Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/zErMJPW50p9QuEhnxMwmt6oCSd0.roa
File: zErMJPW50p9QuEhnxMwmt6oCSd0.roa (raw, json)
Hash identifier: HXUonT2HKeqsQkgxVElZjPILw09jeryI7GVMLknZIO8=
Subject key identifier: CC:4A:CC:24:F5:B9:D2:9F:50:B8:48:67:C4:CC:26:B7:AA:02:49:DD
Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial: 0BA6
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/zErMJPW50p9QuEhnxMwmt6oCSd0.roa
Signing time: Fri 01 Sep 2023 09:59:01 +0000
ROA not before: Fri 01 Sep 2023 09:59:01 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24158
IP address blocks: 2402:7500::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2982 (0xba6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Validity
Not Before: Sep 1 09:59:01 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=CC4ACC24F5B9D29F50B84867C4CC26B7AA0249DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:f9:ef:5d:50:81:d3:e5:5a:29:81:53:c5:
51:df:7c:c5:8f:e5:ff:83:df:c9:8c:e8:25:b3:35:
71:ca:2d:1b:ee:dd:1b:61:72:44:4a:0a:62:fd:7b:
bf:eb:6b:06:d4:a2:ea:17:a6:fd:19:8e:f1:be:7d:
10:ef:bc:d5:13:ce:46:d0:7b:91:50:02:c6:c2:5f:
cc:62:c5:86:4e:c7:65:5e:80:6b:56:47:96:5d:11:
4c:a5:bf:53:5a:cc:03:b5:3a:35:94:27:7d:4a:30:
69:af:13:73:8c:0e:75:8d:7b:c1:7a:a3:7a:26:de:
9c:e0:e1:2a:ad:cb:02:6c:15:49:67:6f:0d:f7:d5:
77:bc:95:d8:d1:b7:76:93:23:ad:a6:a2:42:ed:ea:
4e:8a:f2:98:72:9e:46:1c:27:4e:e2:27:9b:4e:b1:
a1:75:2f:71:06:60:8c:1f:f3:f6:c2:b1:5a:32:c9:
09:40:d7:8f:5b:2e:b6:c2:aa:50:1a:22:36:be:51:
17:32:31:97:2c:20:4c:b6:f9:d9:2d:e4:4b:95:f4:
ba:9e:a6:f6:6f:60:ed:48:8d:68:e9:0f:54:5b:95:
1b:34:81:62:70:14:6d:95:d0:15:a0:8a:8d:a7:67:
24:80:2d:f6:a3:02:7b:34:45:30:11:70:d5:58:21:
4d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4A:CC:24:F5:B9:D2:9F:50:B8:48:67:C4:CC:26:B7:AA:02:49:DD
X509v3 Authority Key Identifier:
keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/zErMJPW50p9QuEhnxMwmt6oCSd0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:7500::/32
Signature Algorithm: sha256WithRSAEncryption
cb:29:38:82:76:17:22:e7:8e:7f:03:1b:a9:c1:b7:95:30:88:
be:e1:dc:d8:1a:cb:df:a3:eb:94:5b:14:1d:22:6b:7f:7d:2f:
e2:1f:7a:48:39:8f:f1:b3:11:6a:a8:55:50:ec:f7:2f:e0:bd:
86:d8:61:31:57:3d:bc:7e:0f:b7:56:88:cd:25:dd:b3:28:5f:
c8:1e:b9:37:01:0d:3b:53:bf:83:f2:64:b2:d8:45:c3:51:ba:
45:3d:07:54:5e:17:63:94:c4:ce:5b:8a:83:91:5d:3e:8a:dc:
f6:41:e3:74:db:50:31:1a:d7:15:c9:aa:cc:d1:f9:d1:11:43:
52:3a:e0:df:af:85:db:92:8c:04:09:5f:80:c9:2d:2a:ab:a1:
bb:a4:02:6e:1c:37:79:38:c3:b0:b6:4c:a8:d9:83:44:42:56:
d8:bc:2d:37:df:a3:80:49:83:86:6e:d5:c6:a8:93:b8:22:cd:
42:a8:b0:65:ad:fc:d2:f7:be:16:99:db:f9:36:2b:e0:fe:51:
62:68:b9:d3:ab:ec:3e:76:39:b5:6a:81:35:e1:b0:37:9b:32:
05:bd:76:68:15:99:73:1d:5f:59:21:00:81:9e:27:8d:53:42:
b7:db:36:27:45:fc:c4:8b:92:5e:08:24:27:f0:91:af:22:0a:
e8:10:a1:76
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgICC6YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjJD
QTM5RDhEMTdCMTBEOTdENUE1MUUwRUEyRjlGQjFCQzQwQ0Q5MDAeFw0yMzA5MDEw
OTU5MDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKENDNEFDQzI0RjVCOUQy
OUY1MEI4NDg2N0M0Q0MyNkI3QUEwMjQ5REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkbPnvXVCB0+VaKYFTxVHffMWP5f+D38mM6CWzNXHKLRvu3Rth
ckRKCmL9e7/rawbUouoXpv0ZjvG+fRDvvNUTzkbQe5FQAsbCX8xixYZOx2VegGtW
R5ZdEUylv1NazAO1OjWUJ31KMGmvE3OMDnWNe8F6o3om3pzg4SqtywJsFUlnbw33
1Xe8ldjRt3aTI62mokLt6k6K8phynkYcJ07iJ5tOsaF1L3EGYIwf8/bCsVoyyQlA
149bLrbCqlAaIja+URcyMZcsIEy2+dkt5EuV9LqepvZvYO1IjWjpD1RblRs0gWJw
FG2V0BWgio2nZySALfajAns0RTARcNVYIU1xAgMBAAGjggH7MIIB9zAdBgNVHQ4E
FgQUzErMJPW50p9QuEhnxMwmt6oCSd0wHwYDVR0jBBgwFoAUsso52NF7ENl9WlHg
6i+fsbxAzZAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBgNVHR8EWzBZMFeg
VaBThlFyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FO
TU9CSUxFL3NzbzUyTkY3RU5sOVdsSGc2aS1mc2J4QXpaQS5jcmwwYAYIKwYBBQUH
AQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtp
L1RXTklDQ0Evc3NvNTJORjdFTmw5V2xIZzZpLWZzYnhBelpBLmNlcjAOBgNVHQ8B
Af8EBAMCB4AwgaIGCCsGAQUFBwELBIGVMIGSMF0GCCsGAQUFBzALhlFyc3luYzov
L3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJV0FOTU9CSUxFL3pFck1K
UFc1MHA5UXVFaG54TXdtdDZvQ1NkMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8v
cnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAP
MA0EAgACMAcDBQAkAnUAMA0GCSqGSIb3DQEBCwUAA4IBAQDLKTiCdhci545/Axup
wbeVMIi+4dzYGsvfo+uUWxQdImt/fS/iH3pIOY/xsxFqqFVQ7Pcv4L2G2GExVz28
fg+3VojNJd2zKF/IHrk3AQ07U7+D8mSy2EXDUbpFPQdUXhdjlMTOW4qDkV0+itz2
QeN021AxGtcVyarM0fnREUNSOuDfr4XbkowECV+AyS0qq6G7pAJuHDd5OMOwtkyo
2YNEQlbYvC0336OASYOGbtXGqJO4Is1CqLBlrfzS974Wmdv5Nivg/lFiaLnTq+w+
djm1aoE14bA3mzIFvXZoFZlzHV9ZIQCBnieNU0K32zYnRfzEi5JeCCQn8JGvIgro
EKF2
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org