Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/tj-JzU8Va_OXkov3hBbBOS46m64.roa
File: tj-JzU8Va_OXkov3hBbBOS46m64.roa (raw, json)
Hash identifier: FdTnBGmPkggqQzwTs9rg8hnTzlSM3ALwqYmIoBtj7Bc=
Subject key identifier: B6:3F:89:CD:4F:15:6B:F3:97:92:8B:F7:84:16:C1:39:2E:3A:9B:AE
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0F82
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/tj-JzU8Va_OXkov3hBbBOS46m64.roa
Signing time: Fri 01 Sep 2023 08:29:13 +0000
ROA not before: Fri 01 Sep 2023 08:29:13 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18419
IP address blocks: 150.117.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3970 (0xf82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 1 08:29:13 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B63F89CD4F156BF397928BF78416C1392E3A9BAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7f:8d:73:46:7c:05:d2:4c:74:05:ba:ce:36:
b3:d7:b8:1e:8f:f6:01:92:cb:46:52:5e:a5:42:bb:
92:5e:2d:84:85:73:ab:8d:25:c0:50:17:e8:b6:b5:
b9:43:04:d7:06:6a:a8:39:bd:9b:6f:5e:e1:58:b2:
02:1a:5a:e3:9a:7b:bf:a2:8b:d8:d9:d6:df:44:cb:
53:82:e1:29:ce:f1:be:91:de:bf:7e:bf:c1:09:b7:
10:62:ed:3b:de:d3:48:b2:9d:4c:60:c1:44:a2:ee:
32:94:bd:1f:a5:52:70:67:d0:65:80:2f:fa:56:6a:
3d:f2:8a:04:8c:3d:85:b1:7b:9d:17:14:cb:8b:1f:
52:e8:f9:b3:35:1e:f9:0e:7a:60:7e:43:78:8f:8c:
29:9c:19:c0:c5:1a:a2:3d:c4:e8:5e:b3:f5:11:a7:
f8:8a:1a:0e:5b:c1:90:d6:1f:61:f7:43:24:85:d4:
47:71:be:3a:76:ec:f4:09:dd:7a:e2:b3:fa:3e:66:
95:b9:55:6d:0a:f0:54:59:91:60:78:c8:b2:d0:29:
4d:88:39:79:10:03:dd:ad:63:1a:9a:a2:02:cb:d9:
17:1f:8e:90:52:98:11:47:8d:aa:44:43:ad:f1:5c:
65:ed:6c:fa:2a:e9:e3:0b:a2:f9:3a:2d:0b:62:1e:
4f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3F:89:CD:4F:15:6B:F3:97:92:8B:F7:84:16:C1:39:2E:3A:9B:AE
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/tj-JzU8Va_OXkov3hBbBOS46m64.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.16.0/20
Signature Algorithm: sha256WithRSAEncryption
00:f5:76:35:9c:c6:f6:77:55:dd:52:08:d5:42:e1:de:84:b1:
66:90:72:dd:a7:3c:80:b2:2a:33:30:97:f0:52:35:62:c7:14:
cc:f5:af:77:7c:d2:c5:7a:ac:c7:31:86:4b:4f:b9:dc:82:f5:
cf:7d:ad:60:bd:4e:b9:cf:56:57:81:5c:18:fd:0c:fe:c6:22:
0f:55:7e:1f:88:87:9c:0d:60:42:64:44:52:94:e1:c2:87:ac:
04:f9:92:20:62:4c:43:ff:b4:f1:db:d9:06:99:ac:f1:44:f3:
9a:7f:40:0a:c9:0a:ef:f4:bc:4b:85:be:d1:f2:89:ac:53:ca:
ff:ae:64:a5:88:9b:37:82:b5:86:a1:72:10:fc:11:a9:73:44:
d3:7e:99:06:f4:83:7a:4a:8c:c1:bc:f8:73:20:d7:7d:ea:fa:
bf:d7:85:a4:25:b6:c2:60:9f:bb:c6:90:b8:4d:96:3e:b6:f8:
4a:6d:1b:82:1c:71:8a:5f:29:92:8f:4d:13:3d:1b:c0:ab:63:
4b:9e:7a:8d:68:a4:93:1d:9e:04:a7:90:9e:2f:23:8c:57:cb:
97:07:6d:4d:1a:b2:38:b2:dc:bb:d8:e1:0f:a0:9a:60:d6:0d:
b1:8e:85:8d:52:55:31:74:d3:4f:fc:eb:4e:b4:8b:09:aa:7e:
a0:af:7f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org