Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WNCL/L6FF2a2XhxgMiraYAjzfkSgUPeE.roa
File: L6FF2a2XhxgMiraYAjzfkSgUPeE.roa (raw, json)
Hash identifier: IwOh/XjdbTAcvY3/D9wmhXA0nOrl3PVezNhJ/n9Ypjs=
Subject key identifier: 2F:A1:45:D9:AD:97:87:18:0C:8A:B6:98:02:3C:DF:91:28:14:3D:E1
Certificate issuer: /CN=9D441AADD239AD926010AFC4DB20454EF2C4B0C1
Certificate serial: 0B2F
Authority key identifier: 9D:44:1A:AD:D2:39:AD:92:60:10:AF:C4:DB:20:45:4E:F2:C4:B0:C1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/nUQardI5rZJgEK_E2yBFTvLEsME.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WNCL/L6FF2a2XhxgMiraYAjzfkSgUPeE.roa
Signing time: Fri 01 Sep 2023 10:20:54 +0000
ROA not before: Fri 01 Sep 2023 10:20:54 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 134823
IP address blocks: 103.123.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2863 (0xb2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D441AADD239AD926010AFC4DB20454EF2C4B0C1
Validity
Not Before: Sep 1 10:20:54 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2FA145D9AD9787180C8AB698023CDF9128143DE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f6:65:14:ff:36:13:d0:41:c1:14:16:c2:a0:
b1:26:ee:54:fb:ac:7e:23:0c:62:f6:84:f7:4e:1e:
34:c3:ba:24:a3:a1:0e:96:61:b6:2d:e8:0b:be:ce:
27:b7:ca:f1:39:28:4f:51:0f:82:71:e9:b0:2d:0b:
1d:f9:a1:3a:f3:d9:a1:84:07:c0:11:b0:8b:73:3e:
1d:3a:34:5e:da:66:e7:43:37:ae:79:9e:fd:0c:97:
43:43:9a:9b:66:bc:42:60:45:05:7b:3d:8e:e7:23:
fb:74:3c:6d:04:15:e6:b4:22:04:f2:8b:f6:16:b1:
2d:75:dd:7d:b2:06:a2:39:f1:51:e8:3e:92:18:2b:
75:a2:7f:82:7c:fc:d4:87:1b:d7:d0:89:01:9c:fa:
d5:5f:b4:25:b3:98:09:a4:54:36:61:7b:9a:8e:90:
f5:14:ff:6a:8d:a5:39:20:5d:7b:4a:f2:4b:90:2c:
fa:11:42:00:78:c3:db:ed:1a:13:1a:c0:18:0f:64:
4c:41:cc:d2:d8:ac:eb:3e:fc:b0:34:02:57:71:ff:
2e:f5:93:20:21:81:c4:4a:d3:e9:74:e1:fd:b2:f4:
6d:d3:e7:97:c3:4e:27:08:a8:2a:4c:c6:47:d5:dd:
2d:d1:40:b8:ea:74:fa:f1:47:42:cc:ad:46:a9:b1:
21:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A1:45:D9:AD:97:87:18:0C:8A:B6:98:02:3C:DF:91:28:14:3D:E1
X509v3 Authority Key Identifier:
keyid:9D:44:1A:AD:D2:39:AD:92:60:10:AF:C4:DB:20:45:4E:F2:C4:B0:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WNCL/nUQardI5rZJgEK_E2yBFTvLEsME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nUQardI5rZJgEK_E2yBFTvLEsME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WNCL/L6FF2a2XhxgMiraYAjzfkSgUPeE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.132.0/22
Signature Algorithm: sha256WithRSAEncryption
00:59:37:66:77:61:20:15:5b:2a:4f:44:eb:6b:bd:84:63:fa:
d9:bb:88:ef:35:7a:d9:69:04:13:58:58:d7:ac:0b:18:54:0e:
9b:04:a7:e2:1b:b7:a7:79:27:38:33:fe:d6:be:2e:4b:55:3a:
41:e6:b4:79:04:2a:b9:bc:13:0a:63:16:3d:99:09:c4:2d:dc:
e6:ab:23:c3:61:34:2f:53:cf:3f:3c:58:43:67:75:ca:fa:af:
21:97:32:98:84:f9:0e:1b:4a:33:58:4d:0d:90:02:dd:b1:1c:
3e:8a:bf:9c:2e:7f:15:b4:a7:84:8c:49:1b:d7:e3:a2:0e:ad:
18:ff:87:9b:33:8e:5b:9f:77:53:50:42:a2:3e:1d:49:b7:e5:
41:f9:3e:0c:98:5e:b4:22:7d:f1:d2:ea:6c:d3:63:71:df:54:
0f:60:21:dc:b8:8a:2e:1c:b7:c4:dd:d6:5d:f5:e5:5a:dd:e6:
9a:ed:9c:65:b0:e4:47:44:4e:c7:a5:a4:5c:b0:46:aa:03:77:
a5:62:31:cf:11:14:39:06:06:56:b2:3d:dd:c1:c1:e9:e0:96:
db:e8:f3:aa:0a:42:bc:92:fa:3e:ef:59:b0:6b:16:51:84:c2:
66:04:7d:c2:85:92:b3:86:de:09:36:26:6f:cc:96:89:5e:66:
22:e7:41:4e
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCy8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUQ0
NDFBQUREMjM5QUQ5MjYwMTBBRkM0REIyMDQ1NEVGMkM0QjBDMTAeFw0yMzA5MDEx
MDIwNTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDJGQTE0NUQ5QUQ5Nzg3
MTgwQzhBQjY5ODAyM0NERjkxMjgxNDNERTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDn9mUU/zYT0EHBFBbCoLEm7lT7rH4jDGL2hPdOHjTDuiSjoQ6W
YbYt6Au+zie3yvE5KE9RD4Jx6bAtCx35oTrz2aGEB8ARsItzPh06NF7aZudDN655
nv0Ml0NDmptmvEJgRQV7PY7nI/t0PG0EFea0IgTyi/YWsS113X2yBqI58VHoPpIY
K3Wif4J8/NSHG9fQiQGc+tVftCWzmAmkVDZhe5qOkPUU/2qNpTkgXXtK8kuQLPoR
QgB4w9vtGhMawBgPZExBzNLYrOs+/LA0Aldx/y71kyAhgcRK0+l04f2y9G3T55fD
TicIqCpMxkfV3S3RQLjqdPrxR0LMrUapsSGJAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUL6FF2a2XhxgMiraYAjzfkSgUPeEwHwYDVR0jBBgwFoAUnUQardI5rZJgEK/E
2yBFTvLEsMEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV05DTC9u
VVFhcmRJNXJaSmdFS19FMnlCRlR2TEVzTUUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L25VUWFyZEk1clpKZ0VLX0UyeUJGVHZMRXNNRS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1dOQ0wvTDZGRjJhMlhoeGdNaXJhWUFqemZr
U2dVUGVFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmd7hDAN
BgkqhkiG9w0BAQsFAAOCAQEAAFk3ZndhIBVbKk9E62u9hGP62buI7zV62WkEE1hY
16wLGFQOmwSn4hu3p3knODP+1r4uS1U6Qea0eQQqubwTCmMWPZkJxC3c5qsjw2E0
L1PPPzxYQ2d1yvqvIZcymIT5DhtKM1hNDZAC3bEcPoq/nC5/FbSnhIxJG9fjog6t
GP+HmzOOW593U1BCoj4dSbflQfk+DJhetCJ98dLqbNNjcd9UD2Ah3LiKLhy3xN3W
XfXlWt3mmu2cZbDkR0ROx6WkXLBGqgN3pWIxzxEUOQYGVrI93cHB6eCW2+jzqgpC
vJL6Pu9ZsGsWUYTCZgR9woWSs4beCTYmb8yWiV5mIudBTg==
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org