Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/vM-JQwSBrRKrEtJpJSViUpbrFzg.roa
File: vM-JQwSBrRKrEtJpJSViUpbrFzg.roa (raw, json)
Hash identifier: 6YHpY438n/28JsmtEYM/nlPYqPQ9NfIiX7IqruDvAXg=
Subject key identifier: BC:CF:89:43:04:81:AD:12:AB:12:D2:69:25:25:62:52:96:EB:17:38
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 0C6D
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/vM-JQwSBrRKrEtJpJSViUpbrFzg.roa
Signing time: Mon 17 Jun 2024 08:57:48 +0000
ROA not before: Mon 17 Jun 2024 08:57:48 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 61.58.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3181 (0xc6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Jun 17 08:57:48 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=BCCF89430481AD12AB12D2692525625296EB1738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:7e:92:03:c2:6a:9e:9a:cf:53:27:ed:29:
75:9a:2a:ac:f2:1d:81:3f:cd:60:77:bf:14:e4:41:
d5:d6:5a:48:47:1a:45:46:49:96:b1:ba:1a:32:61:
e6:88:23:c4:95:8d:6c:5f:c7:2a:65:e9:53:c6:5a:
dd:73:d0:2d:bb:bd:9a:5e:6b:5b:97:64:42:f1:73:
36:9e:78:bf:e3:db:d5:68:46:58:b6:92:4a:1b:59:
57:44:09:95:54:d4:2f:93:4c:c3:5c:65:a3:a5:5e:
99:e3:16:95:38:59:9c:9b:1d:b9:db:9c:a5:ff:95:
f0:3c:57:88:17:90:cd:f8:8e:2d:94:ab:13:49:35:
1c:c9:bf:ce:f1:9a:ed:b5:1b:27:2c:4c:ca:b0:43:
31:14:4d:8a:1a:8b:93:21:82:11:1c:6b:ca:b0:c8:
fc:be:df:47:ff:f9:e0:eb:e1:b2:74:7f:c4:93:97:
da:aa:1a:0b:3c:bf:a0:13:d5:de:53:5e:ba:21:af:
54:d4:25:9c:96:20:4c:07:4c:4b:e6:c1:76:fe:cc:
3d:ae:9f:76:8f:c8:79:ca:0f:e9:33:1f:80:6f:19:
9e:ff:da:ea:93:83:0b:42:02:06:7f:ac:71:87:6f:
32:b4:7b:95:dc:cc:78:b9:c8:89:e3:59:31:55:4b:
91:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CF:89:43:04:81:AD:12:AB:12:D2:69:25:25:62:52:96:EB:17:38
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/vM-JQwSBrRKrEtJpJSViUpbrFzg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.80.0/20
Signature Algorithm: sha256WithRSAEncryption
b9:80:e2:d6:c7:71:07:b2:38:45:37:a0:dc:33:a8:95:c6:11:
fb:22:db:ac:b3:c3:d2:30:f6:ab:34:13:48:02:ce:de:a8:43:
d0:e2:b8:8b:63:c3:55:84:44:bf:07:b6:d1:67:03:0d:ac:b6:
39:0c:5d:b6:a5:d8:ee:fe:69:09:5d:cf:76:b3:ee:37:11:36:
d0:8e:2d:45:89:4c:51:92:eb:d8:bc:03:9a:60:f9:03:9f:96:
8a:8b:b9:13:3d:e2:ff:06:40:a0:bd:6e:c3:18:55:23:c7:10:
67:7d:1c:ad:10:4f:13:53:21:7a:93:4b:41:f9:99:42:dc:63:
13:46:9c:ed:d1:e7:b2:11:9f:f7:4b:9a:ad:0c:f3:98:86:4e:
90:f1:21:76:99:11:ed:28:d0:68:16:0e:18:d9:3a:e6:9d:8c:
9e:f6:22:24:5c:82:01:95:06:dc:83:7f:82:de:0c:d3:80:f9:
75:74:54:f1:70:e3:4d:15:ae:49:f5:d7:cc:22:af:58:bc:82:
b3:36:4e:c5:76:57:2a:e6:4d:a9:b4:15:7e:56:2a:a3:02:e6:
01:da:5e:f5:cc:b7:89:f3:12:8c:be:8f:53:e8:2c:e1:2b:53:
ed:3b:ba:04:21:76:87:11:fa:61:6b:3a:1e:3f:45:1c:97:52:
95:10:11:d7
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDG0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy
NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yNDA2MTcw
ODU3NDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEJDQ0Y4OTQzMDQ4MUFE
MTJBQjEyRDI2OTI1MjU2MjUyOTZFQjE3MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzwn6SA8JqnprPUyftKXWaKqzyHYE/zWB3vxTkQdXWWkhHGkVG
SZaxuhoyYeaII8SVjWxfxypl6VPGWt1z0C27vZpea1uXZELxczaeeL/j29VoRli2
kkobWVdECZVU1C+TTMNcZaOlXpnjFpU4WZybHbnbnKX/lfA8V4gXkM34ji2UqxNJ
NRzJv87xmu21GycsTMqwQzEUTYoai5MhghEca8qwyPy+30f/+eDr4bJ0f8STl9qq
Ggs8v6AT1d5TXrohr1TUJZyWIEwHTEvmwXb+zD2un3aPyHnKD+kzH4BvGZ7/2uqT
gwtCAgZ/rHGHbzK0e5XczHi5yInjWTFVS5GrAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUvM+JQwSBrRKrEtJpJSViUpbrFzgwHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO
McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v
Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS92TS1KUXdTQnJSS3JFdEpwSlNW
aVVwYnJGemcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEPTpQ
MA0GCSqGSIb3DQEBCwUAA4IBAQC5gOLWx3EHsjhFN6DcM6iVxhH7Ituss8PSMPar
NBNIAs7eqEPQ4riLY8NVhES/B7bRZwMNrLY5DF22pdju/mkJXc92s+43ETbQji1F
iUxRkuvYvAOaYPkDn5aKi7kTPeL/BkCgvW7DGFUjxxBnfRytEE8TUyF6k0tB+ZlC
3GMTRpzt0eeyEZ/3S5qtDPOYhk6Q8SF2mRHtKNBoFg4Y2TrmnYye9iIkXIIBlQbc
g3+C3gzTgPl1dFTxcONNFa5J9dfMIq9YvIKzNk7Fdlcq5k2ptBV+ViqjAuYB2l71
zLeJ8xKMvo9T6CzhK1PtO7oEIXaHEfphazoeP0Ucl1KVEBHX
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org