Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/7NPvpIL_Qku96HBYTsYKfdh24y8.roa
File: 7NPvpIL_Qku96HBYTsYKfdh24y8.roa (raw, json)
Hash identifier: KLF1ac8vl3ah/nT9XMLtx7xS9uqVMq3UhUEfOabauBM=
Subject key identifier: EC:D3:EF:A4:82:FF:42:4B:BD:E8:70:58:4E:C6:0A:7D:D8:76:E3:2F
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0FBA
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/7NPvpIL_Qku96HBYTsYKfdh24y8.roa
Signing time: Fri 01 Sep 2023 08:29:28 +0000
ROA not before: Fri 01 Sep 2023 08:29:28 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 63199
IP address blocks: 150.116.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4026 (0xfba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 1 08:29:28 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=ECD3EFA482FF424BBDE870584EC60A7DD876E32F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:d3:88:4d:1d:af:8a:20:4e:09:89:4d:ba:
f3:2a:57:40:cc:11:b5:a9:cb:9a:24:f2:19:9b:a4:
3d:ee:40:6f:8e:fd:b6:18:a6:81:4b:f6:10:65:85:
80:17:fc:02:57:f7:4c:cf:2c:4d:78:05:ca:de:9d:
cf:f7:c2:8f:13:9d:fa:dc:9a:27:db:92:55:61:b1:
58:12:c1:3e:7b:68:07:d8:19:94:9d:29:c4:bf:fc:
63:48:2b:cd:37:6a:a1:08:63:6a:b4:70:d8:1d:97:
1c:b9:a4:d5:39:f3:8e:2d:8f:b2:e8:69:a6:8e:33:
65:0f:ae:fb:d5:3f:1e:9a:7f:d2:64:cf:21:5c:c0:
e1:eb:c3:21:c5:90:b0:02:30:75:b1:e3:42:fc:2f:
c4:1e:17:a7:0b:89:7e:02:8f:7e:4d:52:a6:cc:55:
00:17:f8:a0:90:f3:e5:1e:40:87:ae:aa:88:64:84:
d8:d9:84:58:2c:72:74:ac:48:59:c9:00:e5:89:54:
22:5e:98:68:31:00:9b:94:b9:58:e4:63:5c:8a:08:
47:d2:29:97:89:99:82:42:27:78:a2:de:4d:1e:4a:
8f:46:35:75:54:26:00:41:bd:6b:e1:2d:58:07:58:
33:e7:71:23:9a:ee:9f:71:f4:e5:06:5f:fa:31:e1:
48:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D3:EF:A4:82:FF:42:4B:BD:E8:70:58:4E:C6:0A:7D:D8:76:E3:2F
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/7NPvpIL_Qku96HBYTsYKfdh24y8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.3.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:60:eb:db:f9:29:9f:b9:4c:86:44:22:8a:45:db:50:6a:3e:
01:16:ce:c0:cf:cd:a1:16:ef:27:d9:49:92:97:ea:2e:cd:5a:
7c:e5:3b:a3:2a:d2:44:de:e3:b4:1b:a9:0a:77:20:4d:38:5b:
d1:36:22:85:0b:21:3e:23:72:a8:0e:11:27:0e:21:7a:37:93:
ea:11:a3:55:d7:3a:a6:7e:49:03:a5:f8:70:aa:1a:26:10:dd:
66:7b:99:a9:e3:85:0d:e9:7d:62:8c:57:2a:73:a3:e2:48:b0:
dd:18:16:d1:0a:91:47:79:af:1a:b3:eb:f1:02:3c:13:82:e9:
8f:dc:bd:4a:1c:6f:ba:ec:91:d3:17:d0:2e:b6:da:37:94:1d:
9e:8a:99:1f:ff:e0:e1:9d:4c:70:88:2a:43:49:34:39:27:a7:
a5:76:85:ed:f2:30:70:f8:bf:47:66:3d:72:45:98:6d:4a:0d:
9a:5f:1c:50:f7:2a:ab:42:76:f9:05:5c:8e:08:c6:d3:84:01:
df:41:80:a9:9b:81:7e:06:0e:ed:08:db:b7:15:a4:27:1e:b6:
7a:54:3c:e2:49:8c:c0:8c:5d:c6:28:68:5d:5c:1b:bc:7f:9d:
19:45:d8:16:dd:7a:93:08:bd:36:bb:cb:71:18:d4:68:e2:e0:
69:19:87:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org