Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/5AtqSHFctAqT5nfF1TGk1zBxTWE.roa
File: 5AtqSHFctAqT5nfF1TGk1zBxTWE.roa (raw, json)
Hash identifier: 8LOEGqX1rUj22ZFFP0WCxvfrkyBZ7jrnd9Q00xV5RtU=
Subject key identifier: E4:0B:6A:48:71:5C:B4:0A:93:E6:77:C5:D5:31:A4:D7:30:71:4D:61
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0F72
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/5AtqSHFctAqT5nfF1TGk1zBxTWE.roa
Signing time: Fri 01 Sep 2023 08:29:09 +0000
ROA not before: Fri 01 Sep 2023 08:29:09 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131627
IP address blocks: 150.116.170.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3954 (0xf72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 1 08:29:09 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E40B6A48715CB40A93E677C5D531A4D730714D61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:4c:2d:b5:68:d8:ac:5a:36:8f:8e:ae:ef:
bd:0d:03:68:c3:00:27:11:aa:02:ce:91:dc:33:86:
10:e2:3f:8a:0c:94:6e:7c:e2:d6:a5:2d:21:d7:c5:
bf:1f:df:82:cc:ee:66:21:83:7c:98:f0:31:08:4e:
e3:b3:9f:c7:ff:bf:a6:d0:b9:52:88:cc:53:53:7b:
64:51:81:40:4c:63:85:24:c5:cf:aa:99:3e:21:62:
30:7a:ff:d8:aa:6f:63:c4:48:ae:c4:3f:64:66:51:
09:f8:8d:20:6f:35:aa:fe:21:cf:ed:fa:f6:d5:e6:
0e:bc:a6:ed:28:41:cf:db:b1:3e:76:1a:b8:7f:e2:
b5:75:76:79:cb:e1:b1:41:38:df:51:70:2c:8d:57:
42:0c:3f:2e:6e:4a:1f:e6:5d:73:da:e6:01:e2:5c:
89:2a:59:12:c2:45:90:2f:4f:2b:8a:94:ba:a3:f8:
85:de:4d:16:e5:d1:26:bf:ab:52:ac:89:09:cc:1e:
2e:c9:b4:ce:8b:d4:43:22:34:0e:45:a8:39:ad:c3:
5e:ce:94:65:27:43:dc:13:60:64:d2:9f:94:12:73:
42:90:28:0a:9d:0a:94:11:d0:7e:c8:66:64:78:6d:
65:94:03:bf:e2:91:6b:76:41:c6:bf:5b:2f:87:bc:
a0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0B:6A:48:71:5C:B4:0A:93:E6:77:C5:D5:31:A4:D7:30:71:4D:61
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/5AtqSHFctAqT5nfF1TGk1zBxTWE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.170.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:4d:2e:49:2b:57:47:c3:f8:2d:98:42:45:fb:e9:bb:58:78:
23:46:e6:44:82:99:58:6d:56:a8:16:2c:ab:28:03:4a:12:2e:
63:0c:55:76:af:a1:86:08:6d:2d:bf:4d:a0:a9:94:af:be:fe:
e4:1e:c8:40:d6:ce:c4:73:44:f1:df:c3:e5:ff:61:3b:8d:67:
be:7f:3a:e3:75:9d:ac:eb:52:10:4b:77:32:51:3f:43:37:72:
ba:d6:15:b2:9e:4a:ea:6e:d7:ae:ac:f7:b3:29:a0:b8:5d:b7:
e5:ba:e7:55:9f:ca:19:5c:d8:e4:99:68:bf:de:23:5f:22:f3:
d2:7d:ef:5c:39:de:1c:50:06:03:5c:53:b8:92:86:74:33:55:
8d:74:05:17:a8:e3:c4:3b:cf:9a:79:1c:a3:eb:31:ac:2c:d8:
19:df:c1:87:0c:fb:24:7a:54:18:71:f9:d0:34:9f:e0:0b:fd:
49:a6:80:ef:11:71:2b:6a:9a:3f:e6:92:b4:ee:d4:51:9c:c4:
9b:63:52:a2:22:9c:bb:e9:c1:56:c8:1c:8a:b8:70:0a:37:ab:
e1:40:a8:ae:6e:61:cb:1a:41:16:ff:1b:4c:8d:9e:39:42:5c:
0e:ab:c3:5a:d0:13:22:c0:96:09:ee:38:9c:2d:3a:dd:d7:59:
38:8c:5c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org