Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VOCOM/_yraMHoUoUH6YMlcqVLJg60r6n8.roa
File: _yraMHoUoUH6YMlcqVLJg60r6n8.roa (raw, json)
Hash identifier: etERR96xlPAaxHf3qnEHJ79WhC3KjwHeTttJweYP4Wc=
Subject key identifier: FF:2A:DA:30:7A:14:A1:41:FA:60:C9:5C:A9:52:C9:83:AD:2B:EA:7F
Certificate issuer: /CN=9E847108EBA0B550BC020FD9B1DC6DEB29E0DBEF
Certificate serial: 54
Authority key identifier: 9E:84:71:08:EB:A0:B5:50:BC:02:0F:D9:B1:DC:6D:EB:29:E0:DB:EF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/noRxCOugtVC8Ag_Zsdxt6yng2-8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/_yraMHoUoUH6YMlcqVLJg60r6n8.roa
Signing time: Fri 01 Sep 2023 10:19:41 +0000
ROA not before: Fri 01 Sep 2023 10:19:41 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 63897
IP address blocks: 2400:4460::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E847108EBA0B550BC020FD9B1DC6DEB29E0DBEF
Validity
Not Before: Sep 1 10:19:41 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FF2ADA307A14A141FA60C95CA952C983AD2BEA7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:48:ea:e1:0c:c2:9d:35:95:6a:e4:0d:09:2d:
de:ff:e6:f5:15:e4:3e:02:8a:24:eb:71:6d:0c:46:
92:3d:2a:68:eb:93:ae:e0:eb:00:63:19:63:b5:b2:
16:58:54:c8:35:5b:22:44:0c:56:0f:0c:2b:3b:26:
c8:3e:6f:e5:2c:48:fa:24:ef:c3:81:60:1e:c5:f4:
5f:f8:d0:7b:a3:6a:9a:9b:d7:4f:c2:95:d3:50:0a:
05:65:d9:43:9e:90:7a:50:fc:ad:cd:b4:4f:9c:ab:
1f:1d:67:f9:3a:0e:ac:5c:57:90:64:93:23:ee:8f:
b9:14:ad:df:4b:37:d3:3a:50:5a:77:1b:f4:2e:7d:
65:7e:f5:a6:5a:7a:57:5d:c8:35:96:0e:e5:e3:fd:
55:a6:4b:6d:39:da:b9:c4:16:ea:20:0f:81:9f:00:
ff:a6:b9:ec:36:5f:c1:f0:b2:4c:65:8c:e7:70:e9:
f8:df:25:18:0e:3c:2e:0c:99:a8:48:40:86:b0:95:
d2:fe:56:0f:fa:83:08:4c:af:72:78:12:e7:f9:f2:
cb:18:c0:f2:e4:67:3a:34:90:b3:d5:f5:8b:8f:a3:
e6:93:23:0e:70:7f:2d:a4:9a:66:14:4b:02:09:7a:
42:bd:41:8a:13:ae:22:62:dd:17:dd:cb:cd:0d:71:
a4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2A:DA:30:7A:14:A1:41:FA:60:C9:5C:A9:52:C9:83:AD:2B:EA:7F
X509v3 Authority Key Identifier:
keyid:9E:84:71:08:EB:A0:B5:50:BC:02:0F:D9:B1:DC:6D:EB:29:E0:DB:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/noRxCOugtVC8Ag_Zsdxt6yng2-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/noRxCOugtVC8Ag_Zsdxt6yng2-8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/_yraMHoUoUH6YMlcqVLJg60r6n8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:4460::/32
Signature Algorithm: sha256WithRSAEncryption
9f:60:23:09:47:df:ed:e0:67:20:3a:9f:b2:dc:a4:6b:d4:2a:
b1:b6:63:a8:1f:73:8a:61:b8:80:6d:82:a2:da:56:eb:95:0b:
9a:ed:b6:80:24:95:e8:11:d5:3d:4c:71:dc:25:8f:34:f6:e7:
3c:ea:a3:62:a5:56:b2:36:14:d9:62:27:93:b5:1b:3d:1a:4a:
07:1e:7c:bb:4f:f9:e4:76:1f:f8:0d:0c:cf:ba:cd:03:cf:f0:
59:2b:e7:cf:52:9a:56:c5:f5:64:e7:49:8c:aa:d0:14:a3:a4:
66:65:32:5f:46:4c:a4:c8:bc:25:29:12:77:42:5a:ac:21:65:
23:d9:73:11:91:98:5e:be:29:8a:fa:fa:44:c8:16:bb:b6:51:
ab:f9:31:b2:aa:ed:e8:a8:f2:19:cb:24:af:f2:ca:18:6f:ca:
30:c7:c3:90:4f:d4:f2:40:48:cb:b4:2a:3d:d4:ad:3b:37:cb:
b3:38:7b:3b:ef:7b:b0:fb:8b:63:49:41:20:01:00:29:ac:85:
85:99:53:51:f8:0b:81:7e:a5:0b:77:d2:c4:a9:da:e0:25:04:
db:24:6f:dd:68:5d:a4:17:91:fb:eb:c6:05:f3:96:f9:bc:48:
fa:52:b4:8d:3d:a7:81:4a:19:4d:2a:bf:d4:05:f0:1e:ee:71:
74:84:e3:d9
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgIBVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RTg0
NzEwOEVCQTBCNTUwQkMwMjBGRDlCMURDNkRFQjI5RTBEQkVGMB4XDTIzMDkwMTEw
MTk0MVoXDTI0MDgzMTAzMTA1M1owMzExMC8GA1UEAxMoRkYyQURBMzA3QTE0QTE0
MUZBNjBDOTVDQTk1MkM5ODNBRDJCRUE3RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALVI6uEMwp01lWrkDQkt3v/m9RXkPgKKJOtxbQxGkj0qaOuTruDr
AGMZY7WyFlhUyDVbIkQMVg8MKzsmyD5v5SxI+iTvw4FgHsX0X/jQe6NqmpvXT8KV
01AKBWXZQ56QelD8rc20T5yrHx1n+ToOrFxXkGSTI+6PuRSt30s30zpQWncb9C59
ZX71plp6V13INZYO5eP9VaZLbTnaucQW6iAPgZ8A/6a57DZfwfCyTGWM53Dp+N8l
GA48LgyZqEhAhrCV0v5WD/qDCEyvcngS5/nyyxjA8uRnOjSQs9X1i4+j5pMjDnB/
LaSaZhRLAgl6Qr1BihOuImLdF93LzQ1xpIkCAwEAAaOCAe0wggHpMB0GA1UdDgQW
BBT/KtowehShQfpgyVypUsmDrSvqfzAfBgNVHSMEGDAWgBSehHEI66C1ULwCD9mx
3G3rKeDb7zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO
oEyGSnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9WT0NPTS9u
b1J4Q091Z3RWQzhBZ19ac2R4dDZ5bmcyLTguY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L25vUnhDT3VndFZDOEFnX1pzZHh0NnluZzItOC5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1ZPQ09NL195cmFNSG9Vb1VINllNbGNxVkxK
ZzYwcjZuOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9y
cmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAERg
MA0GCSqGSIb3DQEBCwUAA4IBAQCfYCMJR9/t4GcgOp+y3KRr1CqxtmOoH3OKYbiA
bYKi2lbrlQua7baAJJXoEdU9THHcJY809uc86qNipVayNhTZYieTtRs9GkoHHny7
T/nkdh/4DQzPus0Dz/BZK+fPUppWxfVk50mMqtAUo6RmZTJfRkykyLwlKRJ3Qlqs
IWUj2XMRkZhevimK+vpEyBa7tlGr+TGyqu3oqPIZyySv8soYb8owx8OQT9TyQEjL
tCo91K07N8uzOHs773uw+4tjSUEgAQAprIWFmVNR+AuBfqULd9LEqdrgJQTbJG/d
aF2kF5H768YF85b5vEj6UrSNPaeBShlNKr/UBfAe7nF0hOPZ
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org