Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/QAD-qwVwTKJpUvnqliiBa53ACms.roa
File: QAD-qwVwTKJpUvnqliiBa53ACms.roa (raw, json)
Hash identifier: JoevtIC83YwxrJyMm+oVDGRmtD1LKYqXMKv9RcLV3b0=
Subject key identifier: 40:00:FE:AB:05:70:4C:A2:69:52:F9:EA:96:28:81:6B:9D:C0:0A:6B
Certificate issuer: /CN=B2839BF7A6C6B17E7CFCB3734A36C0E98C37A1B7
Certificate serial: 054B
Authority key identifier: B2:83:9B:F7:A6:C6:B1:7E:7C:FC:B3:73:4A:36:C0:E9:8C:37:A1:B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/soOb96bGsX58_LNzSjbA6Yw3obc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/QAD-qwVwTKJpUvnqliiBa53ACms.roa
Signing time: Fri 01 Sep 2023 09:46:25 +0000
ROA not before: Fri 01 Sep 2023 09:46:25 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9678
IP address blocks: 103.152.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1355 (0x54b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2839BF7A6C6B17E7CFCB3734A36C0E98C37A1B7
Validity
Not Before: Sep 1 09:46:25 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4000FEAB05704CA26952F9EA9628816B9DC00A6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:ca:76:60:c0:97:8b:ce:b1:e0:6b:3c:57:
f2:f5:36:ed:72:49:a2:43:64:a3:11:92:9a:e0:a1:
31:c4:13:e7:59:f3:f8:98:0e:ea:73:d4:11:0a:1d:
e9:fd:11:65:73:48:82:4b:5d:a1:c2:81:e6:0b:3f:
8b:1d:0e:c3:6f:ed:75:36:c3:aa:d4:d9:2f:76:ec:
e5:cb:2c:47:19:4c:12:a2:a5:4d:b8:55:d1:c6:7b:
90:1c:f2:45:7f:5d:54:84:20:d2:e0:8e:89:f1:7a:
0d:9b:76:e8:e1:c8:82:84:a1:b9:68:2c:bf:c8:4e:
35:6e:0a:db:6a:97:83:ee:76:9a:81:ce:ae:18:14:
7e:90:08:91:e3:b2:d0:5a:0e:41:d8:b2:dc:f5:ce:
a9:a5:55:48:7f:26:5a:5b:58:99:aa:41:11:ff:22:
af:f2:04:6d:11:53:79:ad:33:ed:d9:aa:71:d0:28:
dd:8c:b0:83:95:3c:ff:28:a8:3f:cf:ff:8f:90:2b:
45:d3:75:2b:fe:f7:99:db:71:7c:04:af:ab:2c:6b:
2e:fd:08:6f:26:da:1e:ee:99:d6:8a:9e:22:7d:12:
c8:46:6e:0b:ff:99:f9:99:c8:09:21:98:66:a7:47:
c2:8a:d6:0b:92:4b:4a:0d:c2:87:3d:c6:c5:2b:8f:
16:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:00:FE:AB:05:70:4C:A2:69:52:F9:EA:96:28:81:6B:9D:C0:0A:6B
X509v3 Authority Key Identifier:
keyid:B2:83:9B:F7:A6:C6:B1:7E:7C:FC:B3:73:4A:36:C0:E9:8C:37:A1:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/soOb96bGsX58_LNzSjbA6Yw3obc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/soOb96bGsX58_LNzSjbA6Yw3obc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/QAD-qwVwTKJpUvnqliiBa53ACms.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.151.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:bc:1f:f0:b4:6f:48:a5:03:1d:1e:f4:68:0a:f5:fe:12:4b:
08:c0:ef:a7:fa:d7:c3:bd:9e:f9:24:0e:54:92:b6:b0:47:46:
27:5f:e0:78:1f:c1:17:f4:61:de:bc:48:db:c5:bf:0f:8e:e7:
1f:98:b1:78:ce:e4:69:25:cd:70:f3:06:8b:1a:ae:e3:e4:53:
7f:d1:01:19:94:bd:9b:62:3d:60:86:09:a3:c0:bb:7e:62:e7:
d3:39:0c:8f:12:91:8a:f3:99:3f:65:ec:60:c4:46:00:0b:f0:
7a:88:ae:c1:81:23:17:8a:23:65:3f:24:a6:46:1e:2c:d3:ec:
8d:94:7c:a4:7d:a7:2e:2c:0e:15:52:46:8c:c1:9a:73:37:ac:
0a:1a:1c:e9:ba:88:15:13:c9:4e:99:fe:f0:c9:13:0d:c3:c8:
17:99:57:9e:43:0b:d8:7e:52:3d:40:77:9c:c2:0f:c4:53:ee:
97:49:ee:c1:00:5d:74:21:b9:74:b5:84:fd:2a:50:82:18:27:
b8:88:59:90:96:e4:d4:75:d5:1b:90:93:ba:14:83:eb:b4:24:
9d:61:67:ec:36:31:dc:97:77:63:7e:b1:c9:d0:1e:c1:81:e2:
b7:7b:d6:bd:9e:ec:0c:3b:d1:bc:2a:3f:cf:82:6a:1c:5d:4b:
3a:c5:39:a6
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICBUswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjI4
MzlCRjdBNkM2QjE3RTdDRkNCMzczNEEzNkMwRTk4QzM3QTFCNzAeFw0yMzA5MDEw
OTQ2MjVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQwMDBGRUFCMDU3MDRD
QTI2OTUyRjlFQTk2Mjg4MTZCOURDMDBBNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0wsp2YMCXi86x4Gs8V/L1Nu1ySaJDZKMRkprgoTHEE+dZ8/iY
Dupz1BEKHen9EWVzSIJLXaHCgeYLP4sdDsNv7XU2w6rU2S927OXLLEcZTBKipU24
VdHGe5Ac8kV/XVSEINLgjonxeg2bdujhyIKEobloLL/ITjVuCttql4PudpqBzq4Y
FH6QCJHjstBaDkHYstz1zqmlVUh/JlpbWJmqQRH/Iq/yBG0RU3mtM+3ZqnHQKN2M
sIOVPP8oqD/P/4+QK0XTdSv+95nbcXwEr6ssay79CG8m2h7umdaKniJ9EshGbgv/
mfmZyAkhmGanR8KK1guSS0oNwoc9xsUrjxZTAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUQAD+qwVwTKJpUvnqliiBa53ACmswHwYDVR0jBBgwFoAUsoOb96bGsX58/LNz
SjbA6Yw3obcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1VNQVRS
QS9zb09iOTZiR3NYNThfTE56U2piQTZZdzNvYmMuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL3NvT2I5NmJHc1g1OF9MTnpTamJBNll3M29iYy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NVTUFUUkEvUUFELXF3VndUS0pwVXZu
cWxpaUJhNTNBQ21zLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AGeYlzANBgkqhkiG9w0BAQsFAAOCAQEALrwf8LRvSKUDHR70aAr1/hJLCMDvp/rX
w72e+SQOVJK2sEdGJ1/geB/BF/Rh3rxI28W/D47nH5ixeM7kaSXNcPMGixqu4+RT
f9EBGZS9m2I9YIYJo8C7fmLn0zkMjxKRivOZP2XsYMRGAAvweoiuwYEjF4ojZT8k
pkYeLNPsjZR8pH2nLiwOFVJGjMGaczesChoc6bqIFRPJTpn+8MkTDcPIF5lXnkML
2H5SPUB3nMIPxFPul0nuwQBddCG5dLWE/SpQghgnuIhZkJbk1HXVG5CTuhSD67Qk
nWFn7DYx3Jd3Y36xydAewYHit3vWvZ7sDDvRvCo/z4JqHF1LOsU5pg==
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org