Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/IyuvRx5J0BN-BzgdpK5yv537isM.roa
File: IyuvRx5J0BN-BzgdpK5yv537isM.roa (raw, json)
Hash identifier: pYVnPJlpD59fDhzuRM1+SA8Xv3pM8I5RApAvcwb9VFk=
Subject key identifier: 23:2B:AF:47:1E:49:D0:13:7E:07:38:1D:A4:AE:72:BF:9D:FB:8A:C3
Certificate issuer: /CN=F858D0000C7C46A986B2EB96815F06AE2693A9D0
Certificate serial: 0B55
Authority key identifier: F8:58:D0:00:0C:7C:46:A9:86:B2:EB:96:81:5F:06:AE:26:93:A9:D0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-FjQAAx8RqmGsuuWgV8GriaTqdA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/IyuvRx5J0BN-BzgdpK5yv537isM.roa
Signing time: Fri 01 Sep 2023 08:35:42 +0000
ROA not before: Fri 01 Sep 2023 08:35:42 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18046
IP address blocks: 159.117.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2901 (0xb55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F858D0000C7C46A986B2EB96815F06AE2693A9D0
Validity
Not Before: Sep 1 08:35:42 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=232BAF471E49D0137E07381DA4AE72BF9DFB8AC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:e3:18:4a:d3:f4:26:4b:45:3a:ef:a0:33:
db:96:26:2c:cf:b5:15:25:b0:ac:97:a7:e5:40:2d:
a8:86:a6:55:fd:b6:95:c9:e6:bc:e8:b0:1e:d6:b2:
da:9e:18:76:80:9f:87:2e:a6:f7:1d:2a:02:18:17:
a2:e9:5c:00:84:01:b1:48:74:67:9b:bb:fc:bb:07:
02:39:ae:93:78:10:c0:9d:d9:00:9e:d1:5f:79:27:
30:6f:0c:75:e6:9b:26:a4:c9:bc:57:34:95:98:b6:
d0:14:a6:62:f0:98:97:59:73:f9:fd:e5:34:c5:5d:
c4:7d:d7:11:2c:17:ba:61:b4:f1:a7:09:18:74:78:
ba:d8:92:7c:f4:85:49:f8:d7:39:4b:a2:2e:ab:78:
46:8a:8f:8d:8b:4b:84:bf:ac:51:a7:d3:79:bf:ab:
c1:1a:c6:fd:aa:84:7b:4f:22:5a:b9:5a:24:7e:b9:
8e:4a:0b:e8:67:3a:97:0a:7e:75:96:cf:28:78:86:
bb:ca:46:43:37:1e:e2:be:4c:11:9f:8f:b6:68:fd:
f6:a0:df:a6:05:88:03:a0:9e:49:53:dc:4c:3f:12:
d4:b0:2a:2c:91:8a:78:6a:c5:94:28:bb:b6:e4:a2:
68:6c:4f:21:61:e6:d6:46:04:86:a3:8c:51:56:90:
8b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2B:AF:47:1E:49:D0:13:7E:07:38:1D:A4:AE:72:BF:9D:FB:8A:C3
X509v3 Authority Key Identifier:
keyid:F8:58:D0:00:0C:7C:46:A9:86:B2:EB:96:81:5F:06:AE:26:93:A9:D0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/-FjQAAx8RqmGsuuWgV8GriaTqdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-FjQAAx8RqmGsuuWgV8GriaTqdA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/IyuvRx5J0BN-BzgdpK5yv537isM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
159.117.64.0/19
Signature Algorithm: sha256WithRSAEncryption
52:79:c0:c9:40:69:d2:e6:cf:e1:0a:3d:5d:b1:ed:fc:50:54:
ab:af:48:ab:33:52:a6:cb:12:2f:ea:44:71:68:7a:48:24:78:
44:61:ce:8a:1f:7e:7a:a8:c7:85:6d:39:84:28:53:b7:05:94:
3a:16:44:c0:20:7f:ba:ca:1e:a6:82:d7:9d:b2:bd:80:24:5b:
87:dc:c0:76:84:62:84:57:1e:f7:92:da:96:e3:aa:3d:b2:57:
18:e1:01:3d:48:0a:9e:e1:2b:89:1f:72:fe:bc:2b:36:91:8b:
85:b7:b1:9d:45:ac:0a:08:cc:f6:39:bc:5e:be:ef:9f:36:89:
86:8c:9c:87:9e:07:f7:fe:2d:81:3b:6c:d1:55:e7:e6:c0:28:
c2:22:0c:af:f7:51:f5:6f:01:05:2c:c1:c4:30:79:07:0f:c1:
81:30:f6:3f:24:c1:10:ed:1f:ad:b5:50:c8:1d:05:0d:51:d3:
dd:0f:45:3f:85:bc:a8:e1:4d:b0:7e:0e:74:3a:10:f8:ff:0a:
b3:60:09:b4:18:39:c3:4a:9c:72:40:f1:87:ed:92:12:5f:78:
91:27:46:e8:4d:02:aa:11:0a:96:4a:26:f5:20:0b:8d:f6:9a:
af:e5:e8:79:f6:a9:4c:e6:b6:18:a3:90:b8:53:17:85:fc:89:
79:0e:39:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org