Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/teVeaU9QoiFei2e1-1n_VXQjSXM.roa
File: teVeaU9QoiFei2e1-1n_VXQjSXM.roa (raw, json)
Hash identifier: P8Y1DKFJ1Td1vzgwTLK10QpSrvmG6uRCHfWtlyy7AzE=
Subject key identifier: B5:E5:5E:69:4F:50:A2:21:5E:8B:67:B5:FB:59:FF:55:74:23:49:73
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0F62
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/teVeaU9QoiFei2e1-1n_VXQjSXM.roa
Signing time: Fri 01 Sep 2023 08:29:04 +0000
ROA not before: Fri 01 Sep 2023 08:29:04 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18049
IP address blocks: 223.26.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3938 (0xf62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 1 08:29:04 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B5E55E694F50A2215E8B67B5FB59FF5574234973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:d4:00:6b:59:c1:d0:61:0e:2d:a3:61:81:
69:7c:3e:91:5d:94:2a:e7:9c:ef:b9:71:b5:26:5e:
3f:b0:23:b1:ea:b7:08:77:0e:47:b1:f7:d2:f4:90:
66:f5:90:90:96:8d:15:a9:e0:2b:a3:e9:bb:ab:fa:
41:d4:5c:6f:28:02:be:6e:88:a4:99:8b:73:7b:e3:
0c:60:5c:0f:0b:b0:4c:70:3a:a5:c5:6b:6c:e6:ec:
19:15:31:86:42:69:11:03:73:5d:6c:1e:7c:dd:8d:
cd:b8:01:75:63:f1:28:f0:8b:d9:0b:d1:28:c4:6f:
5a:e8:75:e3:60:70:4e:6f:5f:35:69:45:1a:5e:a9:
c1:16:4c:e2:52:8a:6c:ed:72:80:ea:38:9b:b8:f4:
f1:d4:8b:00:80:fe:01:ff:2e:2e:ba:ce:37:6e:64:
4d:1b:74:50:1b:ad:3a:10:a9:57:94:1c:bc:d8:04:
26:9e:3c:32:ae:59:ae:b9:b6:96:19:fa:8a:0e:89:
33:7f:d7:5c:50:ee:b7:07:be:8d:d4:42:00:df:41:
e3:c0:36:5e:fa:8c:c6:a4:e5:d6:fa:8a:42:a8:60:
ff:a5:f6:5d:8f:97:65:1f:45:4c:d2:2f:b4:ec:c2:
55:3f:88:8c:50:7e:ad:2d:8a:3c:b2:a1:1f:e6:d9:
c3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E5:5E:69:4F:50:A2:21:5E:8B:67:B5:FB:59:FF:55:74:23:49:73
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/teVeaU9QoiFei2e1-1n_VXQjSXM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.26.112.0/20
Signature Algorithm: sha256WithRSAEncryption
a6:49:8d:8e:34:91:79:b4:81:17:66:f9:30:8c:e2:a7:8e:e1:
36:fa:8d:37:db:aa:82:c2:64:de:84:be:40:97:ab:84:9c:27:
7a:2d:fa:db:33:32:19:da:e3:99:21:1b:f2:f2:ff:a0:4e:49:
cd:f3:65:f5:ac:af:77:2b:28:af:4b:51:60:87:b4:e3:49:72:
e0:6a:0c:f6:0d:43:55:dd:31:c3:8c:f0:d6:ca:cd:dd:df:c8:
78:c1:dd:4b:83:5f:1e:10:80:6a:0f:5e:12:38:c9:41:a8:52:
9c:4a:26:0c:92:69:bb:71:79:1b:a6:45:5b:70:7c:34:18:cf:
73:97:56:42:e8:e8:96:07:3f:98:eb:12:a3:2d:6a:6f:de:1e:
61:38:79:da:14:0f:29:99:6a:5a:2c:bd:c1:94:97:02:47:a4:
43:3d:be:77:f8:1d:20:d8:11:90:79:a5:2b:25:6b:29:6d:fc:
4b:c5:76:25:42:c9:f4:60:4b:bf:de:6f:4d:47:cd:bd:6c:bb:
0a:fc:28:e6:55:8d:61:b7:7c:ae:3e:07:43:78:7d:ba:bb:07:
cf:83:d0:ed:39:3a:53:8c:91:ae:41:38:17:8c:54:f4:ae:fc:
2f:f6:36:9e:cb:48:ce:f1:af:30:93:a4:a7:35:d9:ef:3c:12:
68:2b:63:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org