Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/3fr9Wij-4miulUaTz4iK3kSZVhE.roa
File: 3fr9Wij-4miulUaTz4iK3kSZVhE.roa (raw, json)
Hash identifier: nvk6C/hhqGzamKGTmdkDhz9ADUWyD2f/0jVR6mBJ5to=
Subject key identifier: DD:FA:FD:5A:28:FE:E2:68:AE:95:46:93:CF:88:8A:DE:44:99:56:11
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0F9A
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/3fr9Wij-4miulUaTz4iK3kSZVhE.roa
Signing time: Fri 01 Sep 2023 08:29:20 +0000
ROA not before: Fri 01 Sep 2023 08:29:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131607
IP address blocks: 150.117.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3994 (0xf9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 1 08:29:20 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DDFAFD5A28FEE268AE954693CF888ADE44995611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c8:a6:dd:12:38:57:56:8b:6e:cb:48:d6:33:
b6:19:4c:80:f9:89:b8:d4:32:51:16:d3:b6:e7:df:
bb:3c:f5:f9:e2:95:4a:51:31:f4:44:2a:43:fe:d7:
46:af:2a:04:2a:82:23:f3:5e:8e:32:81:90:72:bd:
07:c9:8e:9b:ac:55:56:04:cf:0e:d3:53:8c:ec:c5:
a4:24:8b:fc:cf:62:92:a6:52:06:25:3c:b2:75:5c:
6a:12:91:cd:73:f1:fb:f0:ee:3b:7c:13:e9:e6:1b:
08:a9:60:4b:fc:00:8a:5f:ee:00:79:28:c6:1a:9b:
a0:35:93:33:1b:42:5b:c7:a9:d9:63:9d:4d:44:ed:
32:4c:e2:47:d8:53:1a:f3:46:dd:d0:0c:0a:b1:7c:
35:76:82:b3:36:c8:de:dd:81:12:29:fd:fa:85:0f:
b5:91:6e:43:04:3c:12:5b:e1:4d:3a:7a:dd:77:11:
44:36:29:af:c3:06:e6:11:f7:ca:b7:41:bc:7e:53:
d2:03:1b:28:c8:c2:a4:dd:25:62:da:fe:b0:2c:59:
78:dd:8b:5d:bb:dd:c2:5e:ef:ae:95:bd:34:e2:7b:
54:1f:98:aa:dc:15:bc:84:ed:6f:a5:f2:0a:ad:8b:
f2:10:6d:c7:7b:70:c6:c9:b1:f0:4d:c9:e3:fc:4a:
8f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FA:FD:5A:28:FE:E2:68:AE:95:46:93:CF:88:8A:DE:44:99:56:11
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/3fr9Wij-4miulUaTz4iK3kSZVhE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.80.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:05:35:e2:c9:e8:c6:15:93:6e:02:67:41:e7:c9:65:bf:54:
73:8a:e2:54:37:10:b7:c1:35:7f:85:3c:09:71:11:7b:80:1a:
9f:b5:71:bf:74:e8:17:d2:0b:70:9b:ec:ce:ef:b5:2e:5b:ad:
fb:de:14:a7:f9:81:b7:da:eb:dd:34:88:46:94:24:b5:e1:94:
61:fe:8d:3a:19:f4:5e:ad:0d:5f:ee:05:a5:59:87:a3:9f:39:
9f:50:f1:bb:8f:2a:7a:06:0c:f2:b0:7e:4e:c8:91:9b:d0:6f:
9f:81:96:e9:79:94:01:e6:13:b4:b2:5a:e4:4c:e0:41:d5:c9:
a4:4e:e1:15:b1:e1:f8:e1:60:46:e1:72:6e:e3:69:f5:d1:c2:
fc:1d:ea:d4:68:42:ca:fe:ee:4f:ee:fd:e2:a2:cc:54:66:c0:
be:74:00:74:35:85:d0:ca:d6:a2:82:a4:fd:a4:68:74:cb:39:
f8:28:6e:60:c8:13:c5:88:30:fe:63:0d:fd:ec:84:1a:7c:a1:
34:0e:f0:d6:57:ca:bd:86:79:61:e4:62:d6:92:ff:6b:04:0b:
49:d9:2e:e8:7b:7c:1b:86:54:ff:8d:34:a9:69:35:82:a7:59:
9c:99:88:a9:31:4f:7d:a0:8e:69:c9:4c:f1:17:cd:9b:0f:2e:
c5:d7:a0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org