Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TNET/kCITHkj--XIbpqdDLSYHheozUgA.roa
File: kCITHkj--XIbpqdDLSYHheozUgA.roa (raw, json)
Hash identifier: RC+UIlmGJrJS7veX40TkGlWerqZrmvKq1fK8VrSqNdA=
Subject key identifier: 90:22:13:1E:48:FE:F9:72:1B:A6:A7:43:2D:26:07:85:EA:33:52:00
Certificate issuer: /CN=9FE26AE5E0DA56EC49EC9986B9C894D5B898A153
Certificate serial: 0888
Authority key identifier: 9F:E2:6A:E5:E0:DA:56:EC:49:EC:99:86:B9:C8:94:D5:B8:98:A1:53
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/n-Jq5eDaVuxJ7JmGuciU1biYoVM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/kCITHkj--XIbpqdDLSYHheozUgA.roa
Signing time: Wed 18 Nov 2020 07:13:09 +0000
ROA not before: Wed 18 Nov 2020 07:13:09 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38851
IP address blocks: 103.46.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2184 (0x888)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FE26AE5E0DA56EC49EC9986B9C894D5B898A153
Validity
Not Before: Nov 18 07:13:09 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9022131E48FEF9721BA6A7432D260785EA335200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c2:0d:0b:9f:89:19:1b:16:99:e6:4e:7b:9c:
29:30:bd:59:2f:be:ba:29:c8:d0:ce:56:6f:80:8c:
f4:d9:23:4f:e9:ea:63:4a:11:77:78:05:93:64:22:
d5:67:20:e4:d3:f8:8d:b9:65:af:e4:e4:25:aa:01:
6a:c3:74:d3:61:44:42:02:c4:47:1e:bf:3e:a5:9a:
66:0b:19:57:fe:8d:46:15:44:5f:5d:c8:2f:98:b5:
ee:8e:48:a8:0f:c6:60:be:c0:a4:39:54:fc:d8:2f:
43:aa:d7:d6:9d:59:81:a5:aa:99:84:9a:bb:f5:f7:
59:b2:a8:78:00:0a:2e:58:d1:bc:3c:8d:50:2f:87:
6a:f1:74:37:06:a8:3e:4c:05:68:cd:1a:c4:8b:91:
6b:1e:1a:7e:21:8c:95:63:63:58:fe:d9:a0:a4:44:
b9:c1:cb:b6:62:5a:68:37:8c:34:50:e5:7c:a2:bf:
c8:4c:33:ed:a8:8e:f1:fe:d0:a7:7c:3c:ff:b7:91:
d9:bb:6c:60:af:04:14:56:14:ec:76:4c:01:39:4e:
9c:e3:bf:58:ec:b7:80:7f:0d:df:25:7c:02:5c:5e:
6e:f8:11:ec:53:da:5c:2e:0c:30:45:79:d8:92:6f:
fd:bd:a7:e4:bd:8c:4b:d3:79:33:36:88:12:3a:7e:
d7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:22:13:1E:48:FE:F9:72:1B:A6:A7:43:2D:26:07:85:EA:33:52:00
X509v3 Authority Key Identifier:
keyid:9F:E2:6A:E5:E0:DA:56:EC:49:EC:99:86:B9:C8:94:D5:B8:98:A1:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/n-Jq5eDaVuxJ7JmGuciU1biYoVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/n-Jq5eDaVuxJ7JmGuciU1biYoVM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/kCITHkj--XIbpqdDLSYHheozUgA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.46.188.0/22
Signature Algorithm: sha256WithRSAEncryption
99:9b:2e:a9:42:3e:7b:47:b0:a7:9d:4d:39:b2:bd:6c:6e:c6:
ba:96:bf:b2:18:15:63:d6:7c:10:76:45:70:84:5a:93:98:01:
ad:4f:d6:98:e7:30:36:21:63:e5:77:8c:7f:ea:94:80:5b:d5:
82:3a:5a:d4:c4:ad:0f:10:29:a8:25:9f:76:57:59:09:fe:77:
9d:f3:3b:11:0a:57:e6:54:d9:ff:9d:e3:f6:24:56:2e:4e:15:
b1:47:6e:d1:23:5f:bf:83:93:ef:91:4c:b5:99:02:1a:fb:06:
2e:78:46:0b:a4:bb:ef:f5:a4:4d:b4:c6:70:54:75:70:9d:85:
39:39:55:2f:3d:cb:ad:0e:99:5b:3e:da:1d:61:38:bf:b7:6c:
ad:28:f7:1f:ba:d2:1d:75:e4:7a:44:9f:a4:be:83:ed:5b:5b:
09:f5:b6:72:5a:90:81:92:13:89:e8:bc:7f:87:db:d8:85:d8:
51:47:7d:96:47:c2:e5:ba:d5:d1:5b:41:4f:72:12:17:b5:9a:
ba:a5:0a:00:81:25:e1:f1:46:6d:0f:d0:fc:27:e8:5b:cf:1c:
0a:ca:1d:fc:95:37:64:02:12:3a:23:3a:e1:16:65:93:4f:42:
4c:04:ac:94:5f:41:fe:1c:5a:49:79:f5:16:ff:d3:b4:3d:99:
8a:9f:26:15
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCIgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUZF
MjZBRTVFMERBNTZFQzQ5RUM5OTg2QjlDODk0RDVCODk4QTE1MzAeFw0yMDExMTgw
NzEzMDlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDkwMjIxMzFFNDhGRUY5
NzIxQkE2QTc0MzJEMjYwNzg1RUEzMzUyMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/wg0Ln4kZGxaZ5k57nCkwvVkvvropyNDOVm+AjPTZI0/p6mNK
EXd4BZNkItVnIOTT+I25Za/k5CWqAWrDdNNhREICxEcevz6lmmYLGVf+jUYVRF9d
yC+Yte6OSKgPxmC+wKQ5VPzYL0Oq19adWYGlqpmEmrv191myqHgACi5Y0bw8jVAv
h2rxdDcGqD5MBWjNGsSLkWseGn4hjJVjY1j+2aCkRLnBy7ZiWmg3jDRQ5Xyiv8hM
M+2ojvH+0Kd8PP+3kdm7bGCvBBRWFOx2TAE5Tpzjv1jst4B/Dd8lfAJcXm74EexT
2lwuDDBFediSb/29p+S9jEvTeTM2iBI6ftedAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUkCITHkj++XIbpqdDLSYHheozUgAwHwYDVR0jBBgwFoAUn+Jq5eDaVuxJ7JmG
uciU1biYoVMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVE5FVC9u
LUpxNWVEYVZ1eEo3Sm1HdWNpVTFiaVlvVk0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L24tSnE1ZURhVnV4SjdKbUd1Y2lVMWJpWW9WTS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1RORVQva0NJVEhrai0tWElicHFkRExTWUho
ZW96VWdBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcuvDAN
BgkqhkiG9w0BAQsFAAOCAQEAmZsuqUI+e0ewp51NObK9bG7Gupa/shgVY9Z8EHZF
cIRak5gBrU/WmOcwNiFj5XeMf+qUgFvVgjpa1MStDxApqCWfdldZCf53nfM7EQpX
5lTZ/53j9iRWLk4VsUdu0SNfv4OT75FMtZkCGvsGLnhGC6S77/WkTbTGcFR1cJ2F
OTlVLz3LrQ6ZWz7aHWE4v7dsrSj3H7rSHXXkekSfpL6D7VtbCfW2clqQgZITiei8
f4fb2IXYUUd9lkfC5brV0VtBT3ISF7WauqUKAIEl4fFGbQ/Q/CfoW88cCsod/JU3
ZAISOiM64RZlk09CTASslF9B/hxaSXn1Fv/TtD2Zip8mFQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org