Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ACEREDC/8fTBnM4CCTHTdc8GX4SgxlBaxrc.roa
File: 8fTBnM4CCTHTdc8GX4SgxlBaxrc.roa (raw, json)
Hash identifier: ond9W0u35DCyJDo+8uYZMAJi4Y43qr+J53xDwuDP8yM=
Subject key identifier: F1:F4:C1:9C:CE:02:09:31:D3:75:CF:06:5F:84:A0:C6:50:5A:C6:B7
Certificate issuer: /CN=646D69C88D096F7D39220D288688914729045EF8
Certificate serial: 058F
Authority key identifier: 64:6D:69:C8:8D:09:6F:7D:39:22:0D:28:86:88:91:47:29:04:5E:F8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZG1pyI0Jb305Ig0ohoiRRykEXvg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ACEREDC/8fTBnM4CCTHTdc8GX4SgxlBaxrc.roa
Signing time: Fri 01 Sep 2023 07:48:42 +0000
ROA not before: Fri 01 Sep 2023 07:48:42 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17420
IP address blocks: 211.79.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1423 (0x58f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=646D69C88D096F7D39220D288688914729045EF8
Validity
Not Before: Sep 1 07:48:42 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F1F4C19CCE020931D375CF065F84A0C6505AC6B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:42:05:e4:d6:cc:9b:fa:ab:ad:96:46:f3:56:
43:af:9a:86:49:a2:60:ef:f1:9b:b4:49:44:9c:e4:
34:67:c2:9c:a0:58:96:e2:e9:94:ae:28:f1:e7:33:
b1:79:9c:18:65:bb:80:39:d2:62:c6:a8:0b:f4:ee:
fd:62:57:3a:ce:5a:8e:d5:09:21:56:a8:0e:f1:4f:
9a:25:0c:25:b2:7b:1d:22:50:ec:93:ab:56:78:50:
1d:04:d8:c6:c3:fa:75:63:6e:3d:40:fa:5b:91:4e:
9f:9e:21:1d:0f:55:f7:e5:a1:5f:1c:e3:8b:dc:f5:
4a:cd:b1:06:13:d7:09:ef:ae:fa:ef:83:1b:58:d8:
eb:21:9f:93:58:c4:06:2c:b6:85:dd:3a:13:b3:84:
91:ef:77:8f:58:34:bd:0a:16:7c:5d:e0:1f:21:58:
5b:1a:51:b0:95:73:8a:8c:21:c3:4e:d1:80:2b:99:
6e:c0:b3:76:70:a3:a7:5f:a2:a2:48:01:39:b9:92:
7b:30:41:4b:87:95:aa:75:75:b7:2d:06:0f:53:e0:
f3:75:92:a6:0a:b6:bc:63:88:06:9e:ce:cf:10:6b:
83:a7:75:86:85:ba:c1:a0:1f:ff:9b:37:a7:ea:ea:
6e:b3:08:1a:6f:21:53:2e:84:62:88:9a:3e:f7:7f:
fb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F4:C1:9C:CE:02:09:31:D3:75:CF:06:5F:84:A0:C6:50:5A:C6:B7
X509v3 Authority Key Identifier:
keyid:64:6D:69:C8:8D:09:6F:7D:39:22:0D:28:86:88:91:47:29:04:5E:F8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ACEREDC/ZG1pyI0Jb305Ig0ohoiRRykEXvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZG1pyI0Jb305Ig0ohoiRRykEXvg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ACEREDC/8fTBnM4CCTHTdc8GX4SgxlBaxrc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.79.192.0/20
Signature Algorithm: sha256WithRSAEncryption
90:7b:00:43:bc:36:df:f6:b9:28:dd:31:ae:b2:34:5e:fe:c8:
6f:11:c0:02:05:cc:15:8c:fb:04:7a:42:b0:91:2a:1f:1e:67:
dc:bb:c2:4b:2b:d3:e0:f0:2a:f6:59:56:d3:b5:ea:a3:9a:c0:
82:16:49:e4:68:9d:3e:26:09:ec:cd:d3:01:bf:44:2b:46:07:
10:22:f7:87:d8:fd:ca:af:f4:00:79:5a:73:b8:b3:cf:8c:1a:
bc:f1:99:db:b6:58:23:91:d9:60:dd:8f:cd:2b:d7:96:95:ad:
0b:6f:37:70:21:ac:c2:0e:4a:1d:62:c4:5b:6b:b5:2c:a8:bd:
64:be:ec:4b:22:a3:5a:9e:d7:f3:03:f0:74:99:df:bf:01:e4:
c5:29:37:b3:dc:9c:80:c6:fa:b6:f6:e9:67:22:58:45:2f:90:
38:89:2b:50:d8:05:83:fe:cd:1a:6a:16:95:f2:6c:52:c3:13:
ea:23:6c:bc:1d:a1:c6:53:62:5a:fb:fa:a0:f6:94:06:c3:da:
fc:21:9a:48:c5:e2:a9:3b:5b:ef:15:6c:0d:a2:f3:ac:5d:2e:
7d:d8:1d:b2:27:6c:e6:36:58:d9:7b:b1:9b:fc:c6:0c:7d:ea:
5b:7b:af:9e:85:d2:1f:6b:17:10:29:f4:0e:36:5d:a8:72:0a:
d0:44:ec:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:17 2024 by rpki-client on console-fra.rpki-client.org