Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/iVolRLxFK8ugqsQoC4EHqPSv_6M.roa
File: iVolRLxFK8ugqsQoC4EHqPSv_6M.roa (raw, json)
Hash identifier: 30LsRuG+5KpdYPbzFurceUYtWYgN/DH7c3U/4wBq5zQ=
Subject key identifier: 89:5A:25:44:BC:45:2B:CB:A0:AA:C4:28:0B:81:07:A8:F4:AF:FF:A3
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0FAE
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/iVolRLxFK8ugqsQoC4EHqPSv_6M.roa
Signing time: Fri 01 Sep 2023 08:29:25 +0000
ROA not before: Fri 01 Sep 2023 08:29:25 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17408
IP address blocks: 150.116.0.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4014 (0xfae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 1 08:29:25 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=895A2544BC452BCBA0AAC4280B8107A8F4AFFFA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:30:4f:d8:97:af:8a:af:f5:34:7d:d3:2e:ad:
21:f5:8c:d6:1d:f0:ef:f6:5a:bf:d8:0f:c4:44:1a:
75:62:87:e9:43:e7:76:56:b3:54:cc:ab:00:fb:d8:
25:64:dd:6a:e3:82:75:7e:3e:21:0b:d3:60:c0:2e:
ee:87:b3:e7:bf:eb:a2:f7:45:0b:8c:6e:03:a6:2f:
7c:90:2d:8e:b9:b6:1e:64:cc:e9:2e:b0:fc:24:bf:
13:8e:a1:30:9b:f4:3b:e8:75:b5:41:d4:3e:2c:49:
31:ef:2a:67:a3:74:a0:5c:b2:53:96:0c:84:d6:90:
e1:ea:2a:b0:19:c2:da:a8:a0:1a:89:a8:02:aa:b0:
94:43:08:4d:82:b6:41:28:e0:77:17:5c:a8:b6:82:
b1:f7:68:e9:4a:19:43:f4:43:d7:39:2b:ec:42:10:
98:23:5e:7b:9a:9b:f2:1c:37:7c:f9:84:68:82:34:
14:4b:c7:15:b5:ca:e7:f7:e8:8f:09:60:f8:2d:dd:
41:a4:f8:91:c5:c1:f9:66:cb:6e:7f:56:75:56:38:
ae:9a:3c:55:5c:9a:2c:67:4b:f4:06:4e:7b:65:4e:
72:a9:91:96:5a:26:47:e5:4d:a4:cc:a6:06:40:71:
19:f0:d1:b6:94:83:86:80:0e:6c:f3:3d:1a:04:6d:
58:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5A:25:44:BC:45:2B:CB:A0:AA:C4:28:0B:81:07:A8:F4:AF:FF:A3
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/iVolRLxFK8ugqsQoC4EHqPSv_6M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.0.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:18:38:84:e6:2b:75:e2:96:d4:cc:d9:46:1b:25:cd:35:01:
f3:2b:53:bc:4e:02:93:43:01:a4:f5:02:c3:ef:61:85:bd:33:
99:14:e0:6f:93:c1:fb:8a:21:99:d7:2d:7f:2d:af:bb:fd:11:
4a:a2:2f:c2:9b:a4:53:84:6e:a3:fe:a3:af:94:2c:ac:b8:c2:
d8:83:a4:db:d3:87:bb:d7:04:7c:c7:5a:41:8b:a7:dd:e6:17:
24:ff:54:01:6b:5a:84:e3:7b:dd:cc:c5:18:60:6d:38:3a:80:
5d:d6:71:9f:ee:71:e4:8c:0f:e3:41:bd:b3:eb:54:50:85:ae:
4a:72:41:e2:13:ce:b3:11:cd:a6:e5:15:44:fb:de:f0:b6:8a:
f5:19:a3:77:f4:ec:f9:2d:c7:91:29:a3:c4:a3:43:e4:de:ff:
a6:59:f6:24:95:a6:82:d9:fa:25:9e:71:a3:e8:e6:57:85:44:
b6:2a:16:40:38:f2:fe:a7:85:af:c7:ca:cf:75:0e:23:5d:f3:
c3:ca:a3:19:71:71:80:e5:c9:5d:16:ee:e4:9e:a6:6f:08:61:
1f:c7:5a:06:53:6a:73:8c:16:29:93:e6:04:1f:3e:66:26:00:
a6:59:43:c0:95:6b:eb:41:4b:36:27:fa:93:99:f7:65:97:db:
4f:c4:e0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org