Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/owVKv6vEmaO32jMLUfqz0JipQFg.roa
File: owVKv6vEmaO32jMLUfqz0JipQFg.roa (raw, json)
Hash identifier: HvdlXOgWxhXZg8TJ+qOfNgPn4+mk6S0bIeG3026uNXc=
Subject key identifier: A3:05:4A:BF:AB:C4:99:A3:B7:DA:33:0B:51:FA:B3:D0:98:A9:40:58
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0FB9
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/owVKv6vEmaO32jMLUfqz0JipQFg.roa
Signing time: Fri 01 Sep 2023 08:29:28 +0000
ROA not before: Fri 01 Sep 2023 08:29:28 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18419
IP address blocks: 118.150.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4025 (0xfb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 1 08:29:28 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A3054ABFABC499A3B7DA330B51FAB3D098A94058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:72:66:77:a5:05:f4:16:bb:11:aa:d9:bf:
70:48:52:d4:f9:3e:ba:30:c2:b0:96:ac:2f:ec:bd:
c3:fd:54:a6:f9:30:12:8d:6a:01:f9:72:ba:33:bf:
a1:47:9f:db:ae:4f:1d:42:62:3b:a6:62:82:6f:35:
02:36:2c:a5:87:fe:2f:4f:20:bb:6d:dc:43:28:e8:
51:4f:6c:ed:01:de:b3:e2:dd:46:2f:dd:aa:4a:ad:
a9:b4:13:3f:39:62:da:82:31:8c:af:72:84:94:fd:
36:c1:b3:e5:f3:8c:5f:bb:34:04:ca:08:e5:e4:97:
ca:c0:75:49:01:fe:96:c1:10:46:54:5e:0d:09:78:
02:10:c5:62:c6:de:72:e8:5c:b9:81:17:f8:50:96:
3c:a0:f4:9f:0c:c4:da:57:c8:4b:a0:ad:81:53:e8:
8e:b1:a6:01:da:8c:b6:fc:3c:b7:44:42:a8:28:ea:
56:83:61:47:b1:ad:69:03:75:11:06:c8:da:3f:70:
1f:4a:0e:bd:34:f0:63:6c:48:b0:c6:28:31:52:15:
42:29:6b:8f:2d:c7:2c:d7:b1:30:5f:74:cb:22:56:
83:1a:99:4e:8b:2a:08:35:19:79:04:b6:16:79:62:
38:cd:a8:54:fc:9c:e7:92:05:b3:62:93:4f:b7:ea:
ca:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:05:4A:BF:AB:C4:99:A3:B7:DA:33:0B:51:FA:B3:D0:98:A9:40:58
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/owVKv6vEmaO32jMLUfqz0JipQFg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.150.248.0/22
Signature Algorithm: sha256WithRSAEncryption
73:e7:2e:66:f0:1a:e9:16:7c:c7:ea:7d:42:4b:41:d7:e4:6e:
52:0e:28:ad:df:93:3f:a1:97:e6:2b:df:6c:81:b7:7b:c3:d0:
49:0e:13:80:68:7a:54:4e:44:10:9c:b0:e1:32:d9:3f:fc:01:
43:4f:3d:1b:db:35:58:f1:d5:c4:db:d7:62:ad:3a:19:84:66:
24:cb:e3:3c:ac:76:9c:ca:6c:e8:fa:d0:80:e1:89:92:3c:a7:
ce:b8:f9:a6:d6:0b:ca:1d:d5:2e:4e:a8:2d:a3:3a:79:1d:37:
5f:72:21:2f:86:36:74:bb:24:c8:40:52:8f:b7:6b:c8:72:34:
b9:3c:26:06:a2:eb:14:15:35:9e:3c:1f:a1:e6:aa:98:55:1f:
f9:5b:de:16:68:78:4e:b5:29:c8:30:18:18:bd:c9:d6:23:25:
cf:e9:3a:30:75:23:bd:e0:cc:07:55:16:11:88:65:b3:f7:e3:
35:c0:16:b9:14:fb:0c:8f:a0:cc:ea:a5:04:11:cc:28:a8:06:
7b:3e:38:15:6a:95:bf:06:de:ab:98:39:ce:fa:2d:b1:d9:6f:
9d:dd:2d:0b:c4:43:1b:d2:4e:cc:ac:f4:f9:f2:88:6b:8b:54:
98:ef:fc:0f:93:b3:0c:fb:bf:22:5b:ae:3a:23:fd:fe:1b:87:
c7:87:4b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org