Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/DC2GLw2j19JNpwjYQ5ZO3tkyXrI.roa
File: DC2GLw2j19JNpwjYQ5ZO3tkyXrI.roa (raw, json)
Hash identifier: q8GyxAdjuxc2uIwocGdfY7fh6e3vatUEOQZkA+A/7RM=
Subject key identifier: 0C:2D:86:2F:0D:A3:D7:D2:4D:A7:08:D8:43:96:4E:DE:D9:32:5E:B2
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0FAF
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/DC2GLw2j19JNpwjYQ5ZO3tkyXrI.roa
Signing time: Fri 01 Sep 2023 08:29:25 +0000
ROA not before: Fri 01 Sep 2023 08:29:25 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18419
IP address blocks: 118.150.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4015 (0xfaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 1 08:29:25 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0C2D862F0DA3D7D24DA708D843964EDED9325EB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:27:b9:d9:fe:4e:45:71:f8:9f:6b:81:fc:53:
3f:bd:9b:40:08:3c:03:40:53:44:54:e8:01:4e:7b:
e2:63:4a:3e:70:2a:a6:76:c1:1d:e8:76:33:a3:4d:
a5:af:f0:56:df:a3:d4:85:45:c0:7c:c8:90:b0:dd:
a5:33:58:21:37:40:45:c7:a3:a4:d5:b0:4e:c8:45:
3b:a0:2d:7c:9e:1b:10:de:71:7a:55:93:45:c4:3e:
55:8b:f1:55:b5:fd:53:15:3d:43:96:7a:b2:7b:cc:
54:82:c3:43:f9:3a:94:e5:b3:de:55:fb:be:fc:98:
c3:8e:33:cc:d1:80:61:f8:bd:3e:51:88:01:6b:4f:
c3:7c:c1:29:c2:92:94:bf:9e:b2:d6:b1:80:50:ac:
ee:b4:a1:9c:23:51:6d:06:34:6e:61:6a:cb:96:70:
79:7f:ba:43:12:07:e2:fd:83:bf:86:21:1c:b1:80:
36:46:10:e2:63:46:77:01:86:89:c6:7e:bf:a6:2b:
9d:b9:be:ac:bf:6f:89:cf:e5:c2:0b:ec:66:f4:b4:
f1:89:7d:28:a3:67:a9:71:7f:5d:6b:e0:de:05:26:
4d:07:61:51:31:d0:10:04:31:36:6e:11:9d:c0:48:
3e:e8:e0:8c:55:9f:fc:f1:fd:88:b3:a4:fb:aa:19:
88:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2D:86:2F:0D:A3:D7:D2:4D:A7:08:D8:43:96:4E:DE:D9:32:5E:B2
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/DC2GLw2j19JNpwjYQ5ZO3tkyXrI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.150.240.0/21
Signature Algorithm: sha256WithRSAEncryption
88:93:52:8d:51:89:86:dd:57:81:4c:38:84:4f:82:a3:e9:95:
91:7d:b0:31:04:19:8b:7b:f3:d3:85:a1:b9:24:de:c3:db:30:
6b:5d:aa:e9:ef:88:db:23:24:3b:01:ce:10:f1:de:06:68:a6:
be:3f:48:c8:57:41:44:f5:72:a8:7e:11:ef:19:9c:d4:d5:67:
b3:6d:f0:f3:88:0a:68:7f:79:6a:33:b4:c7:49:d4:fa:c4:b1:
26:fa:c5:89:86:60:7a:cd:a7:84:35:e0:dd:ed:86:e2:67:61:
d5:41:1c:3c:17:7c:c5:78:e2:cb:c8:e7:0a:08:25:d8:01:f7:
4f:67:e5:8f:7e:15:84:15:7d:62:7f:df:d6:d1:9a:07:13:a9:
e7:93:cd:2a:48:12:bb:75:b8:fa:53:d8:81:7b:c2:c8:d0:4e:
b0:8e:5f:0f:5a:51:36:36:fb:f4:60:38:f3:66:b8:56:33:6b:
b6:23:8e:d3:8d:ff:44:f3:35:ac:4e:2e:26:56:74:a1:bc:64:
a2:a1:cb:09:52:9a:92:88:14:66:04:ad:36:02:38:0b:41:d2:
93:67:81:33:5b:4e:42:63:59:7f:ac:ac:ac:03:39:9b:04:e5:
4f:e0:9c:6a:f7:e2:f5:d4:12:89:65:0c:ac:77:2c:84:dc:23:
56:38:fa:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org