Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qj3x4teV887WPaUWT8ayxis8kf8.roa
File: qj3x4teV887WPaUWT8ayxis8kf8.roa (raw, json)
Hash identifier: 2UVXfTTtHFawHHcPPMRhBuSgWbcvVOhq8YexSDYV0rQ=
Subject key identifier: AA:3D:F1:E2:D7:95:F3:CE:D6:3D:A5:16:4F:C6:B2:C6:2B:3C:91:FF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 297F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qj3x4teV887WPaUWT8ayxis8kf8.roa
Signing time: Fri 01 Sep 2023 10:06:40 +0000
ROA not before: Fri 01 Sep 2023 10:06:40 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10623 (0x297f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:40 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=AA3DF1E2D795F3CED63DA5164FC6B2C62B3C91FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d4:df:a6:0f:c2:a9:8b:9b:5b:26:12:c8:2e:
67:e3:7c:0b:d8:b6:72:94:6d:88:0d:e7:6f:8a:a1:
59:e7:d8:58:11:d8:52:b7:8a:7e:e6:9b:e2:fb:0a:
5f:25:9a:1d:bd:20:4d:7a:0e:0c:3a:cc:d1:15:c4:
53:78:10:37:8f:c7:65:f2:d8:7a:64:f7:d0:7e:ef:
ee:79:ba:73:42:35:91:ea:f6:20:30:53:cf:e7:38:
5a:24:de:23:c8:81:ab:61:79:95:13:33:e7:ce:7e:
f5:23:1d:1b:0e:64:04:be:81:6a:d5:b1:15:93:3c:
45:a0:8b:d5:1c:30:1b:fc:e1:42:62:1c:77:b1:22:
44:9b:b7:bd:f4:86:3a:e0:aa:c7:77:99:00:0e:21:
ad:c6:0d:ee:67:e3:56:a9:e5:d3:0b:35:e0:95:af:
9e:af:69:f5:2b:99:8d:ab:fa:d9:e1:6b:1c:f1:95:
49:57:4a:2e:97:89:74:94:5c:72:28:93:6f:f0:0d:
fd:68:52:f4:61:fb:99:60:ba:5a:4b:e9:95:7b:fd:
0e:e7:63:49:ac:dd:33:9d:8a:90:d0:0e:bf:2b:b7:
c0:93:61:af:20:f4:61:35:07:81:00:5d:d5:42:eb:
14:87:b9:98:76:b4:16:ce:e8:97:00:c3:48:13:3b:
4c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3D:F1:E2:D7:95:F3:CE:D6:3D:A5:16:4F:C6:B2:C6:2B:3C:91:FF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qj3x4teV887WPaUWT8ayxis8kf8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.16.0/21
Signature Algorithm: sha256WithRSAEncryption
41:24:68:01:92:87:f4:be:57:b0:d7:1c:74:a7:00:97:16:af:
f2:bf:d3:03:fa:4b:5f:f2:38:71:87:84:10:09:51:3a:28:2c:
f8:b0:6d:41:87:9b:c9:b6:2b:dc:21:49:fa:ea:20:99:97:e3:
a4:e8:2e:11:71:1d:12:07:9a:18:8b:87:e4:c7:ce:3f:2b:1d:
48:92:68:c4:fa:96:5b:c2:36:1e:d4:2c:f3:f6:3a:6a:59:cc:
2a:77:6e:7d:f4:e1:f3:66:1f:c9:be:46:d6:cc:f2:23:66:d3:
83:12:ea:2f:b9:dc:14:a1:c9:3a:d0:48:20:99:6b:a9:59:4f:
9d:a4:fe:b2:b1:b1:94:88:c8:0f:d9:bf:1a:cd:55:a9:f6:fb:
70:96:bb:65:93:29:bb:69:dc:ca:3b:40:a7:03:f2:a1:76:cb:
f1:0b:34:58:1a:83:14:6e:47:91:df:74:79:55:c9:16:47:98:
56:9e:17:b0:54:97:31:76:2c:08:2c:e8:b4:9c:b9:05:82:9d:
67:66:0a:40:4d:30:71:8b:e7:d2:8b:21:22:8c:7c:bc:9d:f3:
39:53:68:8c:d4:84:71:0a:0e:1a:5e:65:ca:de:a6:8b:c3:c9:
89:48:46:8d:02:72:f0:3a:a4:75:23:99:2d:fc:bc:c3:1c:75:
5f:b8:3b:dd
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKX8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA2NDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEFBM0RGMUUyRDc5NUYz
Q0VENjNEQTUxNjRGQzZCMkM2MkIzQzkxRkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDx1N+mD8Kpi5tbJhLILmfjfAvYtnKUbYgN52+KoVnn2FgR2FK3
in7mm+L7Cl8lmh29IE16Dgw6zNEVxFN4EDePx2Xy2Hpk99B+7+55unNCNZHq9iAw
U8/nOFok3iPIgatheZUTM+fOfvUjHRsOZAS+gWrVsRWTPEWgi9UcMBv84UJiHHex
IkSbt730hjrgqsd3mQAOIa3GDe5n41ap5dMLNeCVr56vafUrmY2r+tnhaxzxlUlX
Si6XiXSUXHIok2/wDf1oUvRh+5lgulpL6ZV7/Q7nY0ms3TOdipDQDr8rt8CTYa8g
9GE1B4EAXdVC6xSHuZh2tBbO6JcAw0gTO0wTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUqj3x4teV887WPaUWT8ayxis8kf8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3FqM3g0dGVWODg3V1BhVVdU
OGF5eGlzOGtmOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wRAwDQYJKoZIhvcNAQELBQADggEBAEEkaAGSh/S+V7DXHHSnAJcWr/K/0wP6S1/y
OHGHhBAJUTooLPiwbUGHm8m2K9whSfrqIJmX46ToLhFxHRIHmhiLh+THzj8rHUiS
aMT6llvCNh7ULPP2OmpZzCp3bn304fNmH8m+RtbM8iNm04MS6i+53BShyTrQSCCZ
a6lZT52k/rKxsZSIyA/ZvxrNVan2+3CWu2WTKbtp3Mo7QKcD8qF2y/ELNFgagxRu
R5HfdHlVyRZHmFaeF7BUlzF2LAgs6LScuQWCnWdmCkBNMHGL59KLISKMfLyd8zlT
aIzUhHEKDhpeZcrepovDyYlIRo0CcvA6pHUjmS38vMMcdV+4O90=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org