Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/wCR1eYVu2XJj4neBWmZ4lbeEpR0.roa
File: wCR1eYVu2XJj4neBWmZ4lbeEpR0.roa (raw, json)
Hash identifier: IDRbMeWi/HpJIYDQbFTsTmivfH+RAY//nNlZzQqI8KQ=
Subject key identifier: C0:24:75:79:85:6E:D9:72:63:E2:77:81:5A:66:78:95:B7:84:A5:1D
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0D17
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/wCR1eYVu2XJj4neBWmZ4lbeEpR0.roa
Signing time: Fri 01 Sep 2023 09:59:35 +0000
ROA not before: Fri 01 Sep 2023 09:59:35 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 1659
IP address blocks: 210.240.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3351 (0xd17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 1 09:59:35 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C0247579856ED97263E277815A667895B784A51D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:98:71:c0:d7:eb:e2:ae:11:6f:17:3c:35:b1:
e2:c1:16:61:63:c1:82:e5:83:84:b3:b1:76:58:a7:
b2:39:35:f8:0a:07:ff:e2:65:f8:0d:5a:52:20:6d:
71:8e:da:f5:48:0e:b2:33:7b:c7:ff:c8:fd:fa:40:
7c:c1:7c:30:66:c9:5a:fd:8f:bb:bd:af:81:b0:55:
33:0f:f8:c9:51:fa:75:40:e6:09:59:d1:84:8d:a9:
ab:bc:79:2c:a6:1b:4e:7e:14:e3:24:33:74:ee:93:
e2:f1:b6:64:39:e8:cf:40:f7:03:22:2b:50:e6:b7:
83:50:9b:aa:be:06:48:66:ef:d2:5c:07:04:3f:8b:
80:87:a8:6b:8d:49:93:fa:8e:35:80:57:f5:88:99:
68:b3:05:39:d6:83:f2:15:c9:02:aa:17:89:58:44:
1a:a7:74:6d:f4:3e:a4:37:94:09:fd:d2:38:88:90:
6f:cf:fc:03:02:6b:9a:e8:4d:83:fd:68:07:ca:91:
e0:5e:6d:c9:14:fd:e4:77:38:98:5f:0e:b5:76:dd:
30:66:5f:9d:6c:a1:9b:af:ba:0c:26:51:16:03:d2:
57:2d:a2:ea:e2:25:66:ea:f8:86:3a:9c:4b:bb:f0:
3c:b1:07:74:36:f0:c4:b9:22:1f:3d:38:8e:8f:27:
c8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:24:75:79:85:6E:D9:72:63:E2:77:81:5A:66:78:95:B7:84:A5:1D
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/wCR1eYVu2XJj4neBWmZ4lbeEpR0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.240.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:6e:04:ec:b0:3c:ca:0f:6d:a2:50:db:e2:ce:9c:bd:7b:d0:
4e:2b:9d:c3:fb:0c:b8:38:29:57:20:7b:da:f7:6b:24:4c:e8:
51:68:b1:1f:7f:d4:ce:9d:ef:74:a5:13:43:34:9a:e1:fa:67:
8d:2e:1d:60:a2:1d:a5:20:95:b8:a5:90:ca:82:fe:eb:ea:73:
57:13:cb:a0:3b:2e:7f:9e:7c:47:27:74:21:1b:dc:a6:60:21:
6d:a2:35:e8:a6:b7:ca:09:04:6b:a6:46:e1:00:19:5e:f6:cd:
76:16:73:18:ba:bc:49:21:e2:d7:0c:83:9c:9a:84:71:36:13:
9a:2a:d8:2f:fc:59:23:fc:08:ce:ca:b5:50:c0:87:27:6f:8d:
70:da:c8:ef:8b:2f:0c:d8:e9:02:45:06:96:8c:53:87:b1:32:
da:09:2e:90:a5:9a:4c:1a:59:92:29:54:36:43:9a:3f:a8:17:
9f:34:81:98:c3:fd:66:66:70:94:90:1b:b1:1c:7b:31:75:d6:
32:55:5a:5c:41:1b:89:1b:2c:ab:f8:6d:a8:34:b6:68:0a:46:
eb:c5:c3:3f:8a:53:96:02:1a:86:b1:dc:bb:b9:14:33:65:39:
09:cb:cf:81:39:0f:05:8c:cc:00:8c:20:53:0d:3c:f7:2f:27:
f6:25:d5:dd
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICDRcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yMzA5MDEw
OTU5MzVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEMwMjQ3NTc5ODU2RUQ5
NzI2M0UyNzc4MTVBNjY3ODk1Qjc4NEE1MUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+mHHA1+virhFvFzw1seLBFmFjwYLlg4SzsXZYp7I5NfgKB//i
ZfgNWlIgbXGO2vVIDrIze8f/yP36QHzBfDBmyVr9j7u9r4GwVTMP+MlR+nVA5glZ
0YSNqau8eSymG05+FOMkM3Tuk+LxtmQ56M9A9wMiK1Dmt4NQm6q+Bkhm79JcBwQ/
i4CHqGuNSZP6jjWAV/WImWizBTnWg/IVyQKqF4lYRBqndG30PqQ3lAn90jiIkG/P
/AMCa5roTYP9aAfKkeBebckU/eR3OJhfDrV23TBmX51soZuvugwmURYD0lctouri
JWbq+IY6nEu78DyxB3Q28MS5Ih89OI6PJ8jRAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUwCR1eYVu2XJj4neBWmZ4lbeEpR0wHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC93Q1IxZVlWdTJYSmo0bmVCV21a
NGxiZUVwUjAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0vAw
DQYJKoZIhvcNAQELBQADggEBACBuBOywPMoPbaJQ2+LOnL170E4rncP7DLg4KVcg
e9r3ayRM6FFosR9/1M6d73SlE0M0muH6Z40uHWCiHaUglbilkMqC/uvqc1cTy6A7
Ln+efEcndCEb3KZgIW2iNeimt8oJBGumRuEAGV72zXYWcxi6vEkh4tcMg5yahHE2
E5oq2C/8WSP8CM7KtVDAhydvjXDayO+LLwzY6QJFBpaMU4exMtoJLpClmkwaWZIp
VDZDmj+oF580gZjD/WZmcJSQG7EcezF11jJVWlxBG4kbLKv4bag0tmgKRuvFwz+K
U5YCGoax3Lu5FDNlOQnLz4E5DwWMzACMIFMNPPcvJ/Yl1d0=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org