Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWINS/eNE34XWpJDXSTOqxBKEaXTfN5Iw.roa
File: eNE34XWpJDXSTOqxBKEaXTfN5Iw.roa (raw, json)
Hash identifier: O5A0CvoKZjYp60cUr5oA4Xq5IxMzAny8/2NXrbNwX1A=
Subject key identifier: 78:D1:37:E1:75:A9:24:35:D2:4C:EA:B1:04:A1:1A:5D:37:CD:E4:8C
Certificate issuer: /CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Certificate serial: 0B5A
Authority key identifier: 61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/eNE34XWpJDXSTOqxBKEaXTfN5Iw.roa
Signing time: Fri 01 Sep 2023 08:36:08 +0000
ROA not before: Fri 01 Sep 2023 08:36:08 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 136173
IP address blocks: 43.224.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2906 (0xb5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Validity
Not Before: Sep 1 08:36:08 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=78D137E175A92435D24CEAB104A11A5D37CDE48C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e8:f2:4d:03:c7:65:d3:57:41:97:e4:fa:7a:
2e:2a:5a:4c:9f:79:ae:57:8f:0e:bf:14:61:5e:7e:
fd:eb:7f:07:57:ad:64:ac:fa:65:66:47:2f:df:35:
fe:41:0d:76:26:94:45:4b:52:ca:5e:94:1c:5a:93:
4e:f9:69:eb:ea:a2:bc:ae:f8:ec:9c:b7:19:28:08:
0a:e0:56:4b:92:11:7b:28:b2:a9:ce:44:a6:90:4c:
61:42:28:0b:cd:6b:94:fc:74:5f:eb:54:d0:d7:47:
5d:ee:45:89:4e:93:41:1b:03:7d:a9:5e:37:5d:04:
51:c2:10:80:fa:fb:5e:49:c5:e0:f3:f1:a1:05:3d:
59:82:82:45:98:27:58:6d:2d:82:89:64:50:86:b4:
ef:54:c2:da:4a:e6:a2:8c:b5:36:6f:25:49:51:72:
a2:0d:3b:21:d5:d0:77:07:46:43:1a:7d:42:47:fd:
8a:8a:32:c6:cc:c1:fb:22:0e:d0:69:46:e7:6b:f2:
cf:64:8a:76:29:92:5f:f0:ae:75:92:3a:f7:8d:1d:
fd:32:81:1d:d6:69:87:b0:bf:ee:f0:a3:f5:a2:e6:
34:54:9e:6a:0c:66:48:7d:58:cf:79:7e:d4:fe:f0:
60:29:be:e0:02:c2:97:0a:ca:59:1d:89:a5:27:d4:
a4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D1:37:E1:75:A9:24:35:D2:4C:EA:B1:04:A1:1A:5D:37:CD:E4:8C
X509v3 Authority Key Identifier:
keyid:61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/eNE34XWpJDXSTOqxBKEaXTfN5Iw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.22.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:a1:5c:9b:d5:de:00:52:14:de:fb:a9:4b:d1:b7:22:b7:83:
a1:72:e7:f9:a1:6a:bf:46:81:e4:ad:6e:16:91:06:9b:38:88:
d8:80:da:c5:86:23:34:b9:39:3e:01:d5:5e:05:47:58:ca:8e:
6b:92:e9:1b:22:c2:80:1c:07:7a:1a:01:fd:06:ba:6a:ac:0e:
04:a5:65:a1:25:81:05:23:f6:03:62:a3:7c:17:1b:a2:5d:c7:
96:6d:df:0f:20:10:38:4b:60:e7:0f:f4:c9:6b:57:e7:cb:df:
43:54:dd:d4:2f:70:bc:f3:78:d4:f0:b3:3b:66:83:a7:15:73:
6d:6c:79:c6:65:47:55:c6:fe:52:c8:8d:e7:0c:78:bd:a9:c6:
4e:42:3d:d6:f3:52:4d:a1:a8:de:6f:d1:a4:f2:9f:28:c5:b7:
c9:27:37:f8:f0:e8:f1:d3:39:65:7c:0e:28:c1:f3:38:5c:8d:
a0:64:42:72:ac:c7:85:aa:a9:2c:63:22:07:8a:57:1f:12:22:
34:8c:b0:f0:97:5d:39:9f:46:85:b5:91:43:35:5c:95:c3:88:
ab:14:42:ed:f3:0c:2c:9e:a4:06:e8:a5:aa:39:60:94:0f:db:
97:af:b1:18:b2:58:26:15:b8:0e:8d:e6:e6:3e:0a:fb:5b:61:
eb:9a:85:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org