Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/bIgxOfdoWmyTqqJ5R5UJy3KBs00.roa
File: bIgxOfdoWmyTqqJ5R5UJy3KBs00.roa (raw, json)
Hash identifier: oH63z9u1tFpClBae+w28yaSq7/mbEQVpqZyAiWbQRDs=
Subject key identifier: 6C:88:31:39:F7:68:5A:6C:93:AA:A2:79:47:95:09:CB:72:81:B3:4D
Certificate issuer: /CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Certificate serial: 0C26
Authority key identifier: B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/bIgxOfdoWmyTqqJ5R5UJy3KBs00.roa
Signing time: Sun 07 Feb 2021 13:03:41 +0000
ROA not before: Sun 07 Feb 2021 13:03:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131662
IP address blocks: 103.135.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3110 (0xc26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Validity
Not Before: Feb 7 13:03:41 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6C883139F7685A6C93AAA279479509CB7281B34D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:27:af:34:10:dd:14:b6:6c:2a:83:a3:39:75:
06:49:00:b3:17:59:41:65:9f:43:f1:00:1c:9f:53:
42:1f:4c:33:f0:47:ce:da:5f:e1:80:43:0e:44:6f:
d2:6f:08:12:16:46:cc:e2:c1:1c:c1:9d:b0:51:c6:
6e:1c:c8:53:20:66:05:c9:87:9a:e6:70:cd:b1:aa:
01:2a:11:e8:df:90:d9:d7:d1:cb:27:f3:2b:77:3d:
cc:48:58:66:f2:cd:85:2d:d4:6f:e0:6d:af:e4:14:
64:3a:4c:30:5f:02:00:aa:3f:7a:eb:b0:11:1f:d5:
e9:f0:6c:60:59:7d:84:09:7a:e4:8a:28:9b:cc:07:
f7:58:b2:5c:e3:c2:f2:2f:57:dc:4e:70:a0:c2:71:
3c:c6:94:d1:6a:6e:c7:0c:de:ef:ec:56:6a:57:c8:
4e:77:d9:17:52:a1:bd:86:f5:b3:48:d3:bf:f1:dc:
74:3b:b6:48:51:6f:e7:65:bc:a2:ad:94:d1:71:21:
d1:c4:4f:6e:4f:1a:c3:a8:a2:e1:31:f0:c2:d5:cd:
7d:31:bb:46:f9:70:42:a9:b2:1e:eb:dd:25:96:a4:
f0:18:d9:e6:ca:b3:5e:5d:18:1a:ac:fc:d7:a2:f9:
3d:93:cc:8f:13:8e:97:ce:5b:98:b9:7c:29:25:07:
9c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:88:31:39:F7:68:5A:6C:93:AA:A2:79:47:95:09:CB:72:81:B3:4D
X509v3 Authority Key Identifier:
keyid:B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/tWybLjoECHnP0A_nTWl_sEZc8no.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/bIgxOfdoWmyTqqJ5R5UJy3KBs00.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.17.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:ba:b9:90:e4:18:d3:2e:25:d4:be:24:c1:f2:ed:63:6f:08:
0e:89:f2:14:cd:7e:3f:68:6e:54:56:07:83:60:cd:64:5e:9b:
9f:ec:ec:1b:9a:22:53:d6:20:6e:78:09:a3:40:e1:f3:a5:73:
af:3b:0a:1f:6e:d5:d8:ce:93:c9:0d:38:6f:2f:36:84:4b:e9:
28:93:b4:0e:bb:36:b3:06:79:5a:d6:db:82:81:ae:60:cc:50:
34:8f:ba:0b:23:85:ec:38:f3:66:81:d7:e1:3a:8c:29:eb:e2:
ac:77:d9:9f:9f:b3:5b:40:dc:e5:ce:c8:9f:86:70:f0:f8:87:
5b:29:5f:57:9f:92:9c:f1:c8:02:9b:b5:9e:69:a3:fd:ee:09:
51:14:e7:25:73:c1:77:c8:8b:7a:71:0d:d6:88:5c:d0:01:b8:
9e:41:b5:4d:a8:cd:5c:20:f4:40:52:77:72:a4:b2:c1:0b:f6:
bd:bf:68:44:38:06:7e:f9:c3:a9:dd:3d:81:a6:a0:05:a0:d6:
a7:7b:29:a8:07:b1:9b:23:1b:dd:4a:2d:f6:8e:7e:e4:cd:1f:
ab:58:22:6c:af:83:ce:04:df:4b:85:d1:dd:cd:10:cc:ad:29:
8d:69:84:ce:47:44:0f:1c:5e:da:8c:e0:07:3a:c0:12:cc:24:
54:2e:94:51
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDCYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjU2
QzlCMkUzQTA0MDg3OUNGRDAwRkU3NEQ2OTdGQjA0NjVDRjI3QTAeFw0yMTAyMDcx
MzAzNDFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDZDODgzMTM5Rjc2ODVB
NkM5M0FBQTI3OTQ3OTUwOUNCNzI4MUIzNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuJ680EN0Utmwqg6M5dQZJALMXWUFln0PxAByfU0IfTDPwR87a
X+GAQw5Eb9JvCBIWRsziwRzBnbBRxm4cyFMgZgXJh5rmcM2xqgEqEejfkNnX0csn
8yt3PcxIWGbyzYUt1G/gba/kFGQ6TDBfAgCqP3rrsBEf1enwbGBZfYQJeuSKKJvM
B/dYslzjwvIvV9xOcKDCcTzGlNFqbscM3u/sVmpXyE532RdSob2G9bNI07/x3HQ7
tkhRb+dlvKKtlNFxIdHET25PGsOoouEx8MLVzX0xu0b5cEKpsh7r3SWWpPAY2ebK
s15dGBqs/Nei+T2TzI8TjpfOW5i5fCklB5z9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUbIgxOfdoWmyTqqJ5R5UJy3KBs00wHwYDVR0jBBgwFoAUtWybLjoECHnP0A/n
TWl/sEZc8nowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWkhJWUlO
L3RXeWJMam9FQ0huUDBBX25UV2xfc0VaYzhuby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvdFd5Ykxqb0VDSG5QMEFfblRXbF9zRVpjOG5vLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvWkhJWUlOL2JJZ3hPZmRvV215VHFxSjVS
NVVKeTNLQnMwMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn
hxEwDQYJKoZIhvcNAQELBQADggEBAKi6uZDkGNMuJdS+JMHy7WNvCA6J8hTNfj9o
blRWB4NgzWRem5/s7BuaIlPWIG54CaNA4fOlc687Ch9u1djOk8kNOG8vNoRL6SiT
tA67NrMGeVrW24KBrmDMUDSPugsjhew482aB1+E6jCnr4qx32Z+fs1tA3OXOyJ+G
cPD4h1spX1efkpzxyAKbtZ5po/3uCVEU5yVzwXfIi3pxDdaIXNABuJ5BtU2ozVwg
9EBSd3KkssEL9r2/aEQ4Bn75w6ndPYGmoAWg1qd7KagHsZsjG91KLfaOfuTNH6tY
Imyvg84E30uF0d3NEMytKY1phM5HRA8cXtqM4Ac6wBLMJFQulFE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:52 2024 by rpki-client on console-ams.rpki-client.org