Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/-i8X8eTEm6-R3c0Q0Tkqk1kLcwU.roa
File: -i8X8eTEm6-R3c0Q0Tkqk1kLcwU.roa (raw, json)
Hash identifier: cU0gEWNwT+r/mDm2vrc18MfZUzWt5nv33Et0aSPlMvo=
Subject key identifier: FA:2F:17:F1:E4:C4:9B:AF:91:DD:CD:10:D1:39:2A:93:59:0B:73:05
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0FB0
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/-i8X8eTEm6-R3c0Q0Tkqk1kLcwU.roa
Signing time: Fri 01 Sep 2023 08:29:25 +0000
ROA not before: Fri 01 Sep 2023 08:29:25 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131627
IP address blocks: 150.116.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4016 (0xfb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 1 08:29:25 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FA2F17F1E4C49BAF91DDCD10D1392A93590B7305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:63:cc:f7:25:29:86:c7:89:13:b9:0e:60:
63:40:e7:5e:9c:88:ab:84:10:5c:d1:64:e8:ba:a4:
46:b8:71:b4:a4:97:77:f5:c7:54:91:13:27:3b:48:
c7:8b:da:1f:a0:9e:7e:23:96:69:b7:0a:32:06:03:
92:5e:83:74:a1:9d:19:9f:74:14:4e:55:16:56:f3:
1c:40:62:3c:6b:06:b0:78:e5:d1:a7:89:25:a0:6e:
66:cf:16:9a:6f:d0:5c:a3:1c:2d:29:ba:39:29:3f:
49:6e:95:3c:82:0a:8b:04:1a:08:de:2d:2f:9d:de:
88:ff:78:e8:69:c5:fc:61:56:12:4d:ba:5e:01:a5:
a8:4a:fb:e0:a9:00:b8:ab:29:8a:20:c1:43:3d:3f:
e7:06:e9:3e:7f:91:61:cc:66:c6:24:6d:e6:8c:3c:
8a:35:86:10:1e:57:e3:20:69:81:c4:d6:4a:cc:4a:
22:94:87:a6:56:57:eb:11:97:31:15:3a:1a:b4:fe:
97:a5:aa:0a:d5:a4:0c:2e:5a:cd:1e:30:8c:c1:b8:
58:1e:9e:18:aa:fd:d4:24:d4:09:ab:66:f2:97:40:
71:2c:44:76:1c:13:1f:75:9d:fa:ff:cc:17:41:52:
70:21:36:4c:aa:d1:f2:d6:27:b8:51:5e:cf:ad:1c:
11:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2F:17:F1:E4:C4:9B:AF:91:DD:CD:10:D1:39:2A:93:59:0B:73:05
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/-i8X8eTEm6-R3c0Q0Tkqk1kLcwU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.32.0/20
Signature Algorithm: sha256WithRSAEncryption
01:0b:41:03:5f:cd:f4:4e:8e:aa:2e:9b:7c:36:78:50:60:57:
e1:22:9b:1f:2c:f5:da:e3:be:7b:d0:f4:13:c7:53:fd:2d:a0:
d6:9e:75:b8:f3:a5:79:bb:fc:a0:3a:63:99:81:32:51:a2:8f:
e8:10:72:12:dc:96:51:cf:3b:a9:c4:3a:cc:37:c7:36:14:aa:
e0:39:be:f8:e0:c3:9d:50:96:ef:ec:41:c5:d0:aa:20:55:ef:
f0:a9:d9:ac:b7:3d:2d:41:9f:27:f7:b6:cf:8e:3b:b4:69:9e:
54:6b:4f:25:ff:45:f4:08:9b:94:ff:89:a8:13:e2:f9:fa:9a:
6b:9f:72:97:61:bc:db:09:79:0d:bf:2b:0c:9e:d1:f0:62:61:
07:b8:5b:66:6c:36:eb:12:bd:73:b8:46:e1:11:83:e9:2c:50:
1e:3a:24:23:f6:27:b6:65:75:30:1c:f6:1c:99:b2:d8:bc:2e:
6d:4b:1a:a3:80:76:ee:04:91:94:38:1f:d9:34:b0:e9:0e:7b:
00:e7:63:fd:a2:0e:43:bb:dd:f3:7a:3e:11:34:18:9c:cc:66:
02:0b:80:23:34:7e:8c:09:51:9a:34:58:2f:4c:83:c0:c8:dd:
3f:08:cf:18:52:ef:17:a9:70:56:20:6e:a7:71:e3:07:4d:2b:
0a:2f:d5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org