Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ULC/e8a_JUiZ3U8chHX_lV6Uz74kwYU.roa
File: e8a_JUiZ3U8chHX_lV6Uz74kwYU.roa (raw, json)
Hash identifier: E6SBkMGQWkCPEC7S2C56ol4qQnny1amALz0wx44sqyM=
Subject key identifier: 7B:C6:BF:25:48:99:DD:4F:1C:84:75:FF:95:5E:94:CF:BE:24:C1:85
Certificate issuer: /CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B
Certificate serial: 038F
Authority key identifier: BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/e8a_JUiZ3U8chHX_lV6Uz74kwYU.roa
Signing time: Fri 01 Sep 2023 10:16:42 +0000
ROA not before: Fri 01 Sep 2023 10:16:42 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 134823
IP address blocks: 103.157.42.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 911 (0x38f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B
Validity
Not Before: Sep 1 10:16:42 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7BC6BF254899DD4F1C8475FF955E94CFBE24C185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d6:d2:4a:3d:ef:49:bf:1d:72:c4:7b:ac:c0:
16:09:2d:1e:14:a2:f5:a5:a3:63:95:0f:4c:d7:24:
f4:95:62:0c:c2:5d:d3:1f:75:ab:4f:00:c3:1c:81:
ae:24:bb:0c:dc:49:4c:8f:08:31:be:1d:96:d9:ee:
b2:7c:4d:de:fa:ad:57:3a:dd:90:d1:ae:41:d4:58:
b7:25:92:65:b9:4a:1d:bd:12:71:62:94:9b:54:7d:
fd:c8:c3:c9:dc:56:b6:37:69:8c:64:12:0e:02:0e:
fc:a8:f7:e1:14:2b:21:cc:a7:4b:c1:a9:7e:22:34:
33:3c:04:16:b8:ff:cf:9b:38:30:cf:ed:e3:51:5b:
b5:37:10:ca:0c:33:2a:67:6b:15:44:2c:71:35:a5:
37:f9:fb:59:a1:0c:ea:78:f0:33:45:0f:f9:b5:25:
d4:f8:19:37:6c:ec:ca:e9:57:f0:9f:16:b1:dd:c6:
4b:82:d6:60:9b:ca:38:5c:53:5f:75:05:88:ac:41:
84:06:05:1f:70:b7:b0:65:3a:97:bf:74:2b:17:1b:
51:c0:15:23:9b:4b:e5:68:f3:81:e0:5c:af:7c:78:
72:c3:d3:53:86:1b:72:4a:b8:ab:9f:eb:44:cc:24:
1f:aa:79:1b:d1:a9:11:fc:46:43:03:f8:e4:40:6c:
e2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C6:BF:25:48:99:DD:4F:1C:84:75:FF:95:5E:94:CF:BE:24:C1:85
X509v3 Authority Key Identifier:
keyid:BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/e8a_JUiZ3U8chHX_lV6Uz74kwYU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.42.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:22:ed:fa:71:fd:a0:86:0d:0f:5d:f3:e1:50:77:bd:89:f2:
f6:2d:d9:10:31:6d:4c:51:6d:3f:6b:78:b6:50:15:18:5a:b8:
ba:30:46:53:0f:f3:c8:6b:5f:24:d2:81:93:36:75:33:ab:e4:
5f:47:23:dc:b2:67:80:3b:4f:a8:2f:08:94:c1:ba:f6:77:4e:
91:db:85:de:09:ea:89:11:98:e4:5a:ff:b8:5c:63:93:f3:94:
c6:48:4c:cc:bf:6b:d1:d8:b7:33:40:6a:9a:ec:a1:fc:bb:c0:
4f:8e:11:d4:fc:28:fc:31:ca:2b:a1:4d:44:b2:d1:e0:57:39:
51:9a:01:e1:53:fa:14:b3:5f:bc:78:59:c7:42:ff:a9:aa:f5:
e0:87:7d:f3:65:c3:ea:ca:5c:c5:fc:00:fb:21:2e:16:40:a2:
5b:8c:68:81:83:cf:da:d3:80:e0:b6:32:06:55:6a:b4:65:95:
51:da:5a:9e:f4:66:d9:03:15:03:d5:da:03:fe:61:4c:c7:73:
d3:56:d2:37:95:ce:1b:8e:7d:7f:db:d7:cc:b6:3d:f7:4b:93:
19:e9:fd:ad:80:ff:62:07:ff:e8:8b:5c:21:ce:23:2d:97:63:
84:ca:43:6f:b4:f2:2c:f3:a3:49:a3:ca:9b:2a:43:f2:95:2b:
f1:9d:d8:fd
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICA48wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkZC
QjdGN0I1QzU4MzIzNDkwODc1ODQ5QjhFRERBNDk1RUYxN0IxQjAeFw0yMzA5MDEx
MDE2NDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDdCQzZCRjI1NDg5OURE
NEYxQzg0NzVGRjk1NUU5NENGQkUyNEMxODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDc1tJKPe9Jvx1yxHuswBYJLR4UovWlo2OVD0zXJPSVYgzCXdMf
datPAMMcga4kuwzcSUyPCDG+HZbZ7rJ8Td76rVc63ZDRrkHUWLclkmW5Sh29EnFi
lJtUff3Iw8ncVrY3aYxkEg4CDvyo9+EUKyHMp0vBqX4iNDM8BBa4/8+bODDP7eNR
W7U3EMoMMypnaxVELHE1pTf5+1mhDOp48DNFD/m1JdT4GTds7MrpV/CfFrHdxkuC
1mCbyjhcU191BYisQYQGBR9wt7BlOpe/dCsXG1HAFSObS+Vo84HgXK98eHLD01OG
G3JKuKuf60TMJB+qeRvRqRH8RkMD+ORAbOLtAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUe8a/JUiZ3U8chHX/lV6Uz74kwYUwHwYDVR0jBBgwFoAUv7t/e1xYMjSQh1hJ
uO3aSV7xexswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUxDL3Y3
dF9lMXhZTWpTUWgxaEp1TzNhU1Y3eGV4cy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
djd0X2UxeFlNalNRaDFoSnVPM2FTVjd4ZXhzLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvVUxDL2U4YV9KVWlaM1U4Y2hIWF9sVjZVejc0
a3dZVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnnSowDQYJ
KoZIhvcNAQELBQADggEBAG8i7fpx/aCGDQ9d8+FQd72J8vYt2RAxbUxRbT9reLZQ
FRhauLowRlMP88hrXyTSgZM2dTOr5F9HI9yyZ4A7T6gvCJTBuvZ3TpHbhd4J6okR
mORa/7hcY5PzlMZITMy/a9HYtzNAaprsofy7wE+OEdT8KPwxyiuhTUSy0eBXOVGa
AeFT+hSzX7x4WcdC/6mq9eCHffNlw+rKXMX8APshLhZAoluMaIGDz9rTgOC2MgZV
arRllVHaWp70ZtkDFQPV2gP+YUzHc9NW0jeVzhuOfX/b18y2PfdLkxnp/a2A/2IH
/+iLXCHOIy2XY4TKQ2+08izzo0mjypsqQ/KVK/Gd2P0=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:22 2024 by rpki-client on console-ams.rpki-client.org