Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/4UUH4M8rpJhX0sVMv7q4MrCDHzk.roa
File: 4UUH4M8rpJhX0sVMv7q4MrCDHzk.roa (raw, json)
Hash identifier: BeyPEBP5q5IWhCPtsO7ibimUMFOBx5+qtr3pKkREVNA=
Subject key identifier: E1:45:07:E0:CF:2B:A4:98:57:D2:C5:4C:BF:BA:B8:32:B0:83:1F:39
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0FA1
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/4UUH4M8rpJhX0sVMv7q4MrCDHzk.roa
Signing time: Fri 01 Sep 2023 08:29:22 +0000
ROA not before: Fri 01 Sep 2023 08:29:22 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17408
IP address blocks: 150.116.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4001 (0xfa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 1 08:29:22 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E14507E0CF2BA49857D2C54CBFBAB832B0831F39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4a:45:2b:44:1d:02:b1:7f:d5:95:44:64:1e:
9b:16:36:f1:1c:7a:8d:cf:8d:d1:bb:a6:f8:48:f8:
21:e9:af:93:2a:da:eb:9c:7f:de:40:35:f9:48:c6:
cf:24:c8:7a:5c:bc:ad:eb:18:f9:9e:72:cb:27:2e:
5e:91:f1:84:a5:c0:82:97:61:62:44:7c:02:62:31:
56:42:8b:26:06:2d:e3:a3:a0:a9:cb:4b:65:7a:f3:
68:93:9e:d3:e5:8b:d9:e9:3b:9c:f5:80:82:c6:6e:
f0:5b:5f:e7:17:01:43:2f:ef:23:be:cc:bb:7e:21:
92:34:11:33:fb:10:35:79:53:92:93:5b:7b:b0:96:
fa:dd:ca:e4:c3:73:81:50:fb:fb:02:ed:1e:b1:1a:
97:2f:c5:36:f0:25:92:ef:a9:f8:ed:fd:26:e4:28:
12:74:d3:1f:34:cc:73:16:28:4b:05:2c:3d:9c:72:
d5:4c:93:9a:87:3a:b0:85:d2:a0:fc:1f:4a:a5:2f:
54:c2:88:e5:1d:3a:ef:05:3d:08:1c:82:ef:50:9d:
de:f6:c6:aa:91:62:88:66:15:07:7c:a4:22:64:3b:
69:52:ed:f9:66:55:90:1f:bb:5c:f3:f0:d2:35:cd:
a4:73:ed:35:4f:8b:0e:4f:15:87:bb:19:25:e8:d4:
1c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:45:07:E0:CF:2B:A4:98:57:D2:C5:4C:BF:BA:B8:32:B0:83:1F:39
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/4UUH4M8rpJhX0sVMv7q4MrCDHzk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.119.0/24
Signature Algorithm: sha256WithRSAEncryption
82:97:fd:e2:ee:fc:c5:a3:dc:5f:15:ba:8c:d7:4c:0f:ed:28:
91:36:8d:dc:ca:e4:aa:a4:5f:67:be:9b:87:52:68:38:c7:fe:
0f:c9:fc:59:c7:e7:e6:33:4f:8e:13:e9:65:f8:cb:5e:2d:ce:
77:02:09:63:3d:09:02:25:93:a5:7a:f0:24:ff:93:1a:66:7a:
14:17:8f:76:ec:e7:6c:b5:63:62:d9:53:f2:84:4a:1d:4e:89:
24:5d:57:e6:99:bb:72:b5:d1:96:da:09:86:fd:58:41:8e:dd:
32:e7:81:5b:dd:ab:1a:71:cd:ff:fb:cd:8a:53:12:b9:37:d9:
3a:5a:a0:5f:77:64:3c:54:c4:59:08:aa:3b:11:51:6d:c6:57:
fd:aa:dc:8a:d3:fe:61:5d:1a:66:ae:d5:75:de:d2:20:d9:d5:
f9:b9:58:ff:e1:79:dc:20:6c:d3:bf:99:3b:4f:ab:4a:44:2a:
04:53:42:4c:e5:05:b8:db:42:67:bf:b8:7c:b5:65:fe:4a:4b:
44:29:c4:3a:79:c0:cf:65:a0:f0:6b:48:92:1f:03:8b:d5:8a:
9e:24:c0:d9:4e:84:97:46:c4:35:91:10:a0:2f:c7:08:83:43:
d2:07:a0:64:c6:78:36:97:cd:9e:48:d7:3f:fa:4b:57:3c:6f:
d5:d0:4c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org