Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/3FU4gX3ffjhiWGJFrszfvPquhxQ.roa
File: 3FU4gX3ffjhiWGJFrszfvPquhxQ.roa (raw, json)
Hash identifier: Dv6B8OadEpgh+IewQ1PB1xJfgcA7l39jOmIiavZoqIw=
Subject key identifier: DC:55:38:81:7D:DF:7E:38:62:58:62:45:AE:CC:DF:BC:FA:AE:87:14
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0C58
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/3FU4gX3ffjhiWGJFrszfvPquhxQ.roa
Signing time: Fri 01 Sep 2023 08:26:27 +0000
ROA not before: Fri 01 Sep 2023 08:26:27 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18429
IP address blocks: 27.147.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3160 (0xc58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Sep 1 08:26:27 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DC5538817DDF7E3862586245AECCDFBCFAAE8714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:71:9e:a0:ac:06:0f:99:72:8d:c9:2d:da:01:
fa:67:cd:ec:ec:d0:ef:94:90:b7:08:4e:23:8f:21:
d2:83:35:3d:02:67:fa:b8:7a:06:52:ee:de:2f:a2:
5d:cc:54:26:d6:6d:83:b7:f4:41:a1:c1:47:d8:50:
d4:62:19:ad:7a:5a:7d:53:3c:e3:27:b8:ab:92:8f:
02:c8:de:69:f6:2f:e2:ae:69:2d:05:1c:dd:e5:6c:
06:de:7a:1b:27:b4:25:e1:aa:35:ae:09:6c:d8:b8:
bd:b4:2b:21:4b:6a:13:16:ac:ef:ca:4b:ac:92:4a:
c9:62:be:49:ae:9b:ec:8a:01:88:72:e0:55:b3:4b:
7a:4b:5a:2e:17:dc:f7:ce:a9:95:ff:42:da:f5:6b:
16:20:de:51:0c:8c:63:52:a0:93:d1:88:d7:27:07:
be:ca:95:5e:2c:4c:06:76:27:8a:96:b3:ff:3e:a0:
71:d9:17:37:04:c6:ce:78:42:b0:4f:f6:f1:f4:2e:
c6:15:d2:3a:ad:13:03:92:95:97:9a:e5:b6:e3:47:
69:3b:64:84:bd:99:ed:0c:07:87:03:2f:4f:66:a4:
94:7a:c7:58:31:8f:64:ef:59:dc:47:69:ae:9a:e0:
c2:31:f9:46:80:de:2f:1b:c0:b6:0d:cc:7a:c6:d9:
9f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:55:38:81:7D:DF:7E:38:62:58:62:45:AE:CC:DF:BC:FA:AE:87:14
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/3FU4gX3ffjhiWGJFrszfvPquhxQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.147.32.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:1f:cd:7c:c0:f0:e8:02:f3:89:b6:c1:68:6b:b3:a4:b4:ca:
56:3e:bc:17:80:70:c6:d3:3e:36:7e:0a:b1:8a:7c:f4:49:13:
95:6b:61:d4:27:27:2f:e6:97:bd:14:a4:d6:15:30:f9:c7:1a:
0a:7f:12:80:8f:20:86:0c:c3:55:66:30:06:f4:d8:1d:71:5c:
9d:71:25:46:bb:b8:24:b6:09:92:b3:dc:10:55:d6:4e:13:3b:
c2:5e:9f:bf:7e:5a:c1:46:61:4c:fe:fc:fe:28:9d:27:97:20:
59:08:87:1f:dc:b4:98:81:e9:7d:27:2a:cc:9b:e6:bc:0d:e9:
1f:2d:10:b5:37:4f:56:df:54:e6:f2:d4:dc:87:b9:f7:25:5a:
2b:19:7d:32:53:54:bd:63:75:71:b6:b3:1a:16:aa:c5:f5:da:
86:58:6d:ce:5f:80:74:82:22:45:e8:47:ae:ce:cb:ff:26:82:
ae:1e:d7:f6:55:be:18:cd:3e:32:b4:50:ad:e9:6f:3f:c3:64:
5a:dc:4a:1b:2c:5e:3d:d8:27:79:3c:93:7e:81:31:8a:aa:c4:
ea:22:34:ea:01:07:cf:41:91:99:1e:50:40:c1:1b:12:be:59:
4e:01:25:3a:a6:ef:b8:d6:8b:32:bf:9e:31:87:02:a9:95:b3:
59:f4:70:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org