Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/jxU697yD-xfTnQZBG83jGiBlEGs.roa
File: jxU697yD-xfTnQZBG83jGiBlEGs.roa (raw, json)
Hash identifier: Ip4OFN8mbIddapXNsKn8m0FqDYhRUjJ9cWuy+A4dNsk=
Subject key identifier: 8F:15:3A:F7:BC:83:FB:17:D3:9D:06:41:1B:CD:E3:1A:20:65:10:6B
Certificate issuer: /CN=F858D0000C7C46A986B2EB96815F06AE2693A9D0
Certificate serial: 0B54
Authority key identifier: F8:58:D0:00:0C:7C:46:A9:86:B2:EB:96:81:5F:06:AE:26:93:A9:D0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-FjQAAx8RqmGsuuWgV8GriaTqdA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/jxU697yD-xfTnQZBG83jGiBlEGs.roa
Signing time: Fri 01 Sep 2023 08:35:40 +0000
ROA not before: Fri 01 Sep 2023 08:35:40 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18046
IP address blocks: 159.117.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2900 (0xb54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F858D0000C7C46A986B2EB96815F06AE2693A9D0
Validity
Not Before: Sep 1 08:35:40 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8F153AF7BC83FB17D39D06411BCDE31A2065106B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:cf:29:e4:5d:57:70:d7:4b:71:2a:86:fb:c6:
3b:fc:87:c7:e2:76:9f:62:da:8a:65:a4:20:e4:3f:
f9:b2:68:5b:68:b6:a7:a7:69:35:9f:a7:6e:20:4f:
73:19:bb:05:a2:32:d1:2c:aa:60:e0:66:e3:79:34:
bc:03:e9:64:16:30:1a:6c:f8:29:ec:b9:46:c3:14:
bc:1d:78:cc:a0:8b:97:2a:d5:07:dc:ce:88:35:7e:
96:b4:af:fa:91:1f:28:71:7c:d5:33:e3:11:84:fc:
40:05:db:d1:eb:0d:8a:46:5c:51:2f:b9:18:54:8d:
2c:64:81:97:e9:9b:28:32:51:e9:fc:e8:e9:e8:c3:
f8:cd:4a:d8:ac:6d:29:52:54:cf:39:68:1e:97:f4:
c2:87:08:36:80:39:9a:e4:1f:0c:8b:d8:25:ad:0b:
b2:03:00:3e:ff:74:c0:de:0f:4f:63:a9:82:6d:a8:
e3:2c:6e:0a:02:70:1b:f5:2c:49:eb:76:85:35:48:
aa:ac:a2:ec:74:ba:fa:6c:28:18:2b:7a:86:0f:f3:
5c:b5:60:36:7c:58:53:af:df:51:43:c4:26:22:a5:
65:0d:3b:4c:b7:34:2c:e1:a3:06:8d:30:c3:6f:87:
33:01:74:84:d0:82:c8:c5:49:d6:9a:95:70:15:64:
12:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:15:3A:F7:BC:83:FB:17:D3:9D:06:41:1B:CD:E3:1A:20:65:10:6B
X509v3 Authority Key Identifier:
keyid:F8:58:D0:00:0C:7C:46:A9:86:B2:EB:96:81:5F:06:AE:26:93:A9:D0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/-FjQAAx8RqmGsuuWgV8GriaTqdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-FjQAAx8RqmGsuuWgV8GriaTqdA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/jxU697yD-xfTnQZBG83jGiBlEGs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
159.117.84.0/24
Signature Algorithm: sha256WithRSAEncryption
97:27:51:72:0c:3c:ab:29:e2:25:29:ac:eb:60:c1:a1:c0:d4:
09:cd:46:4d:f2:0a:f8:86:f2:85:a6:48:f0:0c:7d:20:75:b1:
e2:e4:c2:1e:89:bb:87:1e:0a:c8:d6:51:6b:8a:71:85:74:3f:
37:d7:22:4b:7d:a1:3e:e1:2f:99:bb:f1:7b:e1:85:61:bc:70:
6c:92:3d:26:d3:7a:a4:56:95:73:34:db:90:d1:e4:2d:53:5a:
ab:43:d2:d4:47:21:29:21:b2:61:7e:f4:77:0e:96:f9:6f:41:
db:05:04:e2:47:5e:b0:a5:40:52:e0:7c:f9:43:78:5b:62:2d:
e0:fa:93:75:3f:9a:1d:7e:03:27:50:77:f5:13:ec:7d:03:1f:
4d:49:01:f9:ce:e3:7c:f9:60:42:a1:9d:40:97:25:63:0d:b0:
17:9d:3d:8f:c9:fa:0d:4f:60:a2:b3:b8:b5:aa:33:17:9f:34:
55:ec:89:41:32:39:6a:7a:ca:dd:61:b5:8f:d9:af:74:55:2b:
8e:07:c9:0f:ad:05:ae:40:c6:b8:c4:9a:01:56:b3:2e:ab:71:
cb:4f:53:21:76:a6:eb:a6:1e:ca:7a:8a:e2:ed:8b:93:e3:70:
39:4e:4c:8c:5f:20:d9:f6:6c:6c:62:fb:bf:47:a6:c8:68:9d:
25:c6:d0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org