Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASGC/01EK9WIb6rClsnhiVwc4jPLQG2k.roa
File: 01EK9WIb6rClsnhiVwc4jPLQG2k.roa (raw, json)
Hash identifier: tcQgKXt/P+MqKiYnScdpwvBGcoRgInBUtnUxoXvLAdE=
Subject key identifier: D3:51:0A:F5:62:1B:EA:B0:A5:B2:78:62:57:07:38:8C:F2:D0:1B:69
Certificate issuer: /CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
Certificate serial: 0772
Authority key identifier: 76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/01EK9WIb6rClsnhiVwc4jPLQG2k.roa
Signing time: Tue 29 Sep 2020 09:59:00 +0000
ROA not before: Tue 29 Sep 2020 09:59:00 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24167
IP address blocks: 202.140.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1906 (0x772)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
Validity
Not Before: Sep 29 09:59:00 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D3510AF5621BEAB0A5B278625707388CF2D01B69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:64:b7:03:8b:30:9b:4c:e6:1a:8c:26:b0:36:
51:e6:08:d6:1f:18:80:97:5e:3a:03:f6:f1:d2:80:
a9:dd:b2:3f:f5:c3:3f:c3:a6:55:ba:25:31:4d:b5:
ce:b7:77:6e:ab:65:51:90:60:a1:27:46:de:de:2a:
22:1d:b0:23:18:18:cd:54:75:6b:82:a1:e4:0a:18:
76:af:ba:b0:47:6e:2e:68:ba:6a:f5:db:5d:47:4d:
86:ca:a9:9a:13:63:f9:3a:bf:ca:14:1f:c9:df:49:
da:de:76:ba:26:0d:1d:ba:e8:4e:45:44:b6:6c:a1:
47:3a:37:3e:e5:3d:2c:a6:f7:33:db:13:75:bc:18:
c8:8d:69:5b:2f:c2:92:c1:2c:40:6e:a4:16:a8:dc:
88:e6:78:5f:c4:8f:7e:1c:e9:40:29:57:4e:5d:3c:
c5:9a:e8:25:91:7c:e8:79:0b:5b:32:24:66:dc:a3:
7a:59:26:d8:59:2a:76:76:3e:7a:43:16:49:16:fe:
fe:3c:33:05:be:6a:d6:e4:e4:ac:ed:27:86:77:f5:
50:6c:82:92:c9:58:d8:4e:b5:85:c2:ed:05:e2:9c:
fe:11:52:07:62:12:94:bf:4f:0e:02:48:8e:90:77:
4d:52:1e:72:05:e4:58:fd:f8:42:55:8a:2b:68:c5:
49:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:51:0A:F5:62:1B:EA:B0:A5:B2:78:62:57:07:38:8C:F2:D0:1B:69
X509v3 Authority Key Identifier:
keyid:76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/dg6p94M-3GNm_V4jpCa89iuwHmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/01EK9WIb6rClsnhiVwc4jPLQG2k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.140.160.0/19
Signature Algorithm: sha256WithRSAEncryption
49:2b:dc:7c:da:ba:66:85:a9:2b:29:da:3d:c0:1f:55:78:85:
4b:a4:0b:3d:4a:30:8f:48:d7:a6:62:36:29:18:37:03:8a:b0:
2c:8c:43:45:9a:af:d2:d9:41:b2:a2:8e:a5:43:00:e5:52:de:
77:18:d7:06:f0:58:c7:ff:cc:b5:3d:c6:c3:7b:ad:8a:59:11:
83:4f:a0:9f:30:bd:71:98:96:ea:cf:3e:98:a1:01:36:12:fb:
43:db:22:2c:4e:27:1c:50:be:2a:da:5d:0e:69:f3:e7:3c:02:
f6:f9:b2:b5:0f:9c:18:8d:b5:90:3d:f7:30:a2:f3:48:4e:bd:
0b:5e:a5:6e:7d:75:56:c9:1d:05:1f:c7:0e:c5:f6:10:f6:4e:
e8:1f:e9:1d:50:c3:2b:49:4c:91:c4:70:dd:63:4d:ec:72:0b:
b8:37:46:10:e3:a3:9f:67:aa:2d:eb:18:57:9f:44:93:dd:90:
57:75:ee:3d:8d:ca:f5:7e:09:da:fd:b3:7d:66:1a:73:e2:55:
10:2b:e2:04:c3:5f:0a:e6:ca:49:cc:35:64:98:15:4b:fd:b6:
c7:79:56:3e:12:e8:d4:5b:d3:9e:14:96:a3:d5:a4:5f:9b:28:
45:9d:98:4d:35:fd:a5:7d:fe:54:95:4e:b1:56:0f:cc:34:e8:
ca:72:62:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:08 2025 by rpki-client