Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/v_LerracFjqR5rJbr_eUhUiGM2Q.roa
File: v_LerracFjqR5rJbr_eUhUiGM2Q.roa (raw, json)
Hash identifier: j9YNB1OgznYmjIyVIFblb+uONOh4kcBTChv+lpAMnPA=
Subject key identifier: BF:F2:DE:AE:B6:9C:16:3A:91:E6:B2:5B:AF:F7:94:85:48:86:33:64
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0D12
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/v_LerracFjqR5rJbr_eUhUiGM2Q.roa
Signing time: Fri 01 Sep 2023 09:59:33 +0000
ROA not before: Fri 01 Sep 2023 09:59:33 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 1659
IP address blocks: 210.59.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3346 (0xd12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 1 09:59:33 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=BFF2DEAEB69C163A91E6B25BAFF7948548863364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:9b:8f:35:4b:2c:64:16:39:02:04:ca:64:
77:9c:55:1d:5b:b3:5f:6a:ef:fb:b8:9e:5a:b4:02:
84:8b:cb:61:6e:2e:23:ac:38:09:2f:2f:7c:38:a1:
85:1a:5d:74:dd:0c:a7:2e:1c:37:cf:17:82:68:ee:
4d:e0:5a:f6:fa:7b:26:9e:8e:78:1d:d0:06:9a:af:
c3:c4:5a:c4:08:78:ac:79:fe:f9:71:9c:e6:22:88:
4f:e1:5a:18:25:22:9a:5f:25:5b:a4:21:42:0a:be:
7d:9e:40:9a:53:f1:27:e0:f3:e2:bd:ea:cd:3a:c9:
f3:62:58:6d:1a:23:fc:eb:38:00:d4:4a:4c:06:3a:
ca:09:69:94:8c:39:90:79:1d:dc:d7:d6:a0:08:d1:
6c:3c:22:a4:59:7e:45:80:f7:25:b9:30:c6:4c:18:
50:cb:28:6f:26:a4:fb:73:b8:e2:5b:37:f1:b4:83:
27:1b:4f:cb:e1:ac:31:85:71:b6:75:90:f9:e4:71:
9d:4b:4e:eb:57:c8:62:c7:a1:71:f9:3a:10:56:14:
1b:53:51:59:49:86:65:43:16:a2:ae:89:1b:50:6a:
9f:c5:45:cd:86:09:47:11:c2:ab:1a:e9:49:ed:62:
72:ba:98:96:17:65:b1:a0:9e:bf:6f:54:df:fc:7f:
0c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F2:DE:AE:B6:9C:16:3A:91:E6:B2:5B:AF:F7:94:85:48:86:33:64
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/v_LerracFjqR5rJbr_eUhUiGM2Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.59.0.0/17
Signature Algorithm: sha256WithRSAEncryption
30:a0:38:77:68:40:91:cb:cc:46:17:0f:db:8e:b0:c9:fa:d2:
57:cf:12:86:f6:62:04:7b:9a:da:7b:e1:e5:cf:4a:10:87:1b:
34:0c:2c:8b:59:43:e2:a2:64:75:c7:2b:40:0f:a0:e5:6c:18:
0a:eb:75:24:a2:8f:a8:7e:17:67:db:26:e0:bc:34:96:9c:d2:
8e:79:dc:f5:88:97:d2:d6:8a:9d:b5:da:25:5d:f5:80:58:22:
2b:eb:ad:f2:1d:41:03:5d:44:43:f7:48:b8:22:03:2e:bf:b4:
32:61:c1:4a:bd:ce:8b:47:54:9d:87:52:4b:33:ae:18:3e:c1:
20:91:b4:82:b2:31:81:72:ed:bf:ee:2e:74:14:d5:65:2d:fb:
b9:95:e4:a1:2d:7c:ef:78:55:8a:f3:49:fb:de:fd:38:5f:3f:
6c:00:88:ef:7d:ed:71:d0:df:26:c9:f1:7b:91:c7:34:07:d2:
4b:f6:b8:a1:ad:78:75:09:bc:03:5f:d8:3c:cd:af:5e:9d:cd:
14:de:30:ae:a1:f8:42:18:a5:85:6f:18:ef:74:fe:78:e4:37:
c8:aa:e0:58:3f:a9:4d:86:f5:85:0a:7f:f9:af:63:d9:af:f6:
50:2f:c8:50:1e:81:97:56:91:5c:c4:62:84:ab:39:dd:e2:4a:
4a:dc:e1:ea
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDRIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yMzA5MDEw
OTU5MzNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEJGRjJERUFFQjY5QzE2
M0E5MUU2QjI1QkFGRjc5NDg1NDg4NjMzNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmfpuPNUssZBY5AgTKZHecVR1bs19q7/u4nlq0AoSLy2FuLiOs
OAkvL3w4oYUaXXTdDKcuHDfPF4Jo7k3gWvb6eyaejngd0Aaar8PEWsQIeKx5/vlx
nOYiiE/hWhglIppfJVukIUIKvn2eQJpT8Sfg8+K96s06yfNiWG0aI/zrOADUSkwG
OsoJaZSMOZB5HdzX1qAI0Ww8IqRZfkWA9yW5MMZMGFDLKG8mpPtzuOJbN/G0gycb
T8vhrDGFcbZ1kPnkcZ1LTutXyGLHoXH5OhBWFBtTUVlJhmVDFqKuiRtQap/FRc2G
CUcRwqsa6UntYnK6mJYXZbGgnr9vVN/8fwzTAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUv/LerracFjqR5rJbr/eUhUiGM2QwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC92X0xlcnJhY0ZqcVI1ckpicl9l
VWhVaUdNMlEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0jsA
MA0GCSqGSIb3DQEBCwUAA4IBAQAwoDh3aECRy8xGFw/bjrDJ+tJXzxKG9mIEe5ra
e+Hlz0oQhxs0DCyLWUPiomR1xytAD6DlbBgK63Ukoo+ofhdn2ybgvDSWnNKOedz1
iJfS1oqdtdolXfWAWCIr663yHUEDXURD90i4IgMuv7QyYcFKvc6LR1Sdh1JLM64Y
PsEgkbSCsjGBcu2/7i50FNVlLfu5leShLXzveFWK80n73v04Xz9sAIjvfe1x0N8m
yfF7kcc0B9JL9rihrXh1CbwDX9g8za9enc0U3jCuofhCGKWFbxjvdP545DfIquBY
P6lNhvWFCn/5r2PZr/ZQL8hQHoGXVpFcxGKEqznd4kpK3OHq
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org