Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/PG9t06q-9uWkIRf4Q-hVm5AZN90.roa
File: PG9t06q-9uWkIRf4Q-hVm5AZN90.roa (raw, json)
Hash identifier: bGD+amibBgX8UeGcmITT7NOv8ry0wGqmSCCHkyghw4U=
Subject key identifier: 3C:6F:6D:D3:AA:BE:F6:E5:A4:21:17:F8:43:E8:55:9B:90:19:37:DD
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0D16
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/PG9t06q-9uWkIRf4Q-hVm5AZN90.roa
Signing time: Fri 01 Sep 2023 09:59:35 +0000
ROA not before: Fri 01 Sep 2023 09:59:35 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131150
IP address blocks: 163.32.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3350 (0xd16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 1 09:59:35 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3C6F6DD3AABEF6E5A42117F843E8559B901937DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:6e:5a:32:cc:22:4d:ef:68:03:e1:66:c8:
10:d7:b5:35:81:4f:29:0a:d3:af:8c:a9:83:e4:47:
c7:98:07:23:d9:96:8d:33:6b:0d:25:eb:c0:b9:84:
05:70:8a:23:94:45:0b:5b:44:83:a5:c3:8b:6a:3a:
5c:11:7b:61:c8:a3:9c:54:f9:af:ca:38:75:85:c5:
a7:22:8e:0a:87:26:39:12:1c:ab:29:04:a2:be:60:
67:a1:66:45:08:d6:15:d6:53:ab:9b:dd:6a:8b:84:
30:b5:32:44:25:40:0b:23:74:55:20:2f:bd:b6:0f:
11:8b:51:52:cf:66:65:72:14:25:f4:c1:3f:31:15:
e9:3c:87:2b:9e:8e:a4:d2:54:29:ad:66:9e:08:fd:
fe:32:07:25:b6:d8:86:6e:3b:e3:14:41:94:be:56:
07:c4:22:6d:9e:9b:91:fc:80:db:4c:42:20:03:e9:
4f:be:7f:75:69:ff:b6:97:01:70:46:47:ff:15:cc:
e1:ac:03:64:75:30:ca:f4:17:5a:bb:fc:2e:12:71:
12:ee:db:00:a9:89:51:81:f5:70:39:50:17:37:8d:
93:0e:6f:61:cf:42:c4:9a:61:93:76:c1:6a:58:e0:
e9:24:fd:67:ad:51:51:95:98:b1:11:88:8e:82:8d:
d9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6F:6D:D3:AA:BE:F6:E5:A4:21:17:F8:43:E8:55:9B:90:19:37:DD
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/PG9t06q-9uWkIRf4Q-hVm5AZN90.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.32.136.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:f0:25:7e:56:f3:e2:0a:bc:1b:a9:9d:3d:c9:ba:c4:77:66:
4b:47:b9:07:78:b3:a3:7d:c4:76:9e:f8:a1:07:a5:c0:12:c4:
b8:27:b7:7e:53:df:05:7e:b3:72:7e:bd:52:d6:ea:a7:f7:26:
d2:8c:ba:c5:df:3b:b8:b4:79:d5:04:2b:c0:6b:ee:ee:c3:5f:
b0:38:69:74:91:b2:6c:cb:59:28:8c:16:60:cc:fb:39:c5:05:
ac:4d:f8:10:bc:dd:be:1d:62:4e:1b:13:76:3c:1b:28:05:83:
14:59:b5:62:da:43:31:33:49:6e:57:de:f4:11:50:61:5a:66:
50:a9:79:a2:d6:b7:2e:38:41:43:b5:5b:63:db:5e:f7:1c:44:
d5:b2:42:72:9a:2e:91:f1:1f:90:08:ad:08:5c:cf:7f:2b:9d:
79:0d:ca:c2:61:b1:f2:74:91:d8:3f:1e:bc:8e:f9:4e:fe:1d:
98:48:53:99:1c:a1:34:1c:99:38:b3:f1:f3:2b:d0:25:42:19:
29:03:c5:22:51:c8:e6:c0:f6:52:af:22:bc:e7:83:b3:b1:75:
cb:6a:55:21:b6:ac:bf:8d:8b:4d:f4:0c:68:35:1d:3b:ca:46:
46:0e:75:22:ce:cf:6b:d6:02:5a:7c:e6:65:93:61:ef:d9:ed:
00:ea:e7:9a
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDRYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yMzA5MDEw
OTU5MzVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDNDNkY2REQzQUFCRUY2
RTVBNDIxMTdGODQzRTg1NTlCOTAxOTM3REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsrG5aMswiTe9oA+FmyBDXtTWBTykK06+MqYPkR8eYByPZlo0z
aw0l68C5hAVwiiOURQtbRIOlw4tqOlwRe2HIo5xU+a/KOHWFxacijgqHJjkSHKsp
BKK+YGehZkUI1hXWU6ub3WqLhDC1MkQlQAsjdFUgL722DxGLUVLPZmVyFCX0wT8x
Fek8hyuejqTSVCmtZp4I/f4yByW22IZuO+MUQZS+VgfEIm2em5H8gNtMQiAD6U++
f3Vp/7aXAXBGR/8VzOGsA2R1MMr0F1q7/C4ScRLu2wCpiVGB9XA5UBc3jZMOb2HP
QsSaYZN2wWpY4Okk/WetUVGVmLERiI6CjdkzAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUPG9t06q+9uWkIRf4Q+hVm5AZN90wHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9QRzl0MDZxLTl1V2tJUmY0US1o
Vm01QVpOOTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoyCI
MA0GCSqGSIb3DQEBCwUAA4IBAQAa8CV+VvPiCrwbqZ09ybrEd2ZLR7kHeLOjfcR2
nvihB6XAEsS4J7d+U98FfrNyfr1S1uqn9ybSjLrF3zu4tHnVBCvAa+7uw1+wOGl0
kbJsy1kojBZgzPs5xQWsTfgQvN2+HWJOGxN2PBsoBYMUWbVi2kMxM0luV970EVBh
WmZQqXmi1rcuOEFDtVtj2173HETVskJymi6R8R+QCK0IXM9/K515DcrCYbHydJHY
Px68jvlO/h2YSFOZHKE0HJk4s/HzK9AlQhkpA8UiUcjmwPZSryK854OzsXXLalUh
tqy/jYtN9AxoNR07ykZGDnUizs9r1gJafOZlk2Hv2e0A6uea
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org