Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/DSQKQYlqfVwvTDa3Iyt-dHs5RdA.roa
File: DSQKQYlqfVwvTDa3Iyt-dHs5RdA.roa (raw, json)
Hash identifier: /SlmRWTLB2qLMBthMGuFhex8Er2Rm7PmCzcM2OViQUg=
Subject key identifier: 0D:24:0A:41:89:6A:7D:5C:2F:4C:36:B7:23:2B:7E:74:7B:39:45:D0
Certificate issuer: /CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Certificate serial: 0AE0
Authority key identifier: B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/DSQKQYlqfVwvTDa3Iyt-dHs5RdA.roa
Signing time: Tue 29 Sep 2020 10:00:45 +0000
ROA not before: Tue 29 Sep 2020 10:00:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131662
IP address blocks: 103.135.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2784 (0xae0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Validity
Not Before: Sep 29 10:00:45 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0D240A41896A7D5C2F4C36B7232B7E747B3945D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:28:9e:d3:bf:e2:6b:f3:7e:63:d9:34:e2:
1d:7c:e9:c0:4f:e7:a3:f2:c2:a6:c3:8c:2d:6b:61:
90:ba:8d:10:bc:6b:52:06:c1:05:e2:8f:de:c3:05:
db:fa:6d:a3:f2:e6:a1:fb:33:3b:29:ee:a8:23:4a:
3e:cb:82:ec:0f:8d:02:33:73:71:ff:7b:cb:ab:0c:
88:18:f5:08:c5:b0:51:b8:ee:cc:03:73:da:49:b3:
37:37:8f:57:9c:ed:92:2d:3c:36:2e:98:71:37:3b:
93:71:76:6f:38:40:06:57:08:9f:be:17:60:61:36:
80:7c:ef:43:a0:f7:be:3e:65:71:03:3f:f3:f3:6a:
62:27:13:4d:d3:fd:a0:31:a8:bd:8c:09:16:81:41:
60:07:57:7a:47:1d:3c:0e:60:ee:71:a0:01:bf:ed:
7a:3e:ba:53:0e:39:0d:c6:94:8d:d8:e7:74:03:e0:
99:11:3e:e8:93:a0:a4:61:29:e5:b1:26:b8:89:1d:
85:2e:94:e2:8f:2e:59:bf:2e:07:d5:24:ae:13:22:
d7:88:78:80:cf:55:76:0f:c2:d0:a9:78:28:bc:5b:
d4:6a:41:6d:12:8e:cb:6f:11:86:c8:03:77:36:40:
05:b0:82:9e:7b:4d:1e:08:fc:3c:2d:0a:aa:9b:a9:
8f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:24:0A:41:89:6A:7D:5C:2F:4C:36:B7:23:2B:7E:74:7B:39:45:D0
X509v3 Authority Key Identifier:
keyid:B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/tWybLjoECHnP0A_nTWl_sEZc8no.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/DSQKQYlqfVwvTDa3Iyt-dHs5RdA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.17.0/24
Signature Algorithm: sha256WithRSAEncryption
81:28:8e:df:9a:6d:19:99:9b:13:39:e0:32:a3:b4:cd:de:88:
db:c6:be:5f:4d:17:41:de:ba:6a:08:a9:bf:11:40:e2:af:5f:
41:46:fb:e8:8a:17:41:81:be:f3:30:6c:f8:d4:c4:e2:ac:68:
2b:9a:a2:93:f6:0d:d6:43:e4:0b:8b:4e:8d:2d:7d:da:12:c9:
29:56:02:68:36:9e:fe:0c:16:5b:57:c0:1f:16:e3:b6:d4:88:
58:51:26:e8:2a:80:a7:ea:6e:5f:20:38:c7:4e:25:69:38:05:
18:98:02:b9:c2:4b:69:c3:76:6a:10:2d:8d:c1:38:89:1d:f0:
b2:86:14:cf:0c:ae:f0:21:a8:8e:c6:10:4a:13:43:57:ef:e0:
3c:a2:99:da:de:03:97:0d:81:71:3a:f3:d3:a5:41:f2:8e:9c:
1a:32:08:e4:d6:aa:1d:15:07:11:4e:12:bb:b6:d8:91:94:f2:
c6:ca:9d:47:2f:22:8b:ba:dc:28:36:f8:9b:f8:b7:fd:04:9a:
f7:3f:55:27:44:c5:bd:7a:07:56:7c:19:7e:45:6b:69:df:3d:
23:a7:d1:af:a0:b1:5f:6b:8a:20:aa:8a:e3:fa:03:7f:ba:01:
3b:4b:b7:09:f3:23:00:c6:db:03:05:d6:2d:56:a6:05:81:10:
d5:01:6b:49
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCuAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjU2
QzlCMkUzQTA0MDg3OUNGRDAwRkU3NEQ2OTdGQjA0NjVDRjI3QTAeFw0yMDA5Mjkx
MDAwNDVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDBEMjQwQTQxODk2QTdE
NUMyRjRDMzZCNzIzMkI3RTc0N0IzOTQ1RDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDA2Cie07/ia/N+Y9k04h186cBP56PywqbDjC1rYZC6jRC8a1IG
wQXij97DBdv6baPy5qH7Mzsp7qgjSj7LguwPjQIzc3H/e8urDIgY9QjFsFG47swD
c9pJszc3j1ec7ZItPDYumHE3O5Nxdm84QAZXCJ++F2BhNoB870Og974+ZXEDP/Pz
amInE03T/aAxqL2MCRaBQWAHV3pHHTwOYO5xoAG/7Xo+ulMOOQ3GlI3Y53QD4JkR
PuiToKRhKeWxJriJHYUulOKPLlm/LgfVJK4TIteIeIDPVXYPwtCpeCi8W9RqQW0S
jstvEYbIA3c2QAWwgp57TR4I/DwtCqqbqY9BAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUDSQKQYlqfVwvTDa3Iyt+dHs5RdAwHwYDVR0jBBgwFoAUtWybLjoECHnP0A/n
TWl/sEZc8nowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWkhJWUlO
L3RXeWJMam9FQ0huUDBBX25UV2xfc0VaYzhuby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvdFd5Ykxqb0VDSG5QMEFfblRXbF9zRVpjOG5vLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvWkhJWUlOL0RTUUtRWWxxZlZ3dlREYTNJ
eXQtZEhzNVJkQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn
hxEwDQYJKoZIhvcNAQELBQADggEBAIEojt+abRmZmxM54DKjtM3eiNvGvl9NF0He
umoIqb8RQOKvX0FG++iKF0GBvvMwbPjUxOKsaCuaopP2DdZD5AuLTo0tfdoSySlW
Amg2nv4MFltXwB8W47bUiFhRJugqgKfqbl8gOMdOJWk4BRiYArnCS2nDdmoQLY3B
OIkd8LKGFM8MrvAhqI7GEEoTQ1fv4DyimdreA5cNgXE689OlQfKOnBoyCOTWqh0V
BxFOEru22JGU8sbKnUcvIou63Cg2+Jv4t/0Emvc/VSdExb16B1Z8GX5Fa2nfPSOn
0a+gsV9riiCqiuP6A3+6ATtLtwnzIwDG2wMF1i1WpgWBENUBa0k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org