Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TCB/gTrJ-9PFBcC2LqGPlD37JFNIe6s.roa
File: gTrJ-9PFBcC2LqGPlD37JFNIe6s.roa (raw, json)
Hash identifier: IQbyezD+BmGZhEBzzU62FcBqy5+fKtw0NN4Tbo2E4m8=
Subject key identifier: 81:3A:C9:FB:D3:C5:05:C0:B6:2E:A1:8F:94:3D:FB:24:53:48:7B:AB
Certificate issuer: /CN=BF82A3AC11455030743C0A743711F8A0D8EBAE28
Certificate serial: 0B5C
Authority key identifier: BF:82:A3:AC:11:45:50:30:74:3C:0A:74:37:11:F8:A0:D8:EB:AE:28
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v4KjrBFFUDB0PAp0NxH4oNjrrig.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/gTrJ-9PFBcC2LqGPlD37JFNIe6s.roa
Signing time: Fri 01 Sep 2023 10:00:10 +0000
ROA not before: Fri 01 Sep 2023 10:00:10 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131590
IP address blocks: 103.227.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2908 (0xb5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF82A3AC11455030743C0A743711F8A0D8EBAE28
Validity
Not Before: Sep 1 10:00:10 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=813AC9FBD3C505C0B62EA18F943DFB2453487BAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c6:90:39:9d:3b:8e:8f:bf:18:88:cc:a1:d6:
14:a9:d7:88:25:f7:e1:a9:ba:5a:1c:1c:04:41:06:
b4:40:44:d8:7f:67:97:df:c5:ae:e5:e6:9a:90:4f:
39:80:e4:e2:c1:ed:2f:a5:99:3d:b9:6f:91:65:08:
77:b1:86:2a:0a:7b:de:10:11:a2:83:d6:0b:1e:72:
96:9b:0e:7b:4d:0c:0e:33:a9:d5:3b:c7:c0:33:aa:
b9:2a:2c:e3:0a:6b:e2:55:d8:a2:17:3f:6e:ad:1d:
45:31:43:81:82:a2:fb:f6:aa:26:0a:dc:4a:5e:94:
96:15:8f:10:62:36:0c:ac:bb:c8:c0:ac:16:22:06:
78:9d:dd:b1:98:b0:39:f0:60:ff:29:6a:a8:d9:60:
41:f9:3d:92:ed:2f:53:03:a5:3f:fa:25:af:be:96:
f8:57:60:2f:f4:02:d6:a0:2d:cc:43:08:b2:c1:33:
1e:26:0c:ad:ec:d9:2e:c0:5e:f3:16:49:2f:20:d1:
1d:12:02:a9:6f:b5:3f:51:c2:b3:54:ab:f2:ff:6b:
97:be:aa:a9:9e:82:6d:7f:07:40:63:63:64:83:5a:
7c:75:44:37:5b:c4:09:92:cd:8b:e8:bb:c2:08:f0:
88:1d:f9:7f:60:d4:73:e7:51:19:e2:35:1d:14:bd:
b2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3A:C9:FB:D3:C5:05:C0:B6:2E:A1:8F:94:3D:FB:24:53:48:7B:AB
X509v3 Authority Key Identifier:
keyid:BF:82:A3:AC:11:45:50:30:74:3C:0A:74:37:11:F8:A0:D8:EB:AE:28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/v4KjrBFFUDB0PAp0NxH4oNjrrig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v4KjrBFFUDB0PAp0NxH4oNjrrig.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/gTrJ-9PFBcC2LqGPlD37JFNIe6s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.227.226.0/24
Signature Algorithm: sha256WithRSAEncryption
10:11:72:55:2b:a9:e5:a1:94:93:ce:ad:a9:91:a7:ec:8e:f5:
63:19:22:19:5a:63:40:bc:0a:71:15:ae:64:76:83:dc:19:59:
02:92:f0:8e:30:cc:d7:b5:7a:00:86:77:c6:4c:7e:95:3a:5a:
2a:d1:e8:b1:58:bd:bd:2d:8a:18:cf:30:13:df:8c:f5:5c:76:
0e:17:2e:a2:d3:af:58:ab:5f:1b:31:63:34:d0:10:19:c6:59:
64:53:b6:ae:3b:96:8d:5d:cf:d9:2c:67:f6:c3:b9:20:61:73:
a6:13:07:36:26:ee:3c:c5:8a:f1:ae:4b:b9:79:64:f6:ee:5c:
dc:f9:f1:6b:5c:03:58:ae:da:45:6d:fc:3c:ac:0f:7c:d3:77:
9e:b6:ce:c0:2f:02:81:f2:78:b7:01:1b:7a:1c:1f:a3:8a:d7:
10:88:3c:19:68:6b:31:f0:b6:6a:f2:09:f4:7d:e0:6e:66:b1:
03:30:5d:ae:5f:9d:b8:6a:32:41:d6:9c:03:d0:5c:51:9f:7c:
67:4a:ad:3a:60:7f:15:c3:f8:b3:c7:a4:20:38:b5:8e:f8:a1:
85:cb:43:b5:c7:ca:cd:59:8c:e1:3e:c7:45:50:a8:2b:94:5a:
34:88:dd:ea:55:2e:84:65:cf:30:3f:46:72:d6:52:8f:10:77:
2c:cf:ba:b5
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICC1wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkY4
MkEzQUMxMTQ1NTAzMDc0M0MwQTc0MzcxMUY4QTBEOEVCQUUyODAeFw0yMzA5MDEx
MDAwMTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDgxM0FDOUZCRDNDNTA1
QzBCNjJFQTE4Rjk0M0RGQjI0NTM0ODdCQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9xpA5nTuOj78YiMyh1hSp14gl9+GpulocHARBBrRARNh/Z5ff
xa7l5pqQTzmA5OLB7S+lmT25b5FlCHexhioKe94QEaKD1gsecpabDntNDA4zqdU7
x8AzqrkqLOMKa+JV2KIXP26tHUUxQ4GCovv2qiYK3EpelJYVjxBiNgysu8jArBYi
Bnid3bGYsDnwYP8paqjZYEH5PZLtL1MDpT/6Ja++lvhXYC/0AtagLcxDCLLBMx4m
DK3s2S7AXvMWSS8g0R0SAqlvtT9RwrNUq/L/a5e+qqmegm1/B0BjY2SDWnx1RDdb
xAmSzYvou8II8Igd+X9g1HPnURniNR0UvbIfAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUgTrJ+9PFBcC2LqGPlD37JFNIe6swHwYDVR0jBBgwFoAUv4KjrBFFUDB0PAp0
NxH4oNjrrigwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVENCL3Y0
S2pyQkZGVURCMFBBcDBOeEg0b05qcnJpZy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
djRLanJCRkZVREIwUEFwME54SDRvTmpycmlnLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvVENCL2dUckotOVBGQmNDMkxxR1BsRDM3SkZO
SWU2cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn4+IwDQYJ
KoZIhvcNAQELBQADggEBABARclUrqeWhlJPOramRp+yO9WMZIhlaY0C8CnEVrmR2
g9wZWQKS8I4wzNe1egCGd8ZMfpU6WirR6LFYvb0tihjPMBPfjPVcdg4XLqLTr1ir
XxsxYzTQEBnGWWRTtq47lo1dz9ksZ/bDuSBhc6YTBzYm7jzFivGuS7l5ZPbuXNz5
8WtcA1iu2kVt/DysD3zTd562zsAvAoHyeLcBG3ocH6OK1xCIPBloazHwtmryCfR9
4G5msQMwXa5fnbhqMkHWnAPQXFGffGdKrTpgfxXD+LPHpCA4tY74oYXLQ7XHys1Z
jOE+x0VQqCuUWjSI3epVLoRlzzA/RnLWUo8QdyzPurU=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org