Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/CZyEwQzW5noLJGOzFuy66c9qDWw.roa
File: CZyEwQzW5noLJGOzFuy66c9qDWw.roa (raw, json)
Hash identifier: 1x/j2hFbePx+sBzOXIx/c3GKSRZr3jJG08zS9Ta19eo=
Subject key identifier: 09:9C:84:C1:0C:D6:E6:7A:0B:24:63:B3:16:EC:BA:E9:CF:6A:0D:6C
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0CF6
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/CZyEwQzW5noLJGOzFuy66c9qDWw.roa
Signing time: Fri 01 Sep 2023 09:59:17 +0000
ROA not before: Fri 01 Sep 2023 09:59:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9916
IP address blocks: 120.126.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3318 (0xcf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 1 09:59:17 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=099C84C10CD6E67A0B2463B316ECBAE9CF6A0D6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:76:12:9b:a3:e8:a8:07:88:79:3c:01:25:df:
0e:11:9a:aa:68:eb:c0:b3:54:54:93:ee:02:00:b1:
86:69:47:c2:94:44:cc:0d:af:d1:7d:60:c1:e1:52:
86:4e:c1:9f:62:93:3e:70:1c:a0:82:52:7a:6e:6d:
17:b6:6a:1e:42:21:1b:e7:9d:85:f7:d4:b7:26:60:
5b:66:7a:3f:2d:8c:df:71:f1:e4:d6:ec:06:f3:a9:
ac:cc:65:14:b5:94:c1:0f:32:91:a5:fa:5c:d6:8d:
e8:ce:59:46:28:f9:0b:3c:9c:6b:fd:43:2f:68:bb:
1f:75:38:10:6b:39:33:5e:2d:87:f6:77:66:3c:2c:
da:2b:4d:af:0b:17:94:5c:43:0f:f5:4f:0c:6d:5e:
a3:87:59:ba:c9:22:bf:00:e8:11:90:03:cd:66:09:
77:9e:d4:5a:ee:00:f9:e3:2b:00:47:e4:b5:a9:e6:
a6:a6:73:6a:74:6f:8f:c2:61:fc:29:23:b6:81:c0:
3f:60:8f:d0:16:00:64:7f:ff:40:ba:95:1f:9e:fb:
4a:55:6b:64:94:38:2a:88:15:d4:74:06:df:ef:51:
04:15:f0:57:00:9a:47:2a:2d:e1:cb:5e:c4:c8:76:
7d:19:fd:df:d8:bc:f9:a2:06:49:a3:bd:d9:76:0a:
05:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9C:84:C1:0C:D6:E6:7A:0B:24:63:B3:16:EC:BA:E9:CF:6A:0D:6C
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/CZyEwQzW5noLJGOzFuy66c9qDWw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.126.96.0/20
Signature Algorithm: sha256WithRSAEncryption
39:cf:c0:c6:5e:25:60:5b:8a:ec:a8:1e:f7:de:1d:ee:15:27:
9a:72:ed:ed:9a:db:fa:c1:85:44:de:63:63:62:1c:f9:92:9e:
11:1e:29:93:77:72:2d:1e:00:76:92:c3:fd:3e:b8:df:03:87:
25:ce:09:4d:c1:5e:5c:6d:f7:65:ef:bc:dc:55:28:2c:54:29:
35:dd:c3:1e:18:e9:65:12:d9:a6:1c:b1:18:12:e9:dc:56:2b:
08:46:f5:e7:bf:95:4a:68:29:a6:39:36:90:dc:44:19:ba:f1:
20:59:4f:27:81:5b:8d:29:03:4a:e1:55:58:bc:94:5b:3e:9d:
2f:c6:6f:1f:58:43:f2:78:48:12:83:28:b3:0d:6f:86:ff:92:
69:a0:f9:19:59:ba:e9:40:53:e7:f4:cb:e8:e8:47:60:03:c8:
55:c9:9f:53:04:30:c0:89:2f:1b:7c:4a:a6:e3:6c:cc:8d:b6:
00:8a:2f:88:f5:05:65:d5:8a:af:00:98:2c:74:1c:aa:27:87:
fa:fb:2a:41:63:e7:d9:b6:cf:0c:24:da:7e:c5:35:85:25:d1:
29:9e:21:e4:41:37:59:c5:4a:20:31:6e:ee:75:b3:28:f2:7f:
42:f7:1f:d0:f1:94:ce:b5:f4:6e:a5:1b:b5:8b:52:86:d8:1a:
a4:40:de:22
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDPYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yMzA5MDEw
OTU5MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA5OUM4NEMxMENENkU2
N0EwQjI0NjNCMzE2RUNCQUU5Q0Y2QTBENkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqdhKbo+ioB4h5PAEl3w4Rmqpo68CzVFST7gIAsYZpR8KURMwN
r9F9YMHhUoZOwZ9ikz5wHKCCUnpubRe2ah5CIRvnnYX31LcmYFtmej8tjN9x8eTW
7AbzqazMZRS1lMEPMpGl+lzWjejOWUYo+Qs8nGv9Qy9oux91OBBrOTNeLYf2d2Y8
LNorTa8LF5RcQw/1TwxtXqOHWbrJIr8A6BGQA81mCXee1FruAPnjKwBH5LWp5qam
c2p0b4/CYfwpI7aBwD9gj9AWAGR//0C6lR+e+0pVa2SUOCqIFdR0Bt/vUQQV8FcA
mkcqLeHLXsTIdn0Z/d/YvPmiBkmjvdl2CgVVAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUCZyEwQzW5noLJGOzFuy66c9qDWwwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9DWnlFd1F6VzVub0xKR096RnV5
NjZjOXFEV3cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEeH5g
MA0GCSqGSIb3DQEBCwUAA4IBAQA5z8DGXiVgW4rsqB733h3uFSeacu3tmtv6wYVE
3mNjYhz5kp4RHimTd3ItHgB2ksP9PrjfA4clzglNwV5cbfdl77zcVSgsVCk13cMe
GOllEtmmHLEYEuncVisIRvXnv5VKaCmmOTaQ3EQZuvEgWU8ngVuNKQNK4VVYvJRb
Pp0vxm8fWEPyeEgSgyizDW+G/5JpoPkZWbrpQFPn9Mvo6EdgA8hVyZ9TBDDAiS8b
fEqm42zMjbYAii+I9QVl1YqvAJgsdByqJ4f6+ypBY+fZts8MJNp+xTWFJdEpniHk
QTdZxUogMW7udbMo8n9C9x/Q8ZTOtfRupRu1i1KG2BqkQN4i
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org