Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWINS/_j637rCEMvZIJbbpLZivMYDwiCc.roa
File: _j637rCEMvZIJbbpLZivMYDwiCc.roa (raw, json)
Hash identifier: uM+/L7wbh6NecO5NNBEKx4WT5kfnYiD20AYwmvkynnI=
Subject key identifier: FE:3E:B7:EE:B0:84:32:F6:48:25:B6:E9:2D:98:AF:31:80:F0:88:27
Certificate issuer: /CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Certificate serial: 0B5C
Authority key identifier: 61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/_j637rCEMvZIJbbpLZivMYDwiCc.roa
Signing time: Fri 01 Sep 2023 08:36:08 +0000
ROA not before: Fri 01 Sep 2023 08:36:08 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17416
IP address blocks: 112.213.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2908 (0xb5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Validity
Not Before: Sep 1 08:36:08 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FE3EB7EEB08432F64825B6E92D98AF3180F08827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:35:79:f5:c7:5e:68:55:70:33:58:d2:53:7f:
35:d0:30:f1:61:88:0e:2d:cc:5e:d3:80:03:18:60:
86:9f:a0:ff:ff:ad:bc:36:7b:e6:d9:d5:7b:1f:41:
17:75:dd:0e:b1:94:b8:1d:95:32:23:45:7c:a1:65:
66:24:74:78:d1:b2:7e:6b:6b:89:c6:d7:16:2e:bb:
16:b9:51:10:33:82:c4:b4:65:ce:90:cc:14:82:8f:
b3:6f:db:ae:33:3d:c7:b6:84:5e:1a:e9:b7:7c:c5:
70:c0:ed:d6:ef:fa:55:77:ac:ae:73:9d:b2:b8:a6:
22:0b:e1:5b:bb:04:93:18:c0:83:7d:aa:31:29:d5:
17:8a:9a:e3:d0:ce:c2:5f:1f:89:a9:ce:a6:79:53:
13:d7:dd:21:a3:91:a3:6e:85:68:12:95:4f:99:44:
de:cd:5c:a8:ca:a1:17:22:44:f1:bd:9c:ae:e9:5a:
63:76:23:8b:6a:37:33:73:53:d6:52:c3:2f:ee:56:
6d:a4:c3:58:03:dc:8c:68:a8:2c:cb:84:22:26:fc:
d6:c0:dc:cc:8b:ad:11:3c:49:cf:5d:24:bb:2a:07:
30:38:b5:26:d0:4e:0d:2a:9d:34:26:3a:3f:e5:d1:
a2:6c:c9:42:94:8e:72:5d:b6:0e:2a:c5:f4:73:16:
4e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3E:B7:EE:B0:84:32:F6:48:25:B6:E9:2D:98:AF:31:80:F0:88:27
X509v3 Authority Key Identifier:
keyid:61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/_j637rCEMvZIJbbpLZivMYDwiCc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.213.48.0/20
Signature Algorithm: sha256WithRSAEncryption
39:64:2e:f3:91:d0:fd:9b:58:02:cf:73:0c:de:41:4c:41:f9:
e0:e6:ff:0e:9a:55:17:1f:a3:ab:07:de:3f:58:66:77:ca:02:
9e:12:88:d8:b6:d8:87:fc:f0:94:9a:07:70:11:8b:0e:55:c0:
e6:d3:28:9d:e9:d5:cf:44:fa:37:ce:21:1b:be:a6:ea:88:19:
2e:37:f4:0f:c5:af:89:36:4b:28:c5:eb:7d:4e:b4:0d:1a:9a:
2d:a7:bf:01:67:88:5f:4c:11:e6:1b:fb:f4:e5:61:d8:43:20:
78:17:f2:18:7e:52:ff:d0:90:15:a3:c2:72:88:43:6c:39:e9:
c1:98:30:64:66:29:60:8c:f2:9f:92:03:0a:24:be:7b:15:a0:
98:1d:fa:b3:1b:93:59:e8:6a:6c:2d:90:eb:d2:80:b0:13:59:
4e:f6:bc:e9:96:81:da:27:9b:90:77:25:8f:f1:25:39:c1:00:
99:11:59:25:7f:be:b8:7b:20:2d:1e:66:6b:35:99:4c:fd:63:
aa:67:f4:32:04:13:d1:cd:0f:19:0e:e0:74:99:01:5f:47:ff:
46:94:10:66:14:fe:3e:54:8a:8d:4c:75:69:20:b9:91:73:4c:
f5:1a:8f:59:a6:c0:34:82:a2:44:2f:6b:31:33:59:91:3c:0d:
5b:49:33:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org