Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/S4IdbuhEElCA3uNTWqK-2xM9VnE.roa
File: S4IdbuhEElCA3uNTWqK-2xM9VnE.roa (raw, json)
Hash identifier: 1NmcHEgu3EUUXRGT7gGH/8jvHHC2WZNsFPuzRi2mVjg=
Subject key identifier: 4B:82:1D:6E:E8:44:12:50:80:DE:E3:53:5A:A2:BE:DB:13:3D:56:71
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0F75
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/S4IdbuhEElCA3uNTWqK-2xM9VnE.roa
Signing time: Fri 01 Sep 2023 08:29:09 +0000
ROA not before: Fri 01 Sep 2023 08:29:09 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7532
IP address blocks: 150.116.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3957 (0xf75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 1 08:29:09 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4B821D6EE844125080DEE3535AA2BEDB133D5671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6f:d2:2a:59:c2:73:6a:28:ab:0b:83:a5:3e:
93:94:6a:68:30:a1:a9:57:c5:b4:64:d8:fd:03:47:
71:d0:3a:51:44:0b:ac:47:10:b0:2a:de:0b:30:04:
1a:d6:eb:6f:cc:23:c4:4d:f3:2e:d0:6b:50:e9:2d:
02:19:b7:8c:8a:7c:88:68:74:b5:1a:df:7e:57:a7:
78:5b:21:fa:a4:3c:45:15:03:a9:1a:7a:80:c4:e7:
02:55:71:61:49:c7:f2:45:b8:2b:31:b0:1a:4b:98:
57:b0:14:11:11:83:f9:2a:fc:72:bb:ae:37:75:8e:
60:35:00:47:6d:2d:1f:7b:4c:1c:0f:e5:1c:18:58:
46:1e:d3:59:02:5a:53:3f:6f:5e:c9:53:5c:55:95:
d4:3f:ca:88:8f:fb:05:76:cc:b3:5a:7d:dd:76:f0:
9c:ab:ac:a7:1d:05:da:1b:31:96:55:9f:a1:0a:80:
5f:7c:57:2b:4b:fd:58:ed:9d:7f:5b:dd:f3:0f:42:
6d:89:b5:f4:3a:51:46:21:8a:5c:e4:93:b1:cb:69:
ea:9f:eb:30:bb:de:93:ad:b7:b5:f2:7b:a8:44:69:
f2:79:a8:c8:68:8b:4d:ae:69:f8:ad:eb:b5:92:e9:
43:f5:74:18:b2:c0:bf:da:96:0c:9b:da:e4:f1:7b:
51:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:82:1D:6E:E8:44:12:50:80:DE:E3:53:5A:A2:BE:DB:13:3D:56:71
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/S4IdbuhEElCA3uNTWqK-2xM9VnE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.56.0/21
Signature Algorithm: sha256WithRSAEncryption
84:6c:f1:58:ac:fb:b2:b8:cb:d3:c9:fc:74:3e:6a:56:49:90:
07:94:79:ce:6c:9b:2e:91:a7:22:ae:f3:72:ec:0c:60:06:ee:
6e:a5:9f:78:2b:a4:33:09:ad:35:72:06:b6:88:98:2d:fe:de:
f6:73:e7:fc:81:c5:f6:a6:5d:27:96:10:a2:df:0e:f4:35:9f:
f5:57:bb:36:46:58:dc:63:8b:82:4e:44:6d:23:e2:5c:32:9a:
7f:36:dc:68:c8:95:c2:60:57:de:65:e5:21:50:e3:f5:33:d2:
e6:38:5a:41:1f:b3:b5:46:62:69:de:7a:6c:91:29:07:9f:7e:
2e:2c:73:b1:2f:75:c6:18:36:b1:06:1b:4d:c0:89:ce:a1:99:
20:76:be:df:79:00:42:9a:c7:a3:74:5d:ef:71:71:fd:29:94:
62:56:9e:ff:41:31:cf:d2:12:f6:a3:42:3a:91:ea:bd:0a:1f:
68:1b:bf:1e:82:fb:5c:57:41:c6:b9:5b:b6:5d:d1:cc:a9:4d:
94:38:c7:90:20:b4:d6:c6:0b:cb:a2:84:84:43:bc:08:f7:9c:
0f:54:03:67:14:3b:4f:7f:bf:e6:9f:0e:7a:1b:6a:9b:12:d1:
85:ff:41:55:ec:bd:13:32:e4:27:11:dd:6e:6d:99:5f:2f:44:
fa:c2:04:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org