Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/C9l_dx5i7fL-g_dLY5pZPM9EPLU.roa
File: C9l_dx5i7fL-g_dLY5pZPM9EPLU.roa (raw, json)
Hash identifier: lGrN5wOhv/L2lBsMG3hle79CWN1DCSJpu+Ur1moMdZA=
Subject key identifier: 0B:D9:7F:77:1E:62:ED:F2:FE:83:F7:4B:63:9A:59:3C:CF:44:3C:B5
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0FCE
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/C9l_dx5i7fL-g_dLY5pZPM9EPLU.roa
Signing time: Fri 01 Sep 2023 08:29:35 +0000
ROA not before: Fri 01 Sep 2023 08:29:35 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18419
IP address blocks: 118.150.232.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4046 (0xfce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 1 08:29:35 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0BD97F771E62EDF2FE83F74B639A593CCF443CB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cb:55:c3:bf:b7:24:34:0f:bb:12:a7:ef:38:
3c:ee:1a:b6:1f:e8:be:13:7e:fc:97:5a:05:6e:10:
eb:8a:6a:e9:f8:2c:8c:54:46:4b:b9:8a:3f:54:43:
bc:7b:13:d8:07:ea:e5:34:f2:d8:7e:ab:c5:6b:f2:
56:40:59:86:15:54:c7:93:08:ec:b8:86:81:3d:ed:
93:0e:55:d6:d5:ab:bf:0c:a5:83:4d:ca:6a:60:65:
75:a1:9b:7a:c1:14:8b:73:b4:72:74:51:b3:3d:33:
78:ad:53:10:38:10:68:0b:bf:1e:52:44:ab:2a:cd:
b4:39:3e:dd:8d:67:d6:d6:69:be:89:6b:74:82:92:
3d:d0:3b:0e:69:c9:a2:2f:57:08:5b:b3:27:7c:15:
37:d1:d1:71:7d:19:d2:28:08:2b:0b:21:5c:45:b6:
6c:81:ea:57:be:f6:ac:41:a8:97:7b:f1:73:b1:8d:
e5:84:5b:c8:3d:0b:1f:19:91:70:23:30:4c:f7:f6:
dd:bf:de:f4:98:de:74:68:a3:92:31:ee:f1:01:fd:
e7:97:35:a3:5d:46:d9:3f:8a:34:84:a0:85:39:37:
7c:ad:6e:89:11:c8:d1:fe:1a:e2:87:64:54:27:15:
e4:ae:df:02:60:03:f9:eb:3e:0a:92:e3:5a:cf:6e:
a7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D9:7F:77:1E:62:ED:F2:FE:83:F7:4B:63:9A:59:3C:CF:44:3C:B5
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/C9l_dx5i7fL-g_dLY5pZPM9EPLU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.150.232.0/21
Signature Algorithm: sha256WithRSAEncryption
07:f0:12:b9:3e:91:08:e6:1a:81:42:64:95:80:54:19:c2:74:
56:b8:01:ba:3b:cd:b2:64:0e:25:fd:b0:ca:6f:df:ad:e2:0f:
1c:6d:bb:2f:96:88:0e:fc:a2:98:2e:c1:f5:5c:e7:60:be:f9:
0b:31:ee:15:32:cb:b2:61:a9:8e:36:88:25:20:5f:4d:10:4a:
a1:3e:5a:bd:94:a9:48:b1:e4:5c:e1:60:a6:d1:b0:de:30:1f:
6e:ed:1f:56:fb:f6:10:81:16:30:e7:09:5e:45:48:23:58:8a:
49:d2:c2:c8:9a:83:97:11:ec:c5:40:c1:6f:14:b2:fd:2f:66:
07:9e:52:af:5f:47:df:be:53:d8:39:be:54:5b:d0:d5:7b:eb:
f6:f3:d0:49:26:71:ff:a2:ea:22:aa:bb:96:0a:b0:22:46:21:
01:61:b3:04:a4:85:7b:5e:aa:39:26:1a:95:4c:c8:f4:04:bb:
a0:5d:a6:e4:15:3c:60:86:79:56:42:fe:d7:ec:fa:ea:c3:2a:
e3:d2:6f:b7:9b:56:d2:64:55:64:ee:fe:65:f0:a9:fc:f7:e6:
10:18:d8:47:c2:58:db:e1:f3:24:3e:95:2b:7a:88:1e:b0:f5:
8c:96:c7:5f:cf:e4:29:6c:e2:6e:77:43:3c:b1:2e:59:f8:1f:
29:eb:5c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org