Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/4gZZfydb0h2JXytlaD9S2vVnIWA.roa
File: 4gZZfydb0h2JXytlaD9S2vVnIWA.roa (raw, json)
Hash identifier: 7cWA1Jz9pkGHbYvUAMkwYGZUIrroVIBghFBbaIjoFSY=
Subject key identifier: E2:06:59:7F:27:5B:D2:1D:89:5F:2B:65:68:3F:52:DA:F5:67:21:60
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0FCA
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/4gZZfydb0h2JXytlaD9S2vVnIWA.roa
Signing time: Fri 01 Sep 2023 08:29:33 +0000
ROA not before: Fri 01 Sep 2023 08:29:33 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18049
IP address blocks: 175.111.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4042 (0xfca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 1 08:29:33 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E206597F275BD21D895F2B65683F52DAF5672160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:b0:9b:d8:19:b1:81:36:1b:67:2c:4f:c6:
cb:94:3d:1a:b1:99:c3:af:6b:2d:38:57:22:2d:1a:
d9:37:af:f4:e5:af:ba:f2:60:43:b1:dd:31:d4:a9:
f2:dc:82:8c:42:ea:0c:8b:97:00:ab:e8:21:5b:c6:
4c:5c:50:80:db:30:3e:dc:bc:a5:28:5b:d9:34:b9:
ab:ab:c7:fb:9b:30:a9:62:ae:0d:81:89:2b:1c:e2:
b0:fc:9a:ac:e0:47:b0:6f:2c:e3:c1:04:fe:be:83:
70:c9:f5:3b:6d:7b:bc:09:ee:59:32:df:4e:55:cf:
c6:8f:62:a1:36:fa:5e:77:cc:b2:34:87:50:91:6b:
8e:a4:65:d1:93:5e:77:f3:1c:5e:89:55:ef:1f:c5:
88:78:a3:51:e7:15:35:8f:a9:63:f1:d3:d1:9e:95:
9d:56:57:84:4f:2f:9e:23:d2:2d:21:21:23:c5:05:
59:35:c3:48:08:ad:40:15:75:4d:4d:b8:35:36:31:
62:ae:21:96:f9:cd:df:fc:01:fa:1c:a1:9f:51:02:
a3:97:d3:74:12:0b:3f:ca:da:76:61:bf:09:95:5b:
43:28:57:90:fd:93:b2:2e:40:17:e3:d6:1d:c1:72:
4e:68:3c:38:78:af:74:6c:5c:2a:7d:e0:85:cd:ec:
37:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:06:59:7F:27:5B:D2:1D:89:5F:2B:65:68:3F:52:DA:F5:67:21:60
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/4gZZfydb0h2JXytlaD9S2vVnIWA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.111.32.0/19
Signature Algorithm: sha256WithRSAEncryption
09:03:5d:66:be:37:48:7e:c0:30:00:1e:0f:16:75:0b:5f:1d:
62:0f:64:9c:2f:a7:ff:7c:40:24:c8:31:5c:5b:f6:7b:c6:48:
bc:98:ff:2b:78:d0:d2:f8:b8:42:b3:0a:0a:0c:ff:8c:f2:43:
2e:c7:cf:7d:b9:4e:a0:49:3b:f3:ea:47:0f:b3:39:4e:ee:64:
cf:35:fb:25:c7:e0:be:8d:f9:52:20:50:eb:07:93:92:ce:a1:
fe:24:1b:e8:29:59:ee:19:52:b9:88:a5:51:bf:ec:82:6e:73:
db:f2:c8:55:b1:aa:30:09:db:89:f1:ca:6e:ae:44:0a:54:77:
e5:1a:31:da:60:11:72:14:af:b4:ad:54:3e:60:d4:d7:35:09:
e6:c8:70:6e:97:d7:09:78:11:f9:f3:58:1d:eb:46:e0:93:5b:
c1:2a:68:18:8f:19:7d:f2:fe:09:5e:1e:6b:38:99:60:cd:c5:
00:61:db:60:42:9a:4e:a2:f4:06:be:4f:15:18:fe:f1:39:bf:
56:81:54:f2:01:fd:35:8e:6b:a1:58:34:a1:c7:e3:ac:65:5b:
bf:3b:b6:8d:f8:f5:75:96:00:32:c7:6c:ed:21:04:6e:07:c5:
b0:e9:78:e4:cb:9a:d9:8c:49:a1:a0:72:7a:eb:b1:43:1a:ea:
c9:f4:35:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org