Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/HvHhnVhwB3NNJTHMQQCTJoPSeaY.roa
File: HvHhnVhwB3NNJTHMQQCTJoPSeaY.roa (raw, json)
Hash identifier: WTzjkXLYvUi9fuIy06MF5nv65+QcNB3SIG2gGfQQKqk=
Subject key identifier: 1E:F1:E1:9D:58:70:07:73:4D:25:31:CC:41:00:93:26:83:D2:79:A6
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0F88
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/HvHhnVhwB3NNJTHMQQCTJoPSeaY.roa
Signing time: Fri 01 Sep 2023 08:29:15 +0000
ROA not before: Fri 01 Sep 2023 08:29:15 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17408
IP address blocks: 119.31.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3976 (0xf88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 1 08:29:15 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1EF1E19D587007734D2531CC4100932683D279A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:87:60:b2:9b:db:e9:49:d4:5b:26:52:35:5a:
61:e2:a7:c0:da:0e:d4:3f:cc:10:f1:21:5b:32:ef:
cd:89:48:45:55:f2:17:88:a3:33:15:d6:9d:33:d1:
0a:19:90:02:97:60:0e:78:01:4d:e6:a2:36:04:70:
8b:67:c3:e5:ff:05:57:e4:23:cb:cf:15:f4:0f:85:
71:ca:4e:92:8e:11:7f:ca:54:0f:90:0b:56:7b:25:
43:09:ce:2b:23:6b:97:86:36:f3:8a:8c:e7:44:28:
5f:eb:38:1f:93:92:eb:6a:84:67:d0:a0:69:57:2e:
21:70:ea:be:39:b8:bc:16:61:19:37:9f:1c:10:74:
93:ea:bd:b5:7d:67:39:c5:ff:34:1f:f2:be:79:d1:
43:6e:96:fa:5f:83:93:5c:6e:9f:25:04:ac:5b:e1:
95:4b:04:7a:1d:b9:f3:37:8b:1c:b8:54:df:0a:7a:
3f:a1:71:8e:b9:2b:6e:e7:91:39:97:90:5e:a7:96:
6d:2c:6c:dd:fa:76:f5:4e:ae:c5:cc:30:b7:a1:81:
71:d6:34:7b:99:7d:da:fa:35:3b:95:60:cb:bf:eb:
59:5d:ba:0e:35:b8:04:37:ec:54:b6:fb:6c:60:fa:
53:d2:76:35:22:b5:b5:d8:6f:e1:21:59:88:a4:5b:
37:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F1:E1:9D:58:70:07:73:4D:25:31:CC:41:00:93:26:83:D2:79:A6
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/HvHhnVhwB3NNJTHMQQCTJoPSeaY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.31.176.0/20
Signature Algorithm: sha256WithRSAEncryption
30:b8:fc:90:ed:0c:93:c3:eb:04:90:f5:5f:fb:53:06:29:a7:
8c:03:5d:5c:18:76:30:3b:b2:bd:1b:f5:65:cc:ff:41:83:94:
a4:e5:56:83:01:f2:64:99:49:05:7e:e6:89:ca:d1:eb:7e:23:
f0:69:a7:cb:ae:65:a9:ce:a4:40:ad:ec:f4:83:b0:63:26:09:
6f:34:1f:45:07:57:81:72:7e:f4:94:24:ae:7f:27:b0:ba:de:
c4:cf:28:13:f6:65:51:2e:63:8b:6e:91:45:3d:93:b1:48:4e:
d9:29:ef:ff:6f:72:7f:e3:ad:fe:06:0c:30:b3:88:39:2e:28:
5d:87:9a:67:d3:5d:67:7d:18:d2:32:5a:d6:4d:61:9a:49:c8:
b4:6d:7c:10:40:07:7f:39:1f:54:d9:bc:54:6d:2c:12:ec:7d:
fe:54:e7:06:f9:ff:06:5e:4a:48:fb:53:2a:8c:9b:79:3c:dd:
4d:20:bf:30:c3:7b:1c:e2:b3:ca:59:f8:75:e9:19:95:d9:b3:
44:65:e2:c6:ae:bb:6d:33:cc:50:c7:ba:2f:f2:4d:db:1c:ba:
e4:88:27:6d:d1:dc:17:99:14:a2:af:df:de:9f:97:b5:50:51:
5c:fb:47:8b:94:77:51:c1:5e:15:13:90:73:24:d4:7e:d0:2b:
ae:42:cf:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org