Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/AZED6SR-ECu1Ro6GJ1a1p5qm5VA.roa
File: AZED6SR-ECu1Ro6GJ1a1p5qm5VA.roa (raw, json)
Hash identifier: qIm3HLfPNt9TpER764tICWJ7e2ui3D92cd7NoyjXW3Q=
Subject key identifier: 01:91:03:E9:24:7E:10:2B:B5:46:8E:86:27:56:B5:A7:9A:A6:E5:50
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0CAC
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/AZED6SR-ECu1Ro6GJ1a1p5qm5VA.roa
Signing time: Fri 01 Sep 2023 09:59:30 +0000
ROA not before: Fri 01 Sep 2023 09:59:30 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 1659
IP address blocks: 192.83.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3244 (0xcac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Sep 1 09:59:30 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=019103E9247E102BB5468E862756B5A79AA6E550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c4:51:6e:cc:c5:7d:56:48:21:52:1e:05:84:
79:1b:d9:b5:96:87:5c:ca:e1:55:b6:b1:a0:f4:d1:
3b:98:f9:a1:76:71:b7:63:b0:05:d4:74:17:34:3c:
1a:eb:09:fa:c1:a6:a8:9d:02:a7:57:48:61:66:9f:
8d:66:b3:c7:ed:c4:6b:7b:0f:07:b3:71:04:80:4d:
d3:05:a3:c5:e7:8e:39:75:d2:db:fd:49:36:c4:a5:
ff:af:06:31:9b:df:6c:0f:03:87:43:a4:a5:a4:c4:
a1:8f:cd:45:32:b6:c0:45:19:da:e8:c3:94:56:d7:
7f:d1:d7:89:13:06:14:9f:d1:2f:16:15:d4:dd:a9:
b0:12:a9:ea:3b:b9:4f:c1:69:5f:fa:0b:47:f1:f3:
88:4c:61:0c:45:ad:20:9e:8b:81:b2:5c:21:3a:a3:
6d:d4:ab:3d:c1:03:ba:c4:c9:dc:d6:73:84:ac:d7:
66:7e:7d:8a:85:08:d4:bf:17:48:b0:82:25:84:08:
35:fe:a9:4b:41:0b:44:ac:1f:ea:d3:12:c4:de:f3:
fb:a4:ab:cf:b3:ec:72:90:16:79:73:0f:2c:7f:ad:
65:6d:18:7c:95:82:85:be:30:0b:35:bb:7d:74:a3:
eb:ee:2c:78:93:9e:7b:a5:68:03:67:63:e4:ce:e1:
42:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:91:03:E9:24:7E:10:2B:B5:46:8E:86:27:56:B5:A7:9A:A6:E5:50
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/AZED6SR-ECu1Ro6GJ1a1p5qm5VA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.83.166.0/23
Signature Algorithm: sha256WithRSAEncryption
69:f0:44:2c:2e:c2:75:ba:08:2c:84:20:00:a3:49:21:ed:c9:
2a:0b:3c:19:9b:8a:a2:cf:9a:3e:2c:d8:2a:04:fd:84:9e:3a:
24:b3:21:6d:51:4b:2b:d7:8d:5e:fa:f4:0a:67:91:b6:ab:59:
88:99:a5:75:05:16:01:d4:bf:de:39:46:76:9c:91:08:50:1f:
72:0e:ac:d3:3c:27:12:6d:43:a3:2d:18:8f:34:8b:5e:0c:eb:
78:f3:fd:b5:ed:83:a0:41:c3:1e:eb:1b:3b:f7:20:4d:05:a7:
e3:48:18:7b:0f:a2:91:fa:51:3d:48:1a:e7:1a:a2:33:aa:c3:
25:e2:6c:11:50:05:de:0b:06:6a:d6:3a:cb:b9:05:5e:1b:1b:
3b:d2:96:ac:44:74:08:03:6f:75:72:d5:00:44:52:3f:09:fe:
88:54:98:ea:52:73:16:07:86:9c:f5:fa:38:2f:6c:75:04:c2:
cb:c8:09:a6:79:4e:1d:6a:ed:e3:c4:1a:3d:b9:67:60:a0:87:
19:d7:28:fe:3e:9e:90:3e:59:c5:9d:dd:36:7c:ad:01:7e:ab:
5f:97:93:cf:54:12:d8:7d:03:88:c2:ac:da:27:23:31:f8:be:
45:b1:e6:c1:18:0d:36:45:8e:5d:03:d4:2c:37:8a:e9:f5:f1:
e6:db:b9:da
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDKwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3
QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yMzA5MDEw
OTU5MzBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAxOTEwM0U5MjQ3RTEw
MkJCNTQ2OEU4NjI3NTZCNUE3OUFBNkU1NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPxFFuzMV9VkghUh4FhHkb2bWWh1zK4VW2saD00TuY+aF2cbdj
sAXUdBc0PBrrCfrBpqidAqdXSGFmn41ms8ftxGt7DwezcQSATdMFo8Xnjjl10tv9
STbEpf+vBjGb32wPA4dDpKWkxKGPzUUytsBFGdrow5RW13/R14kTBhSf0S8WFdTd
qbASqeo7uU/BaV/6C0fx84hMYQxFrSCei4GyXCE6o23Uqz3BA7rEydzWc4Ss12Z+
fYqFCNS/F0iwgiWECDX+qUtBC0SsH+rTEsTe8/ukq8+z7HKQFnlzDyx/rWVtGHyV
goW+MAs1u310o+vuLHiTnnulaANnY+TO4UKnAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUAZED6SR+ECu1Ro6GJ1a1p5qm5VAwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+
tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9BWkVENlNSLUVDdTFSbzZHSjFh
MXA1cW01VkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwFOm
MA0GCSqGSIb3DQEBCwUAA4IBAQBp8EQsLsJ1uggshCAAo0kh7ckqCzwZm4qiz5o+
LNgqBP2EnjoksyFtUUsr141e+vQKZ5G2q1mImaV1BRYB1L/eOUZ2nJEIUB9yDqzT
PCcSbUOjLRiPNIteDOt48/217YOgQcMe6xs79yBNBafjSBh7D6KR+lE9SBrnGqIz
qsMl4mwRUAXeCwZq1jrLuQVeGxs70pasRHQIA291ctUARFI/Cf6IVJjqUnMWB4ac
9fo4L2x1BMLLyAmmeU4dau3jxBo9uWdgoIcZ1yj+Pp6QPlnFnd02fK0Bfqtfl5PP
VBLYfQOIwqzaJyMx+L5FsebBGA02RY5dA9QsN4rp9fHm27na
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org