Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/W-2htBHJvPSiMeOhBw33gT50oak.roa
File: W-2htBHJvPSiMeOhBw33gT50oak.roa (raw, json)
Hash identifier: hO7zl2e93da/jBNfWlkYIyalW6pRFXgBolR7JdmrQks=
Subject key identifier: 5B:ED:A1:B4:11:C9:BC:F4:A2:31:E3:A1:07:0D:F7:81:3E:74:A1:A9
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0D0E
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/W-2htBHJvPSiMeOhBw33gT50oak.roa
Signing time: Fri 01 Sep 2023 09:59:31 +0000
ROA not before: Fri 01 Sep 2023 09:59:31 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 1659
IP address blocks: 210.243.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3342 (0xd0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 1 09:59:31 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5BEDA1B411C9BCF4A231E3A1070DF7813E74A1A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:87:ef:76:8c:1c:c4:aa:ee:7a:03:7b:0e:
ed:e9:68:d2:98:a1:fd:a1:37:42:a8:26:37:c4:93:
f3:12:12:10:d5:99:22:bb:1e:23:6c:75:87:68:c3:
4b:8d:53:da:19:92:02:92:f8:3c:c0:aa:d3:f7:29:
3c:02:57:b5:ff:bb:9e:7e:4b:3d:26:bd:0f:5d:d6:
19:63:df:1a:e5:de:24:19:64:43:97:c2:5b:fa:ef:
48:a0:a0:bc:85:1a:68:1b:50:d0:da:4a:87:24:ed:
9e:8b:67:85:1b:44:df:99:f3:a3:4a:55:52:b0:36:
84:28:73:c4:9f:a5:a6:c2:3d:4f:c7:ff:31:3d:17:
62:c5:b6:73:eb:15:a9:de:ae:2c:f9:47:d5:9d:1c:
dd:80:53:44:0a:da:e2:5d:b2:f3:9e:23:e1:3a:df:
f4:98:53:e4:ce:43:c9:0b:cb:70:9c:44:f9:d3:6f:
c4:ab:87:45:c8:64:4a:11:52:ad:28:20:b3:cf:9e:
31:0f:a8:e5:0b:8e:17:b7:7c:e9:a1:73:a2:2a:57:
a7:33:1d:e2:6b:65:68:5e:a0:d5:2f:a4:6d:d7:b5:
83:0e:f2:f4:da:a7:a4:37:83:cc:a0:57:8e:a8:c8:
d6:ec:62:9a:3d:5b:2f:f7:06:83:9a:6e:ab:d8:02:
94:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:ED:A1:B4:11:C9:BC:F4:A2:31:E3:A1:07:0D:F7:81:3E:74:A1:A9
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/W-2htBHJvPSiMeOhBw33gT50oak.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.243.0.0/18
Signature Algorithm: sha256WithRSAEncryption
75:d1:78:4e:16:96:a6:86:43:32:ca:81:e7:13:9e:e6:0e:c3:
a2:63:6a:be:54:de:99:0b:f0:ce:ff:a4:e8:63:aa:ff:82:8c:
6a:bd:18:bf:25:2b:d6:77:c1:72:12:d5:35:d4:dc:43:ef:b8:
fd:5b:14:b4:02:98:56:ae:94:e6:eb:05:ea:6c:ec:fd:bd:b8:
2d:27:60:fc:5f:82:fc:e5:48:b6:43:9f:ca:58:4b:88:03:e7:
2d:51:3e:c1:a8:e0:7b:f9:86:28:7d:ab:e2:f6:e7:3a:40:ac:
dd:75:a4:93:78:6b:e7:f5:d8:a7:5c:7f:a7:41:ca:e9:58:9d:
51:fa:35:cb:7c:d2:fe:07:be:76:5c:44:c8:e3:4a:dd:20:12:
86:40:20:0b:c0:14:d6:e8:c6:58:7c:c8:3e:17:00:0c:2a:e0:
f5:f3:55:91:33:ca:53:af:99:68:cd:13:ae:c3:46:10:f9:96:
84:0f:84:c1:97:98:9b:63:bf:75:f0:b1:cc:60:89:e9:0a:39:
06:6c:7b:b4:c6:d6:5f:31:0c:a7:9a:12:50:57:c6:75:3d:af:
96:0b:0d:7d:82:6d:1c:f7:21:f8:27:75:6b:aa:3c:13:2f:f0:
a2:72:ca:e2:38:15:74:23:ec:74:07:02:1f:65:6a:17:69:cd:
ea:fc:ef:d4
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDQ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yMzA5MDEw
OTU5MzFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDVCRURBMUI0MTFDOUJD
RjRBMjMxRTNBMTA3MERGNzgxM0U3NEExQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnJ4fvdowcxKruegN7Du3paNKYof2hN0KoJjfEk/MSEhDVmSK7
HiNsdYdow0uNU9oZkgKS+DzAqtP3KTwCV7X/u55+Sz0mvQ9d1hlj3xrl3iQZZEOX
wlv670igoLyFGmgbUNDaSock7Z6LZ4UbRN+Z86NKVVKwNoQoc8SfpabCPU/H/zE9
F2LFtnPrFaneriz5R9WdHN2AU0QK2uJdsvOeI+E63/SYU+TOQ8kLy3CcRPnTb8Sr
h0XIZEoRUq0oILPPnjEPqOULjhe3fOmhc6IqV6czHeJrZWheoNUvpG3XtYMO8vTa
p6Q3g8ygV46oyNbsYpo9Wy/3BoOabqvYApSTAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUW+2htBHJvPSiMeOhBw33gT50oakwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9XLTJodEJISnZQU2lNZU9oQncz
M2dUNTBvYWsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0vMA
MA0GCSqGSIb3DQEBCwUAA4IBAQB10XhOFpamhkMyyoHnE57mDsOiY2q+VN6ZC/DO
/6ToY6r/goxqvRi/JSvWd8FyEtU11NxD77j9WxS0AphWrpTm6wXqbOz9vbgtJ2D8
X4L85Ui2Q5/KWEuIA+ctUT7BqOB7+YYofavi9uc6QKzddaSTeGvn9dinXH+nQcrp
WJ1R+jXLfNL+B752XETI40rdIBKGQCALwBTW6MZYfMg+FwAMKuD181WRM8pTr5lo
zROuw0YQ+ZaED4TBl5ibY7918LHMYInpCjkGbHu0xtZfMQynmhJQV8Z1Pa+WCw19
gm0c9yH4J3VrqjwTL/CicsriOBV0I+x0BwIfZWoXac3q/O/U
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org