Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/V5XcRwgykYRBwN6mHWm2a9gv0-M.roa
File: V5XcRwgykYRBwN6mHWm2a9gv0-M.roa (raw, json)
Hash identifier: N/XEZNkR8hxNW5A9+NGGwhb/QEYp64utglVPlG3XF8Q=
Subject key identifier: 57:95:DC:47:08:32:91:84:41:C0:DE:A6:1D:69:B6:6B:D8:2F:D3:E3
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0FA2
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/V5XcRwgykYRBwN6mHWm2a9gv0-M.roa
Signing time: Fri 01 Sep 2023 08:29:22 +0000
ROA not before: Fri 01 Sep 2023 08:29:22 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131627
IP address blocks: 150.116.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4002 (0xfa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 1 08:29:22 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5795DC470832918441C0DEA61D69B66BD82FD3E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d7:06:81:74:c5:d0:52:e8:47:c2:04:ac:67:
f3:c0:06:ee:8b:06:ed:8d:0a:53:1a:c7:c4:cf:10:
dc:82:0a:f2:14:cc:a1:76:f3:35:df:3c:f2:4f:8a:
f3:72:b5:8b:92:4f:7a:96:ef:4e:e4:3b:a0:b9:3a:
44:10:04:7d:60:b0:9a:de:11:93:c3:3b:6e:13:bd:
d6:d7:2d:5a:3d:f7:0f:59:c9:b3:c9:62:66:5c:63:
a4:17:0a:aa:b1:0a:74:a3:49:52:0a:f7:a2:24:d6:
2c:91:f1:f4:c0:b7:ee:0b:aa:8a:d8:e7:64:38:41:
f3:6b:05:43:78:ba:b1:55:9b:3c:fd:e3:04:c6:b3:
70:62:dc:a3:a4:1e:20:88:b1:f3:38:1d:b0:5d:e9:
e7:19:83:76:98:e2:62:c9:98:d9:fa:18:ab:fa:12:
f3:e6:d0:90:11:d9:c0:c3:b1:77:1a:45:19:ae:8a:
58:68:ae:97:b2:c8:b9:ec:81:4c:b9:82:77:0c:d3:
8e:76:3b:15:ca:2d:eb:7c:a2:4c:7e:b2:ab:71:8d:
18:43:f3:43:1d:bf:ee:18:77:25:d2:54:e5:69:43:
08:e6:3b:45:87:37:4c:31:65:3f:9b:87:f5:fa:0e:
97:60:37:cc:cb:dc:63:78:a9:9b:14:ca:3c:b4:a3:
e3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:95:DC:47:08:32:91:84:41:C0:DE:A6:1D:69:B6:6B:D8:2F:D3:E3
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/V5XcRwgykYRBwN6mHWm2a9gv0-M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.83.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:d1:f7:d4:14:fd:cc:98:d8:0b:5a:78:44:08:a3:33:1f:f6:
ee:78:15:8f:84:d3:41:b6:60:a8:a6:e1:a2:f5:71:fd:95:97:
f0:07:29:ec:8a:fc:37:08:bd:e5:05:7b:60:a6:5d:b5:f6:fd:
60:39:87:db:51:c0:7f:71:2d:f3:8d:6f:43:7c:7f:ce:de:0e:
20:1c:d5:b5:f6:61:77:a7:2d:3e:57:e7:7c:5c:85:07:7b:34:
79:66:31:88:8b:eb:2c:bc:9c:09:31:63:c3:30:56:2c:3d:53:
f0:15:e5:22:03:62:d4:bb:93:15:80:bd:05:73:18:2a:98:8c:
e9:18:ca:f5:92:ad:18:07:ce:c3:0f:1d:97:49:3e:4c:f1:ec:
60:d5:af:44:5c:2e:30:46:22:2f:27:07:ca:da:05:82:3e:65:
dd:ca:bf:8b:5c:02:6a:12:46:a4:7a:03:54:8a:7f:e2:c2:86:
53:50:37:97:b2:7e:af:0c:81:d2:9a:fd:3d:4b:94:e0:09:b6:
2a:66:86:c5:09:72:f0:ea:a2:03:03:d9:9f:02:48:7f:34:9f:
b1:0c:f1:27:96:60:76:b6:f2:c1:24:82:b4:1f:17:6b:4d:72:
fc:a4:ee:75:ae:4d:5c:f6:83:2b:8c:85:e5:cd:03:ea:eb:80:
a0:3a:ee:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org