Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TCB/LkgOdw9Ite_QESWGOGHAUEddwTo.roa
File: LkgOdw9Ite_QESWGOGHAUEddwTo.roa (raw, json)
Hash identifier: HIMMU4RRf0Kn2p7+JTy0dxh5whjWdEbATGs6iaEFujo=
Subject key identifier: 2E:48:0E:77:0F:48:B5:EF:D0:11:25:86:38:61:C0:50:47:5D:C1:3A
Certificate issuer: /CN=BF82A3AC11455030743C0A743711F8A0D8EBAE28
Certificate serial: 0B56
Authority key identifier: BF:82:A3:AC:11:45:50:30:74:3C:0A:74:37:11:F8:A0:D8:EB:AE:28
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v4KjrBFFUDB0PAp0NxH4oNjrrig.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/LkgOdw9Ite_QESWGOGHAUEddwTo.roa
Signing time: Fri 01 Sep 2023 10:00:08 +0000
ROA not before: Fri 01 Sep 2023 10:00:08 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131590
IP address blocks: 2400:c780:fffe:1d64::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2902 (0xb56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF82A3AC11455030743C0A743711F8A0D8EBAE28
Validity
Not Before: Sep 1 10:00:08 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2E480E770F48B5EFD01125863861C050475DC13A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:39:30:7e:5a:3b:55:6b:f1:ab:d6:72:39:c7:
36:70:f8:d2:c5:2e:b7:bc:33:52:5e:09:15:e4:a7:
ff:9a:2e:9d:9d:1d:a9:fe:1d:c1:3e:2c:be:fc:18:
58:15:4b:53:33:83:89:40:6b:69:2f:5d:68:2f:75:
af:10:6f:30:ca:3b:17:4f:1c:e6:d9:6b:9c:d9:6c:
f8:bd:7b:e4:f1:98:de:15:93:0c:0c:03:31:af:b6:
ce:87:ff:ae:b7:de:19:02:dd:b3:1d:1c:d4:6b:b8:
6b:ad:f4:22:26:90:1c:9a:40:5d:0f:0a:61:95:70:
3d:83:04:b1:27:fb:a0:83:90:86:0f:af:5b:b2:0c:
71:9c:52:23:ac:86:04:33:b2:c9:25:c9:5c:19:47:
fb:0d:23:26:b8:f9:00:c1:19:bd:f0:29:de:de:69:
a8:e6:40:29:81:e7:98:d5:e8:84:a5:9e:97:79:0a:
8e:7e:77:67:e0:1b:0a:6a:f5:16:ea:ad:3c:7c:60:
3f:68:34:6d:5f:79:06:33:06:e4:38:19:d3:4a:a5:
86:8b:66:b8:d3:a9:b7:9e:35:f3:fa:42:cf:d2:e5:
8d:bd:2d:b4:a2:33:15:fb:70:f3:49:3c:a9:24:12:
28:a7:c1:29:4e:fc:5a:cc:08:4e:e2:08:d8:8e:79:
a2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:48:0E:77:0F:48:B5:EF:D0:11:25:86:38:61:C0:50:47:5D:C1:3A
X509v3 Authority Key Identifier:
keyid:BF:82:A3:AC:11:45:50:30:74:3C:0A:74:37:11:F8:A0:D8:EB:AE:28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/v4KjrBFFUDB0PAp0NxH4oNjrrig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v4KjrBFFUDB0PAp0NxH4oNjrrig.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/LkgOdw9Ite_QESWGOGHAUEddwTo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:c780:fffe:1d64::/64
Signature Algorithm: sha256WithRSAEncryption
19:d2:9d:78:e8:e9:9e:c5:8f:4d:f4:11:02:0a:98:89:e6:49:
2e:83:85:1f:be:93:e9:64:52:33:65:38:b4:41:65:e2:69:b7:
79:77:72:0b:09:5e:b1:de:37:08:4f:90:5d:d0:c4:4d:3b:f4:
9a:7a:e5:f4:21:a2:0b:1b:04:74:c9:fc:e4:74:c7:00:db:99:
2e:05:b0:f6:31:67:b2:68:9e:4d:33:b4:f0:81:cc:08:e5:39:
f0:3c:35:17:a9:2f:a3:36:aa:a0:a7:2f:b5:b8:76:0f:3d:fd:
24:ac:f6:51:d0:65:2f:56:ae:56:41:f5:89:91:da:1a:57:6a:
45:91:dc:c6:b1:41:b8:ca:90:89:4b:08:26:62:b5:6f:2e:91:
35:67:23:53:53:46:59:f7:9a:ec:1c:ff:c6:02:9c:d1:cb:e3:
fd:8f:ce:33:25:c4:ab:d5:0c:5c:ec:b6:2d:d4:18:d7:92:c2:
8d:61:b0:77:60:ac:cd:d4:6f:e3:7f:37:8c:85:4d:09:3e:a1:
ba:43:25:2b:ce:08:82:3b:a3:b5:4a:25:66:d0:20:5b:c6:94:
1a:81:d7:12:60:e5:49:f2:1e:ad:bd:9c:1e:71:f5:f6:c0:95:
47:3e:90:aa:7f:c4:a2:90:50:98:5b:01:f6:da:65:01:a8:86:
17:52:1c:a5
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICC1YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkY4
MkEzQUMxMTQ1NTAzMDc0M0MwQTc0MzcxMUY4QTBEOEVCQUUyODAeFw0yMzA5MDEx
MDAwMDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDJFNDgwRTc3MEY0OEI1
RUZEMDExMjU4NjM4NjFDMDUwNDc1REMxM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMOTB+WjtVa/Gr1nI5xzZw+NLFLre8M1JeCRXkp/+aLp2dHan+
HcE+LL78GFgVS1Mzg4lAa2kvXWgvda8QbzDKOxdPHObZa5zZbPi9e+TxmN4VkwwM
AzGvts6H/6633hkC3bMdHNRruGut9CImkByaQF0PCmGVcD2DBLEn+6CDkIYPr1uy
DHGcUiOshgQzssklyVwZR/sNIya4+QDBGb3wKd7eaajmQCmB55jV6ISlnpd5Co5+
d2fgGwpq9RbqrTx8YD9oNG1feQYzBuQ4GdNKpYaLZrjTqbeeNfP6Qs/S5Y29LbSi
MxX7cPNJPKkkEiinwSlO/FrMCE7iCNiOeaLrAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQULkgOdw9Ite/QESWGOGHAUEddwTowHwYDVR0jBBgwFoAUv4KjrBFFUDB0PAp0
NxH4oNjrrigwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVENCL3Y0
S2pyQkZGVURCMFBBcDBOeEg0b05qcnJpZy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
djRLanJCRkZVREIwUEFwME54SDRvTmpycmlnLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvVENCL0xrZ09kdzlJdGVfUUVTV0dPR0hBVUVk
ZHdUby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwJAYIKwYBBQUHAQcBAf8EFTATMBEEAgACMAsDCQAkAMeA//4d
ZDANBgkqhkiG9w0BAQsFAAOCAQEAGdKdeOjpnsWPTfQRAgqYieZJLoOFH76T6WRS
M2U4tEFl4mm3eXdyCwlesd43CE+QXdDETTv0mnrl9CGiCxsEdMn85HTHANuZLgWw
9jFnsmieTTO08IHMCOU58Dw1F6kvozaqoKcvtbh2Dz39JKz2UdBlL1auVkH1iZHa
GldqRZHcxrFBuMqQiUsIJmK1by6RNWcjU1NGWfea7Bz/xgKc0cvj/Y/OMyXEq9UM
XOy2LdQY15LCjWGwd2CszdRv4383jIVNCT6hukMlK84IgjujtUolZtAgW8aUGoHX
EmDlSfIerb2cHnH19sCVRz6Qqn/EopBQmFsB9tplAaiGF1IcpQ==
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org