Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/FfQ4cTFfAOnjhYw96c8DaeGjiZA.roa
File: FfQ4cTFfAOnjhYw96c8DaeGjiZA.roa (raw, json)
Hash identifier: X1Be3Z2UhNzPKysDK23z1/nGGbUlRX4gec8fQyggl+o=
Subject key identifier: 15:F4:38:71:31:5F:00:E9:E3:85:8C:3D:E9:CF:03:69:E1:A3:89:90
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0CAE
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/FfQ4cTFfAOnjhYw96c8DaeGjiZA.roa
Signing time: Fri 01 Sep 2023 09:59:31 +0000
ROA not before: Fri 01 Sep 2023 09:59:31 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 1659
IP address blocks: 140.110.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3246 (0xcae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Sep 1 09:59:31 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=15F43871315F00E9E3858C3DE9CF0369E1A38990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ff:06:41:c6:aa:a2:3d:c7:a8:3f:44:c0:80:
bf:9f:ad:b7:f9:a2:e2:fd:59:c0:ff:b9:3f:ab:2d:
28:d2:95:0a:d2:44:e6:b4:31:9f:c4:f8:18:8c:32:
8c:23:c9:ed:eb:9e:a5:81:14:f1:ce:f3:de:4e:19:
8a:8f:8a:01:47:4e:10:62:90:23:b8:87:ad:4f:6e:
a2:2a:11:e5:85:41:12:37:a9:64:cc:fd:fb:63:5d:
b6:12:1d:d7:d9:67:f5:92:44:59:c7:8f:45:d8:ef:
de:36:b6:cf:05:c5:24:7d:95:c5:30:4b:f6:78:ec:
26:5d:96:e7:89:88:07:b6:76:58:fb:99:a2:a3:e4:
b2:df:b4:1a:34:5b:a9:30:62:ff:11:10:49:36:23:
12:03:59:b0:0c:ca:d2:80:3b:b7:9f:7c:e8:f3:49:
4e:88:29:f7:9b:c9:be:c3:d0:76:ca:6f:84:ba:4c:
45:58:30:f2:54:0e:46:e2:d7:98:c2:8d:b9:27:f0:
44:55:6c:7e:ab:08:10:45:0d:f9:48:99:4f:2d:cc:
fc:d5:52:a1:12:8a:f5:76:83:79:ad:eb:37:5a:16:
c4:8d:b8:4a:29:da:6b:a2:0a:44:80:61:e9:78:f8:
07:95:0a:2c:e3:25:bd:be:75:c9:5d:86:71:d7:43:
7f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F4:38:71:31:5F:00:E9:E3:85:8C:3D:E9:CF:03:69:E1:A3:89:90
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/FfQ4cTFfAOnjhYw96c8DaeGjiZA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.110.0.0/15
Signature Algorithm: sha256WithRSAEncryption
13:21:b5:c7:f0:45:07:00:34:46:5c:82:fa:22:8c:8c:56:c7:
cd:8a:99:37:ff:2c:ca:ba:ee:a0:78:ec:9a:cb:26:23:82:59:
1f:70:5d:4c:5b:48:b4:ee:99:fe:e4:9e:7e:4d:b4:f8:7a:7b:
fb:c0:0a:3d:b6:0a:42:8d:7c:d8:da:11:60:87:0d:82:a1:b7:
01:ba:c1:24:38:23:c1:4a:b9:de:2e:01:af:7a:23:44:3b:db:
3e:6c:a2:c0:d0:aa:8f:dd:59:11:a3:7e:da:01:7d:71:97:d1:
a5:e6:28:60:ee:ef:b0:8e:ed:0a:84:0c:b5:05:8c:7f:cd:e3:
59:37:01:de:68:03:20:60:62:d4:99:a4:b4:81:9d:2a:60:38:
f1:b7:64:fd:ce:81:2a:4a:b1:bf:fd:20:20:8c:13:0c:6d:b9:
ea:32:7c:dd:1e:56:86:7b:a9:aa:e0:22:81:b7:da:71:ef:e3:
1b:30:61:2e:b7:e8:c3:1d:b8:8f:f4:86:43:f2:22:15:f9:0e:
c1:da:0a:13:82:07:f9:41:cd:47:d3:fa:84:ef:41:35:0b:e0:
fa:28:ba:f1:c9:f6:09:6a:74:28:e9:69:09:52:78:a5:0d:bf:
1b:cd:20:b1:b8:ba:3e:31:05:67:5f:4a:80:b4:c0:17:00:9c:
36:ff:49:56
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICDK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3
QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yMzA5MDEw
OTU5MzFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDE1RjQzODcxMzE1RjAw
RTlFMzg1OEMzREU5Q0YwMzY5RTFBMzg5OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDB/wZBxqqiPceoP0TAgL+frbf5ouL9WcD/uT+rLSjSlQrSROa0
MZ/E+BiMMowjye3rnqWBFPHO895OGYqPigFHThBikCO4h61PbqIqEeWFQRI3qWTM
/ftjXbYSHdfZZ/WSRFnHj0XY7942ts8FxSR9lcUwS/Z47CZdlueJiAe2dlj7maKj
5LLftBo0W6kwYv8REEk2IxIDWbAMytKAO7effOjzSU6IKfebyb7D0HbKb4S6TEVY
MPJUDkbi15jCjbkn8ERVbH6rCBBFDflImU8tzPzVUqESivV2g3mt6zdaFsSNuEop
2muiCkSAYel4+AeVCizjJb2+dcldhnHXQ38pAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUFfQ4cTFfAOnjhYw96c8DaeGjiZAwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+
tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9GZlE0Y1RGZkFPbmpoWXc5NmM4
RGFlR2ppWkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBjG4w
DQYJKoZIhvcNAQELBQADggEBABMhtcfwRQcANEZcgvoijIxWx82KmTf/LMq67qB4
7JrLJiOCWR9wXUxbSLTumf7knn5NtPh6e/vACj22CkKNfNjaEWCHDYKhtwG6wSQ4
I8FKud4uAa96I0Q72z5sosDQqo/dWRGjftoBfXGX0aXmKGDu77CO7QqEDLUFjH/N
41k3Ad5oAyBgYtSZpLSBnSpgOPG3ZP3OgSpKsb/9ICCMEwxtueoyfN0eVoZ7qarg
IoG32nHv4xswYS636MMduI/0hkPyIhX5DsHaChOCB/lBzUfT+oTvQTUL4PoouvHJ
9glqdCjpaQlSeKUNvxvNILG4uj4xBWdfSoC0wBcAnDb/SVY=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org