Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/0x3mcu6xk0fSYxrazTEb1pJIOUo.roa
File: 0x3mcu6xk0fSYxrazTEb1pJIOUo.roa (raw, json)
Hash identifier: tSp4MMwvi4Yj2dvTEc2xsuYOXe6VSe7qC0gEKNlm9IY=
Subject key identifier: D3:1D:E6:72:EE:B1:93:47:D2:63:1A:DA:CD:31:1B:D6:92:48:39:4A
Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial: 0B93
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/0x3mcu6xk0fSYxrazTEb1pJIOUo.roa
Signing time: Fri 01 Sep 2023 09:49:24 +0000
ROA not before: Fri 01 Sep 2023 09:49:24 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131584
IP address blocks: 111.235.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2963 (0xb93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Validity
Not Before: Sep 1 09:49:24 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D31DE672EEB19347D2631ADACD311BD69248394A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:94:0a:2d:11:59:89:98:7a:a6:9a:af:05:55:
0d:e0:67:31:c3:cf:63:da:fa:6e:af:7d:92:12:07:
d4:44:2d:44:48:86:22:5b:af:67:16:ab:89:d2:c4:
a0:21:3a:a1:04:01:15:44:a2:7c:bc:c9:a3:95:13:
9b:f4:18:fb:20:91:02:25:6e:44:ca:28:be:d4:f5:
53:43:4c:ce:e4:d7:54:0d:ff:22:d7:3d:f1:9f:c3:
bd:d6:ac:65:41:7c:24:c4:de:1b:37:f3:13:5d:5e:
92:c5:9f:29:9c:e3:08:93:15:ea:38:36:17:a9:cc:
72:ee:26:5d:b8:1c:2b:3f:81:f2:a3:84:31:3e:fc:
87:e7:2f:4f:27:06:30:db:63:d9:eb:33:cd:8f:6e:
29:02:f6:29:53:35:54:06:ba:1d:22:d3:24:2b:65:
bf:c0:50:11:d2:93:00:0d:95:e8:f3:b8:65:40:a8:
1d:10:eb:eb:6b:56:0e:e1:32:08:a4:c8:46:34:77:
9c:39:21:22:f1:ae:44:74:4c:f0:28:ee:2b:9c:4b:
1c:0c:9e:b1:49:a5:52:3d:49:58:79:4d:60:8f:80:
05:d0:89:4a:9b:90:d3:eb:3c:8e:4c:6a:81:86:0a:
1b:b6:8f:67:0d:cf:8c:cd:6e:a1:c7:f7:9e:7a:fa:
72:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1D:E6:72:EE:B1:93:47:D2:63:1A:DA:CD:31:1B:D6:92:48:39:4A
X509v3 Authority Key Identifier:
keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/0x3mcu6xk0fSYxrazTEb1pJIOUo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
111.235.192.0/18
Signature Algorithm: sha256WithRSAEncryption
d3:88:c6:5b:6a:5c:13:e9:9c:19:f4:f2:e1:2d:af:cc:df:df:
a5:4e:86:f1:75:c9:19:dd:e5:24:b6:03:55:91:eb:b7:ad:a4:
11:a0:6e:6a:5e:cc:7e:8a:0f:55:1e:e2:a9:97:f2:51:70:ac:
d4:7a:8e:bb:12:47:a8:ab:11:37:ce:5f:97:e1:61:5a:01:5d:
17:f6:6b:2a:03:ad:98:8b:25:d5:98:32:0d:d0:52:cd:e8:ed:
66:e1:e4:6c:f1:42:8c:be:d4:ed:f4:b7:14:da:c1:ef:f4:ae:
5e:ba:70:1e:6e:f9:08:5b:c6:83:32:a4:d4:89:ef:8f:ec:6e:
11:96:30:1b:62:25:ae:9c:d2:ba:86:35:21:6c:b3:ac:59:78:
8c:c1:59:c2:ee:4f:77:eb:88:80:05:81:96:4e:51:2e:97:f5:
ed:51:3b:d9:63:36:0e:65:75:81:b1:ad:dd:14:f2:d3:3e:93:
3c:d6:e5:d7:ca:49:4f:7c:7e:19:e8:75:ff:75:8e:b2:6d:20:
2b:04:a3:7c:80:8e:5d:6a:4f:71:a0:97:ac:b7:ff:b5:ba:15:
98:c0:d2:74:a1:9c:d6:12:67:25:12:3b:30:b4:19:28:25:c5:
27:69:3a:be:8a:d7:68:6e:34:3f:ec:85:00:01:26:77:45:d5:
89:66:69:c3
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICC5MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREY1
NjczQTE5NzIxMjZFN0QyQ0M1RDRENTFCNDkxMDgzNDVCRjhDOTAeFw0yMzA5MDEw
OTQ5MjRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQzMURFNjcyRUVCMTkz
NDdEMjYzMUFEQUNEMzExQkQ2OTI0ODM5NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCflAotEVmJmHqmmq8FVQ3gZzHDz2Pa+m6vfZISB9RELURIhiJb
r2cWq4nSxKAhOqEEARVEony8yaOVE5v0GPsgkQIlbkTKKL7U9VNDTM7k11QN/yLX
PfGfw73WrGVBfCTE3hs38xNdXpLFnymc4wiTFeo4NhepzHLuJl24HCs/gfKjhDE+
/IfnL08nBjDbY9nrM82PbikC9ilTNVQGuh0i0yQrZb/AUBHSkwANlejzuGVAqB0Q
6+trVg7hMgikyEY0d5w5ISLxrkR0TPAo7iucSxwMnrFJpVI9SVh5TWCPgAXQiUqb
kNPrPI5MaoGGChu2j2cNz4zNbqHH9556+nI/AgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQU0x3mcu6xk0fSYxrazTEb1pJIOUowHwYDVR0jBBgwFoAU31ZzoZchJufSzF1N
UbSRCDRb+MkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83
NzE2LzMxWnpvWmNoSnVmU3pGMU5VYlNSQ0RSYi1Nay5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvMzFaem9aY2hKdWZTekYxTlViU1JDRFJiLU1rLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83NzE2LzB4M21jdTZ4azBm
U1l4cmF6VEViMXBKSU9Vby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZv68AwDQYJKoZIhvcNAQELBQADggEBANOIxltqXBPpnBn08uEtr8zf36VO
hvF1yRnd5SS2A1WR67etpBGgbmpezH6KD1Ue4qmX8lFwrNR6jrsSR6irETfOX5fh
YVoBXRf2ayoDrZiLJdWYMg3QUs3o7Wbh5GzxQoy+1O30txTawe/0rl66cB5u+Qhb
xoMypNSJ74/sbhGWMBtiJa6c0rqGNSFss6xZeIzBWcLuT3friIAFgZZOUS6X9e1R
O9ljNg5ldYGxrd0U8tM+kzzW5dfKSU98fhnodf91jrJtICsEo3yAjl1qT3Ggl6y3
/7W6FZjA0nShnNYSZyUSOzC0GSglxSdpOr6K12huND/shQABJndF1YlmacM=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org