Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/LzvvwadnTQcyDiJhWVRKlAanous.roa
File: LzvvwadnTQcyDiJhWVRKlAanous.roa (raw, json)
Hash identifier: zCjp+o2vTQ5FjDLJwkYh8ms8ZshsciIH/0xC73jlVcQ=
Subject key identifier: 2F:3B:EF:C1:A7:67:4D:07:32:0E:22:61:59:54:4A:94:06:A7:A2:EB
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0F99
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/LzvvwadnTQcyDiJhWVRKlAanous.roa
Signing time: Fri 01 Sep 2023 08:29:20 +0000
ROA not before: Fri 01 Sep 2023 08:29:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131607
IP address blocks: 150.117.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3993 (0xf99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 1 08:29:20 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2F3BEFC1A7674D07320E226159544A9406A7A2EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:af:c5:1d:5d:0c:fc:d5:bf:38:39:2e:ce:
26:52:91:51:89:1c:2b:f4:ed:6b:e1:be:2f:b3:f5:
bd:fd:f4:ed:2d:f4:f0:8d:7e:c9:0e:dc:60:c1:8b:
da:d8:84:35:87:df:01:de:7a:ec:7c:be:e6:c1:28:
b6:9c:d9:41:78:8c:40:99:08:48:c4:0e:8e:8f:9c:
64:6e:40:73:aa:8f:3a:4c:3c:63:22:64:96:04:75:
8d:01:07:82:f3:a4:d2:ad:a3:00:23:4e:0b:af:42:
fd:9d:56:e9:0f:13:aa:ce:d8:2f:18:a8:79:fe:91:
ec:76:88:fa:59:37:7e:ee:74:f0:87:e3:fb:74:4b:
2e:9d:47:0c:c6:4a:6d:a7:5c:c0:f8:a6:f7:b6:96:
a7:84:9c:92:eb:df:03:17:ff:16:9a:08:fd:09:8e:
0b:f7:c9:4e:c3:ff:3c:31:3f:94:74:52:b7:f9:b0:
8c:49:e2:ae:1e:32:ef:c1:de:29:cd:e0:db:dc:e8:
94:7c:ed:c1:cc:60:fa:34:ce:b4:40:bf:60:6f:1a:
95:6c:37:1e:70:db:ed:7d:bc:76:8c:d8:68:b8:8e:
c1:05:de:b0:69:ca:6e:df:53:4e:b4:1b:22:c6:23:
1b:9f:86:1f:bd:29:66:eb:a1:f9:ee:0e:92:6a:7e:
7a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3B:EF:C1:A7:67:4D:07:32:0E:22:61:59:54:4A:94:06:A7:A2:EB
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/LzvvwadnTQcyDiJhWVRKlAanous.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.64.0/20
Signature Algorithm: sha256WithRSAEncryption
04:e9:2a:66:89:10:55:9a:da:8b:94:92:79:c2:a6:dd:c8:a0:
d6:5b:29:30:14:16:39:67:b1:4a:89:dd:78:92:46:cf:04:9d:
06:e0:77:e8:a7:ee:29:b0:7b:8b:cc:c8:30:8e:19:ab:07:d4:
d4:20:04:8b:7e:f7:7b:0a:65:96:5f:a4:c0:ec:19:69:42:fc:
37:03:6d:87:5e:f9:a8:e5:4e:c5:fc:9a:54:7a:6d:ac:19:44:
0e:1e:7d:00:9a:dc:9f:3c:ed:58:c2:8c:33:4a:db:4f:d9:a3:
80:dd:44:b6:b8:44:5e:52:4c:72:d6:ae:ff:01:63:52:3f:3a:
70:5e:84:fb:da:da:91:d6:6e:ae:56:82:18:da:43:81:e0:86:
99:a3:db:73:23:f6:a7:90:f7:10:bf:63:64:b9:0a:fd:44:d0:
72:dd:92:cd:c7:f5:ab:82:0d:e6:53:e5:13:ff:76:23:71:77:
fd:50:76:51:6a:7f:34:5d:a8:71:10:97:6d:51:f8:56:32:e3:
da:58:e9:b8:df:4f:d4:dc:9b:e4:99:10:95:6a:ec:b9:b5:0b:
5a:b2:41:c8:af:f8:54:8f:04:f6:60:a8:a0:27:51:95:2c:42:
11:43:02:4f:5e:23:e0:95:3f:92:02:67:2e:7f:ff:7c:99:fa:
00:7a:b3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org