Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TTNS/_ImarZLfEV40V5siaRNDJV-q3xY.roa
File: _ImarZLfEV40V5siaRNDJV-q3xY.roa (raw, json)
Hash identifier: np9OZP0OhnoRTbu1v/+2OR9BLSS04OLSHac2XL0oQrg=
Subject key identifier: FC:89:9A:AD:92:DF:11:5E:34:57:9B:22:69:13:43:25:5F:AA:DF:16
Certificate issuer: /CN=298ED2FD6AD5C5B5687DF614A275C2FC848D4E94
Certificate serial: 021A
Authority key identifier: 29:8E:D2:FD:6A:D5:C5:B5:68:7D:F6:14:A2:75:C2:FC:84:8D:4E:94
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KY7S_WrVxbVoffYUonXC_ISNTpQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/_ImarZLfEV40V5siaRNDJV-q3xY.roa
Signing time: Mon 26 Aug 2024 05:28:20 +0000
ROA not before: Mon 26 Aug 2024 05:28:20 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 132369
IP address blocks: 103.159.206.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 538 (0x21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298ED2FD6AD5C5B5687DF614A275C2FC848D4E94
Validity
Not Before: Aug 26 05:28:20 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FC899AAD92DF115E34579B22691343255FAADF16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e1:c7:1b:f9:b5:6e:81:ef:bd:c7:6b:32:3a:
77:06:66:da:a0:aa:79:45:de:fa:79:6f:e7:03:0e:
f2:b4:38:75:d8:d3:7b:c8:ce:04:c5:28:6f:4e:57:
52:7e:31:38:79:51:b6:d0:36:f7:4a:19:07:66:bf:
c1:0b:b6:b0:a9:18:89:77:40:0f:b3:d6:d7:13:b3:
73:03:9a:bc:3f:26:61:04:5a:6c:59:d0:8b:7b:e6:
0e:79:36:07:ab:fd:cf:b6:6c:af:d4:49:90:84:d9:
5a:14:12:f5:95:63:e7:9d:bd:13:2f:3d:cd:bc:4f:
e8:a5:69:6a:6e:f5:3b:3f:0a:84:10:ee:9e:03:cd:
d2:4d:24:94:cd:56:c9:87:83:ac:df:84:a0:49:bb:
c8:1c:e8:0d:9b:b2:5c:eb:c6:7c:03:cf:e0:92:b9:
2a:ba:05:12:51:65:a9:b5:56:75:8d:20:f1:9d:d7:
28:89:64:29:f4:49:b0:b2:73:a6:22:15:d8:4c:9a:
56:77:bc:7d:d4:8a:f7:47:39:58:fe:b7:a7:e4:a4:
ae:90:de:b7:f5:83:7c:8e:2c:10:73:b0:ac:ac:7d:
e8:29:3f:df:4b:b5:0e:01:7f:ab:55:74:d5:69:ee:
a3:68:9a:5a:2c:f4:a1:4a:7f:28:45:94:c6:f6:2e:
b9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:89:9A:AD:92:DF:11:5E:34:57:9B:22:69:13:43:25:5F:AA:DF:16
X509v3 Authority Key Identifier:
keyid:29:8E:D2:FD:6A:D5:C5:B5:68:7D:F6:14:A2:75:C2:FC:84:8D:4E:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KY7S_WrVxbVoffYUonXC_ISNTpQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/_ImarZLfEV40V5siaRNDJV-q3xY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.206.0/23
Signature Algorithm: sha256WithRSAEncryption
80:a3:9e:1f:60:10:fa:0d:7e:af:0b:d5:7a:9f:bc:eb:a4:a3:
55:72:54:a5:4c:3e:7c:61:44:63:bb:a5:1a:6c:94:e5:88:29:
a4:fc:8d:15:6a:a6:d1:9f:bf:6c:e6:e8:ed:6d:7e:a9:2e:21:
3c:29:e4:2e:2e:5a:f7:6b:11:3a:89:f4:cd:81:2e:4f:cf:ed:
ae:63:cf:e7:f2:82:e7:8b:ae:d6:ba:3e:8c:a2:90:1f:d1:70:
f8:7d:f6:3e:1f:c5:52:f3:5f:33:d9:12:c8:40:f9:4b:68:e1:
e4:82:1b:f1:88:3d:9e:60:eb:a5:2e:6a:11:6c:63:4c:c3:23:
0b:29:08:ce:0f:f3:5d:8a:ba:76:c8:a0:d9:78:a1:a6:5d:7e:
95:4d:2c:3b:41:7f:32:3b:5f:a8:01:04:25:ba:67:2e:f2:f4:
23:f3:39:b2:02:3a:20:62:e0:36:f7:49:ff:62:5a:8b:7d:80:
f8:72:04:a4:18:cf:4f:f6:c2:42:7e:ea:c1:63:26:24:71:00:
a9:3a:04:ac:1d:ef:8d:e1:11:d0:2e:de:f8:03:61:63:6b:eb:
62:7c:37:01:f0:66:04:4f:8d:d2:37:39:66:0a:5e:43:c7:e5:
fe:24:76:5a:4b:81:2d:26:ce:a8:99:8c:83:1e:32:7b:23:af:
3d:73:6a:90
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICAhowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
RUQyRkQ2QUQ1QzVCNTY4N0RGNjE0QTI3NUMyRkM4NDhENEU5NDAeFw0yNDA4MjYw
NTI4MjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZDODk5QUFEOTJERjEx
NUUzNDU3OUIyMjY5MTM0MzI1NUZBQURGMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC84ccb+bVuge+9x2syOncGZtqgqnlF3vp5b+cDDvK0OHXY03vI
zgTFKG9OV1J+MTh5UbbQNvdKGQdmv8ELtrCpGIl3QA+z1tcTs3MDmrw/JmEEWmxZ
0It75g55Nger/c+2bK/USZCE2VoUEvWVY+edvRMvPc28T+ilaWpu9Ts/CoQQ7p4D
zdJNJJTNVsmHg6zfhKBJu8gc6A2bslzrxnwDz+CSuSq6BRJRZam1VnWNIPGd1yiJ
ZCn0SbCyc6YiFdhMmlZ3vH3UivdHOVj+t6fkpK6Q3rf1g3yOLBBzsKysfegpP99L
tQ4Bf6tVdNVp7qNomlos9KFKfyhFlMb2LrndAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU/ImarZLfEV40V5siaRNDJV+q3xYwHwYDVR0jBBgwFoAUKY7S/WrVxbVoffYU
onXC/ISNTpQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFROUy9L
WTdTX1dyVnhiVm9mZllVb25YQ19JU05UcFEuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0tZN1NfV3JWeGJWb2ZmWVVvblhDX0lTTlRwUS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1RUTlMvX0ltYXJaTGZFVjQwVjVzaWFSTkRK
Vi1xM3hZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWefzjAN
BgkqhkiG9w0BAQsFAAOCAQEAgKOeH2AQ+g1+rwvVep+866SjVXJUpUw+fGFEY7ul
GmyU5YgppPyNFWqm0Z+/bObo7W1+qS4hPCnkLi5a92sROon0zYEuT8/trmPP5/KC
54uu1ro+jKKQH9Fw+H32Ph/FUvNfM9kSyED5S2jh5IIb8Yg9nmDrpS5qEWxjTMMj
CykIzg/zXYq6dsig2Xihpl1+lU0sO0F/MjtfqAEEJbpnLvL0I/M5sgI6IGLgNvdJ
/2Jai32A+HIEpBjPT/bCQn7qwWMmJHEAqToErB3vjeER0C7e+ANhY2vrYnw3AfBm
BE+N0jc5ZgpeQ8fl/iR2WkuBLSbOqJmMgx4yeyOvPXNqkA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:02:07 2025 by rpki-client