:72:00:2f:b6:1e:ce:67:af:f9:5c:7b:
3b:33:6e:73:b5:db:76:22:42:e8:41:e7:9b:ce:3f:
21:b4:08:10:28:bb:97:09:56:ef:16:38:96:df:cc:
05:49:c3:dd:f4:d0:cd:5d:17:03:c2:c0:14:cc:02:
49:fc:47:f1:c2:c0:46:1a:d5:51:6d:3c:c6:b4:3e:
31:ff:c2:cb:1a:5d:6b:e1:c9:88:be:cb:b1:8b:00:
b1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:95:30:48:D0:AD:8A:1C:7B:16:07:79:95:3D:B8:C5:5A:D9:02:44
X509v3 Authority Key Identifier:
keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/TJUwSNCtihx7Fgd5lT24xVrZAkQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.109.112.0/20
Signature Algorithm: sha256WithRSAEncryption
61:c0:59:ea:e6:41:91:b4:93:03:3b:cb:e6:89:a4:c3:15:b2:
02:e5:40:b9:20:c3:fe:ce:c9:1c:34:3f:c3:fb:6b:19:55:7e:
f2:23:e3:06:95:aa:bc:df:8c:dd:0f:3b:06:bc:d5:41:4d:87:
94:93:6e:de:84:2c:e0:6c:a9:c7:b7:3c:71:26:bc:ac:cf:1f:
af:e4:68:53:67:2c:07:b1:4b:aa:9f:71:65:dd:f5:01:90:19:
c8:59:b3:8d:5d:6f:5a:50:27:39:f8:7a:6b:7d:ce:8c:e5:7c:
62:84:9f:56:3f:a6:c8:93:d9:64:6f:52:5b:7b:3d:4f:0d:b6:
ec:67:46:46:f4:07:75:ac:bf:a3:69:00:43:ef:f9:2c:01:f5:
ff:bd:e9:b7:e9:43:d0:e1:f9:37:68:db:35:e7:a3:c9:50:71:
cd:d8:35:59:c6:6b:af:c9:be:59:87:f0:d5:ab:00:6f:5c:1b:
33:dd:79:e4:53:56:4c:c8:32:49:10:6d:81:59:8f:ce:ce:39:
76:34:d8:cb:f3:d0:16:d6:88:99:19:af:73:6a:fa:60:88:b9:
ae:7b:b4:33:ad:60:26:79:dd:e0:63:98:09:e8:c8:05:f5:fc:
a1:c4:ea:28:9c:40:1f:0a:f8:32:33:51:06:50:a5:4a:e1:21:
08:01:05:a7
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICC7MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JF
NkM2NTEzNTBFOEZBMUZDN0QwQTNFQUJDRjk4RjgxQjMxMTlEMzAeFw0yMzA5MDEw
OTQ0NThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDRDOTUzMDQ4RDBBRDhB
MUM3QjE2MDc3OTk1M0RCOEM1NUFEOTAyNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAw6rV0DOGkjRARGBsqAcLIAdNT1gpZV5XAC3344P0gSMSZPex
s9G6pxn2IgulA87/tqcCPzm+QiNoD6j+C0tdUwicEwRAREi0iwSiynZhsPVaTuhw
XNScVVijIDAXv6ozK2824q5n+yhZx/ULtTpkxU5Y3yv88EH+td61jRy134JxSKbW
9knKiQ5Q0eVj2FmOs/Xsl06Ykm+L68W1yGB1kWKmf3ap/LFyAC+2Hs5nr/lcezsz
bnO123YiQuhB55vOPyG0CBAou5cJVu8WOJbfzAVJw9300M1dFwPCwBTMAkn8R/HC
wEYa1VFtPMa0PjH/wssaXWvhyYi+y7GLALEbAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUTJUwSNCtihx7Fgd5lT24xVrZAkQwHwYDVR0jBBgwFoAUO+bGUTUOj6H8fQo+
q8+Y+BsxGdMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lHTUEv
Ty1iR1VUVU9qNkg4ZlFvLXE4LVktQnN4R2RNLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9PLWJHVVRVT2o2SDhmUW8tcTgtWS1Cc3hHZE0uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSUdNQS9USlV3U05DdGloeDdGZ2Q1bFQy
NHhWclpBa1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEfG1w
MA0GCSqGSIb3DQEBCwUAA4IBAQBhwFnq5kGRtJMDO8vmiaTDFbIC5UC5IMP+zskc
ND/D+2sZVX7yI+MGlaq834zdDzsGvNVBTYeUk27ehCzgbKnHtzxxJryszx+v5GhT
ZywHsUuqn3Fl3fUBkBnIWbONXW9aUCc5+Hprfc6M5XxihJ9WP6bIk9lkb1Jbez1P
DbbsZ0ZG9Ad1rL+jaQBD7/ksAfX/vem36UPQ4fk3aNs156PJUHHN2DVZxmuvyb5Z
h/DVqwBvXBsz3XnkU1ZMyDJJEG2BWY/Ozjl2NNjL89AW1oiZGa9zavpgiLmue7Qz
rWAmed3gY5gJ6MgF9fyhxOoonEAfCvgyM1EGUKVK4SEIAQWn
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org