Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/4g4O9f0sbG16PEan1hV0h7uFPTQ.roa
File: 4g4O9f0sbG16PEan1hV0h7uFPTQ.roa (raw, json)
Hash identifier: 3UnNcBinju5Cw3l3e7dHrr9IuFPiynSAZxTrLWKKjRw=
Subject key identifier: E2:0E:0E:F5:FD:2C:6C:6D:7A:3C:46:A7:D6:15:74:87:BB:85:3D:34
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0C67
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/4g4O9f0sbG16PEan1hV0h7uFPTQ.roa
Signing time: Fri 01 Sep 2023 08:26:31 +0000
ROA not before: Fri 01 Sep 2023 08:26:31 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18429
IP address blocks: 27.147.0.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3175 (0xc67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Sep 1 08:26:31 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E20E0EF5FD2C6C6D7A3C46A7D6157487BB853D34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:92:c9:ae:40:64:35:9d:e4:d5:e6:40:c5:
73:53:b0:8e:00:d4:a2:59:cf:53:1b:8b:2e:e2:3d:
04:d4:7a:d0:0c:7b:f2:42:e1:c6:66:5c:b7:2c:8a:
20:05:6f:4f:87:99:84:d3:24:c6:d2:04:45:12:77:
9a:88:d9:f5:ab:d6:ba:fa:6c:f5:87:8d:8c:76:40:
b6:7b:1c:be:10:6b:65:1f:05:15:64:d4:87:d2:97:
ba:5a:f0:a1:38:95:d5:19:4f:4e:75:2a:50:5e:f7:
b7:96:3c:9b:9c:d1:29:0b:03:a4:41:03:1e:f0:fd:
ef:f4:b6:32:16:60:3e:55:90:39:5a:9d:ea:48:ae:
89:d1:87:99:4e:51:34:15:60:f5:5f:31:9a:a0:f7:
70:ab:1e:4c:37:d4:02:70:a2:1e:08:72:28:f4:79:
3a:87:2a:d7:8f:7f:eb:92:fd:9c:59:1f:a8:c3:1b:
62:ad:85:31:63:6f:71:f2:0c:71:6d:12:4f:5a:51:
42:97:90:8b:2e:40:82:71:71:ab:e1:5c:87:98:f5:
37:db:fb:65:a7:cb:b3:0e:e0:38:f9:7f:d7:76:f2:
0c:34:78:a8:fc:8e:42:fe:d6:a9:74:98:94:98:93:
78:9e:d5:86:4d:15:2b:25:32:24:1f:9b:05:67:31:
34:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0E:0E:F5:FD:2C:6C:6D:7A:3C:46:A7:D6:15:74:87:BB:85:3D:34
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/4g4O9f0sbG16PEan1hV0h7uFPTQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.147.0.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:89:66:a9:6b:53:22:41:74:44:4b:e7:66:a1:66:ab:2f:a0:
b8:71:a8:fd:81:97:ce:6d:23:2d:85:e1:68:f5:74:4d:91:57:
60:67:57:ef:21:36:f8:2f:57:c9:04:49:a9:d8:b4:57:36:6c:
02:f4:e0:4c:c1:c7:6e:9d:02:85:97:70:be:58:d7:4e:61:7b:
14:d3:d6:a3:fd:cc:c9:96:86:e1:d3:4d:dd:9c:28:ed:2b:4f:
b5:d3:81:d8:62:25:14:8b:fa:20:77:4a:23:72:95:ea:3f:3c:
e8:c8:2f:aa:dd:8d:1d:76:af:45:72:9d:30:51:d3:ff:34:06:
4c:60:19:4b:29:f6:c6:9d:31:93:e6:79:66:2d:a6:db:14:79:
a0:ac:44:c0:a7:87:6b:42:e9:4c:a1:a2:8b:24:c2:15:dc:9b:
1a:17:f7:d6:b7:66:72:ac:c9:1e:9a:8b:14:1d:29:70:2b:a5:
e2:fe:c8:4e:0e:30:2c:23:ec:5e:55:bd:6e:97:a6:fa:87:76:
31:1e:b9:52:e5:6f:83:ef:1a:86:af:71:f3:aa:bf:c2:19:9b:
a4:f0:5c:b7:59:7b:de:3a:1c:3a:61:43:95:d3:09:46:85:00:
4b:a6:78:7e:9f:b1:eb:2d:de:83:90:6b:ad:bd:50:e6:e5:e2:
a8:02:a9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org