Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/-OG2QHzxKLrr11z15X4DGWa39Zc.roa
File: -OG2QHzxKLrr11z15X4DGWa39Zc.roa (raw, json)
Hash identifier: Dbkvxc6fAFPsZNcXgFEG6hqrKQMd8hf697zKfPT72jU=
Subject key identifier: F8:E1:B6:40:7C:F1:28:BA:EB:D7:5C:F5:E5:7E:03:19:66:B7:F5:97
Certificate issuer: /CN=33A80E75BA2F2B0FD4312189A7E43E4353E8D3A8
Certificate serial: 0AD0
Authority key identifier: 33:A8:0E:75:BA:2F:2B:0F:D4:31:21:89:A7:E4:3E:43:53:E8:D3:A8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/M6gOdbovKw_UMSGJp-Q-Q1Po06g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/-OG2QHzxKLrr11z15X4DGWa39Zc.roa
Signing time: Fri 01 Sep 2023 10:18:59 +0000
ROA not before: Fri 01 Sep 2023 10:18:59 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18046
IP address blocks: 103.16.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2768 (0xad0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33A80E75BA2F2B0FD4312189A7E43E4353E8D3A8
Validity
Not Before: Sep 1 10:18:59 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F8E1B6407CF128BAEBD75CF5E57E031966B7F597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c4:c7:28:6e:a9:8a:f3:26:d9:22:bc:9d:c9:
5f:a7:62:84:fb:e5:ec:99:a0:27:df:5c:59:0d:30:
71:43:2f:63:8a:8c:89:cb:1c:a7:81:8f:82:a2:b5:
ca:44:d4:b5:e8:2d:2c:23:79:73:a8:21:57:44:af:
e1:45:e3:c6:f5:f0:f3:2c:0c:80:42:f9:e2:4a:2d:
f8:82:1f:1c:87:aa:d3:44:9d:46:81:cf:e2:c7:d9:
2e:0c:91:08:9c:00:e9:d8:97:7a:39:60:fa:de:62:
df:f2:76:34:c2:8f:28:86:f6:71:50:8e:1f:e2:d1:
25:a3:bb:f7:6c:dc:56:c2:dc:c5:bc:17:6b:fe:7c:
4c:08:83:24:4c:e6:a0:9d:b9:11:45:47:22:f6:25:
43:0e:85:be:db:57:e0:ae:7e:d5:24:18:db:6f:0f:
e0:4e:59:06:24:11:37:b0:28:d4:5b:b2:19:ea:77:
ba:f8:81:5c:aa:b8:29:8b:f8:59:07:63:17:7e:fd:
bf:14:45:9b:26:7d:a3:b8:1e:4c:25:65:06:35:b8:
9f:9b:1a:a7:2f:1f:bd:ff:54:40:19:36:bb:4c:8b:
05:19:1e:06:dc:33:a3:38:a9:74:04:f3:ff:6b:63:
2e:e9:6f:75:79:c0:29:c4:eb:22:a4:49:a7:a8:52:
c1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E1:B6:40:7C:F1:28:BA:EB:D7:5C:F5:E5:7E:03:19:66:B7:F5:97
X509v3 Authority Key Identifier:
keyid:33:A8:0E:75:BA:2F:2B:0F:D4:31:21:89:A7:E4:3E:43:53:E8:D3:A8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/M6gOdbovKw_UMSGJp-Q-Q1Po06g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/M6gOdbovKw_UMSGJp-Q-Q1Po06g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/-OG2QHzxKLrr11z15X4DGWa39Zc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.16.240.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:ca:ae:29:8b:4b:8a:2c:e3:5c:50:44:b7:85:60:e1:7a:ad:
9b:f7:4a:e6:1b:08:08:2e:ee:06:cb:20:ec:71:2e:40:31:a5:
cd:ff:d9:54:e2:19:14:11:e8:7d:c2:e3:39:67:74:b4:25:06:
7f:8e:17:cf:c3:6f:2b:fb:da:36:73:74:f1:78:05:31:f0:c9:
01:7c:fd:4f:65:d1:6c:57:69:22:ea:4c:41:a1:1c:99:86:36:
60:db:f5:e6:a0:bf:57:2c:a7:3d:e8:96:4a:bc:3f:4f:0c:20:
e3:75:28:b2:d9:ec:95:56:c2:f7:59:ed:b8:24:34:87:6e:dc:
08:ef:1f:9b:76:bd:9c:5b:3d:27:73:bf:54:8e:02:4e:52:89:
e7:84:1f:e1:14:c7:43:15:80:e9:1e:83:57:1a:b9:95:ed:6c:
a1:70:81:d9:ed:2d:71:f4:94:9e:a2:9d:fc:3b:cb:87:61:32:
15:ea:92:03:4b:7f:c9:3e:aa:16:d5:71:3a:fa:53:ad:36:ff:
f3:1a:9a:36:97:a4:d1:1f:e7:fa:8c:7f:1a:d0:5e:22:df:ab:
6f:bd:7a:c4:ae:ad:e2:b8:1c:11:55:f0:58:ab:35:4a:ee:88:
4a:1f:bb:16:70:50:2a:55:7f:04:50:77:33:81:b5:b3:b7:a0:
37:7c:b8:6a
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICCtAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzNB
ODBFNzVCQTJGMkIwRkQ0MzEyMTg5QTdFNDNFNDM1M0U4RDNBODAeFw0yMzA5MDEx
MDE4NTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEY4RTFCNjQwN0NGMTI4
QkFFQkQ3NUNGNUU1N0UwMzE5NjZCN0Y1OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIxMcobqmK8ybZIrydyV+nYoT75eyZoCffXFkNMHFDL2OKjInL
HKeBj4KitcpE1LXoLSwjeXOoIVdEr+FF48b18PMsDIBC+eJKLfiCHxyHqtNEnUaB
z+LH2S4MkQicAOnYl3o5YPreYt/ydjTCjyiG9nFQjh/i0SWju/ds3FbC3MW8F2v+
fEwIgyRM5qCduRFFRyL2JUMOhb7bV+CuftUkGNtvD+BOWQYkETewKNRbshnqd7r4
gVyquCmL+FkHYxd+/b8URZsmfaO4HkwlZQY1uJ+bGqcvH73/VEAZNrtMiwUZHgbc
M6M4qXQE8/9rYy7pb3V5wCnE6yKkSaeoUsFTAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQU+OG2QHzxKLrr11z15X4DGWa39ZcwHwYDVR0jBBgwFoAUM6gOdbovKw/UMSGJ
p+Q+Q1Po06gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVU5JT05J
U01FL002Z09kYm92S3dfVU1TR0pwLVEtUTFQbzA2Zy5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvTTZnT2Rib3ZLd19VTVNHSnAtUS1RMVBvMDZnLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVU5JT05JU01FLy1PRzJRSHp4S0xy
cjExejE1WDRER1dhMzlaYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJnEPAwDQYJKoZIhvcNAQELBQADggEBAFrKrimLS4os41xQRLeFYOF6rZv3
SuYbCAgu7gbLIOxxLkAxpc3/2VTiGRQR6H3C4zlndLQlBn+OF8/Dbyv72jZzdPF4
BTHwyQF8/U9l0WxXaSLqTEGhHJmGNmDb9eagv1cspz3olkq8P08MION1KLLZ7JVW
wvdZ7bgkNIdu3AjvH5t2vZxbPSdzv1SOAk5SieeEH+EUx0MVgOkeg1cauZXtbKFw
gdntLXH0lJ6infw7y4dhMhXqkgNLf8k+qhbVcTr6U602//MamjaXpNEf5/qMfxrQ
XiLfq2+9esSureK4HBFV8FirNUruiEofuxZwUCpVfwRQdzOBtbO3oDd8uGo=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org