Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/sQTZehGqNCykeX8M1D8NSzDzM1I.roa
File: sQTZehGqNCykeX8M1D8NSzDzM1I.roa (raw, json)
Hash identifier: 6/N/0zqRWoQPPIwef90bcwzQXSvcPpOf7KQ0UxCB5ho=
Subject key identifier: B1:04:D9:7A:11:AA:34:2C:A4:79:7F:0C:D4:3F:0D:4B:30:F3:33:52
Certificate issuer: /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial: 0B74
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/sQTZehGqNCykeX8M1D8NSzDzM1I.roa
Signing time: Fri 01 Sep 2023 08:30:32 +0000
ROA not before: Fri 01 Sep 2023 08:30:32 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24169
IP address blocks: 150.129.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2932 (0xb74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
Validity
Not Before: Sep 1 08:30:32 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B104D97A11AA342CA4797F0CD43F0D4B30F33352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7b:3d:b2:c9:4f:ca:b7:a2:d9:40:45:28:d7:
04:d2:ff:d9:d9:16:84:a0:cf:f8:f7:55:06:80:3b:
cc:cd:1f:c1:50:82:1a:a8:38:88:74:2b:79:89:32:
7e:d4:80:ed:a6:d2:ae:84:db:76:fc:62:f7:d3:84:
66:88:67:ec:29:82:42:3b:41:1c:b3:10:c3:92:83:
07:79:c4:3c:7a:2b:63:0b:b8:3d:8f:d8:70:cd:5d:
62:a5:14:7b:66:8b:3d:d1:8d:8f:33:3b:96:88:7b:
8a:b3:a6:15:0a:84:25:5a:27:a8:f6:bf:40:30:55:
63:54:9b:2f:1f:32:b4:38:ce:47:bb:39:9e:e0:13:
30:64:08:8c:2a:bc:ce:2b:0e:43:62:3b:41:78:db:
f8:99:b0:0f:ed:f5:a7:87:58:62:f5:64:2d:59:fb:
b7:c7:a4:c1:a3:c8:f0:0a:43:f5:61:e5:bc:dc:b7:
b8:c8:5b:dd:a0:5a:95:82:68:7e:3d:26:50:db:39:
b8:85:4e:fe:0e:45:59:a5:a0:2e:b9:a1:4c:f8:b5:
50:3e:e5:32:6d:aa:69:e7:e5:fe:be:c0:ac:b4:89:
52:f7:1c:7e:f7:24:f0:e8:f4:98:38:b6:17:e7:c6:
47:04:11:d8:c0:6d:13:33:f9:57:d6:e4:0a:b3:41:
94:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:04:D9:7A:11:AA:34:2C:A4:79:7F:0C:D4:3F:0D:4B:30:F3:33:52
X509v3 Authority Key Identifier:
keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/sQTZehGqNCykeX8M1D8NSzDzM1I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.129.36.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:13:0d:02:21:cd:51:b5:49:bc:ad:ec:68:88:a8:f8:31:a4:
2b:8d:bb:32:92:89:ed:1e:21:c3:22:ee:70:07:92:23:5f:de:
26:27:53:88:46:e5:9e:8f:39:64:7a:15:29:5b:29:21:67:6a:
73:6e:2b:d1:6e:c1:d0:b1:c1:df:ed:ab:98:5c:4e:69:96:de:
a9:b9:79:f1:77:1e:16:75:80:71:03:11:6c:73:6f:f6:e4:52:
c9:7d:a6:88:5a:cc:78:e6:3b:fc:c2:cf:c5:db:7a:d6:7a:d9:
07:4c:7f:31:56:28:39:96:38:e3:87:59:7e:4e:f5:37:f9:dc:
7d:d3:02:05:bd:11:be:bf:0b:c5:8d:98:b2:e3:32:b4:99:90:
10:30:76:59:95:54:8e:66:46:05:40:27:e3:1e:35:2e:0d:9a:
3b:2f:3e:17:f9:e2:a1:d0:bb:a7:2f:1c:f2:8f:d9:22:0d:45:
25:6b:d5:79:cc:eb:15:82:be:75:08:38:37:30:84:d0:e7:c0:
8a:33:27:3f:84:9b:a4:42:32:fe:d6:37:71:23:1f:f1:a2:cd:
2c:db:11:e0:a4:23:88:df:72:de:4f:50:b7:39:d7:a8:cc:b3:
79:e9:4e:2a:a7:9b:5d:13:e0:fa:27:47:b8:67:39:be:d5:56:
fa:b0:92:44
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org