Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/2gq7U2QRq2whgN1Nq7hTRX63A8A.roa
File: 2gq7U2QRq2whgN1Nq7hTRX63A8A.roa (raw, json)
Hash identifier: 2a1DSio7Pyn4Gk71rkGb0BJ4fWXJiySg29uqedURpKU=
Subject key identifier: DA:0A:BB:53:64:11:AB:6C:21:80:DD:4D:AB:B8:53:45:7E:B7:03:C0
Certificate issuer: /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Certificate serial: 11A4
Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/2gq7U2QRq2whgN1Nq7hTRX63A8A.roa
Signing time: Fri 01 Sep 2023 10:20:08 +0000
ROA not before: Fri 01 Sep 2023 10:20:08 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131636
IP address blocks: 103.130.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4516 (0x11a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Validity
Not Before: Sep 1 10:20:08 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DA0ABB536411AB6C2180DD4DABB853457EB703C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:41:84:1f:5f:94:5d:e7:7f:98:01:79:31:ae:
65:ce:f8:17:23:53:83:92:f2:e1:29:c7:7f:32:c0:
96:83:20:89:45:df:73:65:d4:03:1a:20:84:7b:0a:
50:40:f5:0e:b4:91:de:0e:1f:a5:6f:26:93:33:0c:
71:b3:f7:63:17:d3:69:24:71:af:8c:ac:4b:3c:ad:
4e:84:92:63:cf:29:23:10:bb:2d:95:62:d4:ad:63:
b4:48:26:4c:5b:00:6e:5b:bb:1b:1a:18:89:cc:24:
e0:a4:fb:a2:0c:fb:5e:c6:0c:da:f1:ef:f4:3d:3f:
3a:88:47:20:cb:18:c2:6d:1a:a5:98:eb:c5:ee:8d:
43:84:b1:59:dc:9a:6d:a0:2d:93:f1:da:d2:db:46:
9a:3b:38:e1:79:ff:46:75:63:bd:0b:ed:8b:c5:a5:
6e:8e:3a:cf:04:b3:3d:86:6b:b2:e7:24:8a:9d:0d:
35:61:06:fd:c4:8c:24:96:5c:e6:9c:d6:15:42:89:
ef:7a:a3:9c:d4:65:e0:da:01:90:9c:4d:cd:d4:e8:
9a:70:ca:06:32:5d:fd:42:89:3c:f8:e6:75:1b:40:
0e:8d:06:c5:11:87:6b:03:16:e7:fd:a8:6a:68:8c:
da:92:b9:38:c6:e2:5a:7a:bd:67:d8:f9:15:9c:91:
c8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0A:BB:53:64:11:AB:6C:21:80:DD:4D:AB:B8:53:45:7E:B7:03:C0
X509v3 Authority Key Identifier:
keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/2gq7U2QRq2whgN1Nq7hTRX63A8A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.125.0/24
Signature Algorithm: sha256WithRSAEncryption
21:a2:ef:e1:ef:60:a8:d4:4d:d6:97:ce:97:ce:ef:e4:4c:a8:
76:ff:ec:03:31:66:20:7b:19:73:c2:92:5a:e2:f1:d0:0e:2a:
08:e4:79:17:16:7c:28:be:c5:91:2a:a6:c8:a9:29:b8:33:82:
5a:5d:48:20:d2:85:33:4f:6e:c0:4f:2e:89:24:43:c5:18:aa:
5d:a5:62:4c:20:1d:50:7a:17:95:a9:72:29:3b:5e:f3:d9:4a:
ce:d1:e9:3a:04:11:45:e4:f4:f4:54:7e:7c:98:72:72:42:fc:
94:b4:ca:cb:04:a3:ac:73:c1:48:67:cc:6b:fb:e8:20:fd:ab:
1c:a8:ee:55:f6:21:af:a3:4e:26:9e:f6:1e:a9:c3:49:e5:53:
3e:c3:9c:e0:80:69:50:4d:bd:9c:bb:bc:f8:f2:e1:aa:40:91:
ee:8e:34:0e:ae:61:aa:99:5a:0c:9f:df:d9:35:1e:32:11:5d:
d1:54:79:ba:4c:16:b4:4e:50:c5:60:7a:8c:d7:6b:31:84:51:
cc:8d:42:15:26:a0:5d:3d:e3:45:37:50:6d:ef:3f:dc:33:fb:
43:02:5b:a6:7b:85:0e:f8:83:dd:55:39:c5:1c:70:e8:55:a4:
c1:10:d0:9f:87:ca:2a:27:9d:22:0d:4c:42:94:79:dc:7e:14:
a3:a4:84:56
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEaQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzBE
MkM4QzNENEMyRkJCQTI0RDNEODM1MDhBQjE0MkYyRDQ5NDI3RDAeFw0yMzA5MDEx
MDIwMDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERBMEFCQjUzNjQxMUFC
NkMyMTgwREQ0REFCQjg1MzQ1N0VCNzAzQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyQYQfX5Rd53+YAXkxrmXO+BcjU4OS8uEpx38ywJaDIIlF33Nl
1AMaIIR7ClBA9Q60kd4OH6VvJpMzDHGz92MX02kkca+MrEs8rU6EkmPPKSMQuy2V
YtStY7RIJkxbAG5buxsaGInMJOCk+6IM+17GDNrx7/Q9PzqIRyDLGMJtGqWY68Xu
jUOEsVncmm2gLZPx2tLbRpo7OOF5/0Z1Y70L7YvFpW6OOs8Esz2Ga7LnJIqdDTVh
Bv3EjCSWXOac1hVCie96o5zUZeDaAZCcTc3U6JpwygYyXf1CiTz45nUbQA6NBsUR
h2sDFuf9qGpojNqSuTjG4lp6vWfY+RWckch5AgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQU2gq7U2QRq2whgN1Nq7hTRX63A8AwHwYDVR0jBBgwFoAUwNLIw9TC+7ok09g1
CKsULy1JQn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FOSU4v
d05MSXc5VEMtN29rMDlnMUNLc1VMeTFKUW4wLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS93TkxJdzlUQy03b2swOWcxQ0tzVUx5MUpRbjAuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9XQU5JTi8yZ3E3VTJRUnEyd2hnTjFOcTdo
VFJYNjNBOEEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4J9
MA0GCSqGSIb3DQEBCwUAA4IBAQAhou/h72Co1E3Wl86Xzu/kTKh2/+wDMWYgexlz
wpJa4vHQDioI5HkXFnwovsWRKqbIqSm4M4JaXUgg0oUzT27ATy6JJEPFGKpdpWJM
IB1QeheVqXIpO17z2UrO0ek6BBFF5PT0VH58mHJyQvyUtMrLBKOsc8FIZ8xr++gg
/ascqO5V9iGvo04mnvYeqcNJ5VM+w5zggGlQTb2cu7z48uGqQJHujjQOrmGqmVoM
n9/ZNR4yEV3RVHm6TBa0TlDFYHqM12sxhFHMjUIVJqBdPeNFN1Bt7z/cM/tDAlum
e4UO+IPdVTnFHHDoVaTBENCfh8oqJ50iDUxClHncfhSjpIRW
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:22 2024 by rpki-client on console-ams.rpki-client.org