Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dy-ER_hU0a0-b6D3LJ6lHYVax_w.roa
File: dy-ER_hU0a0-b6D3LJ6lHYVax_w.roa (raw, json)
Hash identifier: d8QIQjFrdhBp++3oU4aVJ048ncska+o8rEk/1aLikg4=
Subject key identifier: 77:2F:84:47:F8:54:D1:AD:3E:6F:A0:F7:2C:9E:A5:1D:85:5A:C7:FC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2AB8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dy-ER_hU0a0-b6D3LJ6lHYVax_w.roa
Signing time: Fri 01 Sep 2023 10:08:13 +0000
ROA not before: Fri 01 Sep 2023 10:08:13 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 45.64.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10936 (0x2ab8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:13 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=772F8447F854D1AD3E6FA0F72C9EA51D855AC7FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fe:9d:d9:db:ae:84:38:b0:51:0d:96:26:cd:
21:90:34:f9:a1:62:2e:25:6b:a4:92:f3:1c:db:a8:
fb:a5:c6:63:0d:63:41:0a:6e:c2:34:05:57:27:58:
73:7a:a6:f6:78:f5:09:70:c6:bd:b7:82:9d:60:cd:
81:84:ef:2d:e1:30:d3:e2:fd:cd:a3:be:7a:64:97:
a6:dc:f5:bc:33:b9:df:a8:c9:7b:7c:6c:ff:d9:11:
f8:f0:9f:23:da:a0:e4:6c:5d:9d:76:63:5e:68:6a:
0e:d6:d3:18:7e:91:36:2d:9c:31:55:e1:e1:ec:69:
2c:a8:6d:d4:72:58:23:fc:89:f7:2d:b0:e8:0d:8c:
97:c5:0c:f3:f3:0b:df:22:ad:33:48:43:e7:38:03:
12:51:7e:23:73:f0:a8:8f:f4:5e:1b:e6:06:a3:1d:
9c:f5:33:62:4d:83:e6:dd:07:20:81:2c:d7:af:1c:
73:5a:ef:46:21:26:84:df:53:c6:2a:11:58:28:4c:
45:47:29:c0:1e:cb:0e:b2:65:32:ae:8f:46:ed:9e:
71:18:d7:d9:e3:d7:06:4d:34:6b:be:8a:5e:59:79:
cd:37:48:6e:4d:97:7b:3d:9d:e8:32:c1:f6:bc:41:
b2:57:c5:d7:e7:f7:46:22:cd:a2:c5:13:ef:9c:e7:
97:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2F:84:47:F8:54:D1:AD:3E:6F:A0:F7:2C:9E:A5:1D:85:5A:C7:FC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dy-ER_hU0a0-b6D3LJ6lHYVax_w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.30.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e8:b4:a3:14:64:6e:5e:b8:8c:ef:a1:d4:51:35:30:0a:d0:
5e:53:9d:e7:de:44:ea:c4:ed:91:2f:3f:93:21:99:4a:40:55:
33:a9:88:c3:1d:bb:2b:6c:c7:ef:c5:6e:c5:d6:c7:28:7e:d2:
78:82:92:b0:1a:5c:32:60:11:22:05:5d:31:8f:ec:9b:9e:9e:
33:87:a5:fe:0c:b6:1b:95:af:32:aa:02:4e:4f:b9:d8:0f:7c:
10:5f:e5:cc:6a:c9:a4:18:67:43:16:04:c0:dc:25:52:1b:90:
fe:d1:83:39:8d:1f:da:00:5d:67:27:e3:c4:fd:07:59:a8:26:
7c:aa:b8:ca:34:34:c1:66:d0:06:d4:1d:4e:7c:aa:46:ed:95:
5c:75:ae:7f:c1:97:3b:09:2c:c9:2a:86:9e:cb:6f:85:87:76:
5b:67:c3:9b:30:50:9d:d9:5d:f9:9d:d3:7a:f5:7b:a3:27:dc:
2c:27:b3:94:ae:44:48:41:32:b9:a3:3c:67:2d:b8:53:5a:42:
0b:83:c1:25:e2:2a:4b:af:fb:38:9b:4f:89:e7:93:0c:33:96:
47:8b:62:d6:34:ba:b1:0b:4e:1b:5a:fd:18:7b:80:a3:c4:1c:
64:63:bd:a3:a8:ce:f6:4a:4c:e6:cb:cf:1f:bc:8c:f0:b6:4b:
32:01:7f:57
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKrgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA4MTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc3MkY4NDQ3Rjg1NEQx
QUQzRTZGQTBGNzJDOUVBNTFEODU1QUM3RkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDa/p3Z266EOLBRDZYmzSGQNPmhYi4la6SS8xzbqPulxmMNY0EK
bsI0BVcnWHN6pvZ49Qlwxr23gp1gzYGE7y3hMNPi/c2jvnpkl6bc9bwzud+oyXt8
bP/ZEfjwnyPaoORsXZ12Y15oag7W0xh+kTYtnDFV4eHsaSyobdRyWCP8ifctsOgN
jJfFDPPzC98irTNIQ+c4AxJRfiNz8KiP9F4b5gajHZz1M2JNg+bdByCBLNevHHNa
70YhJoTfU8YqEVgoTEVHKcAeyw6yZTKuj0btnnEY19nj1wZNNGu+il5Zec03SG5N
l3s9negywfa8QbJXxdfn90YizaLFE++c55eNAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUdy+ER/hU0a0+b6D3LJ6lHYVax/wwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2R5LUVSX2hVMGEwLWI2RDNM
SjZsSFlWYXhfdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt
QB4wDQYJKoZIhvcNAQELBQADggEBAI7otKMUZG5euIzvodRRNTAK0F5TnefeROrE
7ZEvP5MhmUpAVTOpiMMduytsx+/FbsXWxyh+0niCkrAaXDJgESIFXTGP7JuenjOH
pf4MthuVrzKqAk5PudgPfBBf5cxqyaQYZ0MWBMDcJVIbkP7RgzmNH9oAXWcn48T9
B1moJnyquMo0NMFm0AbUHU58qkbtlVx1rn/BlzsJLMkqhp7Lb4WHdltnw5swUJ3Z
Xfmd03r1e6Mn3Cwns5SuREhBMrmjPGctuFNaQguDwSXiKkuv+zibT4nnkwwzlkeL
YtY0urELThta/Rh7gKPEHGRjvaOozvZKTObLzx+8jPC2SzIBf1c=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org