Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/F4gIUawHIoMBIr0sClj1QhMx4zI.roa
File: F4gIUawHIoMBIr0sClj1QhMx4zI.roa (raw, json)
Hash identifier: LxjvHV5aNe8NAFI54fYgH9V7s7Kns7tnOI5MS+1cxr8=
Subject key identifier: 17:88:08:51:AC:07:22:83:01:22:BD:2C:0A:58:F5:42:13:31:E3:32
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0BC7
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/F4gIUawHIoMBIr0sClj1QhMx4zI.roa
Signing time: Fri 01 Sep 2023 08:36:44 +0000
ROA not before: Fri 01 Sep 2023 08:36:44 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9244
IP address blocks: 113.21.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3015 (0xbc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Sep 1 08:36:44 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=17880851AC0722830122BD2C0A58F5421331E332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fc:75:24:e6:68:4f:94:90:68:61:1e:c7:cf:
8e:f4:35:59:ec:10:8a:85:75:f2:27:81:a6:36:ee:
af:0d:f7:8f:04:6c:01:8f:59:17:d6:03:44:b2:3d:
c0:49:75:e3:bf:a9:e8:23:d3:86:0a:3d:7b:e2:da:
c3:4f:f7:06:17:d4:9f:72:74:9d:b8:88:2c:f9:7e:
db:de:5f:2a:c8:10:c6:4e:4e:82:2c:a9:44:dd:21:
23:6a:02:2b:b3:c4:d1:7f:5b:fb:ba:08:c4:7b:71:
7a:24:ba:b5:09:19:2c:93:1d:61:54:dc:68:aa:63:
9f:db:f3:b9:97:9a:eb:42:56:89:79:68:ed:a3:fb:
6f:a6:f4:45:03:86:c7:a7:38:3a:65:11:01:94:26:
9f:84:0e:a8:25:c3:a3:38:55:49:0b:e4:be:2c:fb:
c2:e4:9e:c5:e6:8f:d4:43:fd:e9:26:67:eb:bc:61:
73:8b:17:0c:e7:c3:b9:60:8b:dd:f6:f7:26:70:dc:
78:54:39:94:28:3c:a1:a0:7c:c5:65:8d:1f:f4:df:
fb:94:69:65:52:e2:8a:0e:72:f8:68:8c:55:dd:0d:
d0:6d:02:4e:9d:29:1e:81:f8:d2:00:2b:a2:01:12:
13:df:79:11:65:08:4a:c4:d8:5c:31:2c:05:44:50:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:88:08:51:AC:07:22:83:01:22:BD:2C:0A:58:F5:42:13:31:E3:32
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/F4gIUawHIoMBIr0sClj1QhMx4zI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.188.0/22
Signature Algorithm: sha256WithRSAEncryption
25:6c:24:53:10:23:8e:9e:d4:0e:1f:e5:30:65:de:fb:41:f8:
fc:c1:d5:cb:c2:2e:ef:8f:11:34:09:5a:4c:9f:08:1a:24:fb:
95:ad:38:8d:d3:24:a3:70:6e:c2:5d:1b:2a:8d:ce:4f:a2:83:
6f:08:a9:d9:bc:eb:e2:a9:bf:1b:2c:38:35:45:b2:6b:2c:76:
78:ba:6c:0a:4b:66:78:36:70:a9:38:2d:87:e9:d8:72:50:26:
4d:04:06:bd:29:ba:3d:3c:fd:35:6a:16:f2:52:9e:51:49:7e:
7b:f9:26:fb:6b:53:3f:3a:00:1e:8b:52:50:8c:28:3a:65:9f:
a7:e6:53:e5:26:2c:bf:4e:34:fe:1c:66:ee:31:59:50:16:a9:
c6:3a:0d:64:e3:5d:db:c2:2d:f6:ce:b5:3c:b0:2a:88:77:5a:
b3:ad:8b:fa:71:75:aa:38:83:fe:c7:68:ff:e7:d5:e4:e4:f1:
4b:7a:a9:a6:fe:72:c9:10:e7:44:da:a7:ff:24:0c:78:37:ac:
7d:bb:50:d0:ea:e2:49:0f:21:e6:5b:aa:72:36:34:8e:b2:81:
0a:e7:e6:e4:d4:03:2e:c3:89:4d:89:9b:2a:c2:59:c3:97:97:
96:0f:e9:7b:11:87:6c:37:15:06:9d:b7:69:92:6a:8c:68:d3:
bc:2b:a1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org