Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASNET/kJy9tBzWEl86wcGTRie7y_cWU68.roa
File: kJy9tBzWEl86wcGTRie7y_cWU68.roa (raw, json)
Hash identifier: 4OWo4CZy3g3rHBkY6AA8OImSlXaz4iH8Pzks0xxwQSE=
Subject key identifier: 90:9C:BD:B4:1C:D6:12:5F:3A:C1:C1:93:46:27:BB:CB:F7:16:53:AF
Certificate issuer: /CN=70984F008CA28F6475DB426353BFD1C433D8BC1A
Certificate serial: 0B2E
Authority key identifier: 70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/kJy9tBzWEl86wcGTRie7y_cWU68.roa
Signing time: Fri 01 Sep 2023 08:24:03 +0000
ROA not before: Fri 01 Sep 2023 08:24:03 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9264
IP address blocks: 202.169.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2862 (0xb2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70984F008CA28F6475DB426353BFD1C433D8BC1A
Validity
Not Before: Sep 1 08:24:03 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=909CBDB41CD6125F3AC1C1934627BBCBF71653AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:f9:ec:90:bc:03:17:90:81:5c:ed:29:0d:
69:44:70:b6:2b:7d:e1:fd:63:7c:75:46:19:dd:73:
8f:1a:0c:b6:10:24:e6:8d:b0:87:17:f8:91:61:cb:
62:42:57:16:78:eb:16:5e:6b:10:a3:c0:ae:19:76:
0f:99:5d:ff:7f:0b:80:3f:cc:3f:5f:1f:00:b8:74:
62:d2:94:2a:78:e0:c8:22:4a:29:1a:eb:24:f5:f4:
34:8c:4d:e6:77:2b:49:a5:28:c8:16:e9:65:5d:23:
49:19:aa:47:a7:ae:51:1c:c8:1d:a7:6c:99:09:f2:
55:3f:14:a1:7a:c7:2f:b3:a2:9b:7a:89:74:07:38:
a9:31:10:9d:cc:ac:a5:b6:63:cf:67:85:e7:bb:07:
31:02:bf:8c:46:c5:56:fd:84:01:58:ff:67:d2:44:
9c:4b:a4:05:a5:ea:8c:91:3d:22:b0:db:70:26:7a:
6c:b0:06:1b:c2:52:f4:7c:90:74:cd:26:bc:a6:66:
f9:5a:de:0e:cf:88:31:ac:1c:44:71:9a:5d:2d:f9:
f6:2e:8f:a5:a7:51:3e:65:17:8d:66:bd:c0:64:f9:
af:27:ab:c2:13:b1:0b:53:20:24:56:44:40:5e:f0:
ba:c9:7d:8e:66:c4:e1:dd:b9:f7:85:3a:68:f4:81:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9C:BD:B4:1C:D6:12:5F:3A:C1:C1:93:46:27:BB:CB:F7:16:53:AF
X509v3 Authority Key Identifier:
keyid:70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/kJy9tBzWEl86wcGTRie7y_cWU68.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.169.160.0/20
Signature Algorithm: sha256WithRSAEncryption
29:9f:d7:c8:e9:6d:bd:e5:33:df:99:f0:08:3e:94:d0:4c:f1:
50:77:5a:df:45:76:4c:5e:f2:91:55:fe:c3:1f:c4:af:9a:d1:
be:d0:05:8d:69:08:db:53:51:b3:95:5c:35:6d:ba:61:1e:00:
dd:b8:96:85:5c:f2:0f:ef:1c:de:93:64:6e:bc:1b:ca:18:e4:
a4:58:e1:fb:50:1e:d9:40:c0:81:a8:94:dd:aa:13:9f:6a:65:
9a:76:04:61:8f:a4:e4:5e:63:d3:d4:c7:82:8f:9a:2c:9b:e6:
73:aa:85:18:f1:19:2d:e5:dd:8c:c4:a7:e4:f7:9a:b2:66:ee:
9c:14:a6:9c:0b:f9:ac:02:70:2f:59:8f:f9:8a:d9:c2:e5:71:
25:64:39:78:20:5e:55:48:3d:eb:7b:c0:6d:26:2b:5b:25:17:
54:17:fa:77:04:5b:7d:8a:a6:9c:99:83:4a:b8:d2:9e:e6:8d:
67:74:6c:bc:ef:a8:1a:e9:62:b7:75:da:96:b1:6d:e5:27:1b:
64:6b:5d:c2:f9:24:29:c2:c2:4a:8d:e1:b2:2c:62:6d:6c:f7:
8f:e3:f6:d3:06:28:3c:87:f3:7b:c3:22:be:42:14:8a:db:cc:
cb:96:f8:6f:97:7e:0e:3c:a7:dc:e5:a9:e5:69:e3:68:6e:23:
5b:f3:6f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:10 2024 by rpki-client on console-ams.rpki-client.org