Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/nBhJ9lBFClFLxwXC25ahFn4Sk6Y.roa
File: nBhJ9lBFClFLxwXC25ahFn4Sk6Y.roa (raw, json)
Hash identifier: g9aao9fvU44ZjN2Jn7l5+Q2euy8Mc1hzfF4HE2tPWNs=
Subject key identifier: 9C:18:49:F6:50:45:0A:51:4B:C7:05:C2:DB:96:A1:16:7E:12:93:A6
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0C00
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/nBhJ9lBFClFLxwXC25ahFn4Sk6Y.roa
Signing time: Fri 03 Nov 2023 02:52:00 +0000
ROA not before: Fri 03 Nov 2023 02:52:00 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9244
IP address blocks: 210.67.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3072 (0xc00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Nov 3 02:52:00 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9C1849F650450A514BC705C2DB96A1167E1293A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:15:d1:7c:fa:bd:22:04:d8:d3:b7:aa:db:f2:
05:ac:0a:f3:47:82:f3:b0:fa:9d:dc:61:c2:b6:ae:
88:18:bf:e9:c4:91:ad:c7:e2:e9:74:ef:91:ea:45:
31:5d:0d:8b:6f:73:92:2f:af:a4:9d:00:e1:4a:f6:
86:28:e9:cd:40:02:a0:ec:c4:06:e1:30:3e:52:c1:
47:7d:e3:0d:90:1b:d1:c4:1b:0a:30:c5:ee:cd:79:
e5:13:b9:24:84:a7:da:16:73:55:ac:7d:05:bd:a9:
df:12:25:23:5c:65:9c:86:7d:16:78:ad:b2:d5:e3:
ab:25:4e:aa:b5:87:89:67:dd:d0:c9:f4:23:ac:24:
46:97:ca:1c:2e:63:c7:6a:1a:ce:5f:00:40:23:6c:
7a:be:53:d1:2a:27:a2:36:45:65:e7:6e:c3:9e:72:
ea:38:16:11:f9:e2:bc:55:c4:21:a1:85:6b:72:59:
1c:bf:3a:b5:39:3a:27:88:07:99:38:b3:40:f5:ae:
4e:3c:01:57:52:69:20:a1:f5:0a:a1:89:a3:a7:a5:
8a:0d:38:e9:b1:5f:86:cb:70:5f:bf:a4:37:aa:fb:
4f:4b:5b:fb:d7:30:da:e8:68:3e:34:0d:76:db:7b:
cd:4b:5d:c7:71:fa:95:99:1f:36:69:0c:8a:b8:5f:
62:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:18:49:F6:50:45:0A:51:4B:C7:05:C2:DB:96:A1:16:7E:12:93:A6
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/nBhJ9lBFClFLxwXC25ahFn4Sk6Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.67.96.0/20
Signature Algorithm: sha256WithRSAEncryption
a6:a4:65:f4:fa:30:8b:ad:28:63:39:98:b3:c8:50:4b:6c:f0:
e6:cd:78:e3:79:6d:74:d8:a4:08:5e:0c:af:97:26:03:ae:12:
5d:d4:66:4e:1d:b0:0a:19:2b:90:4a:7e:dd:9d:6b:19:0a:87:
e1:a8:b9:9c:d1:be:24:dd:d7:f5:cf:ad:9b:e0:ab:37:6c:19:
78:b2:e9:ba:30:7d:99:66:43:cb:65:ef:54:5f:c6:10:04:f2:
2d:fc:62:68:70:f7:1c:69:4b:4a:0e:e2:1a:c7:03:4d:bc:c2:
d9:39:b3:34:75:c0:5b:8a:4e:ea:af:92:11:1f:fc:06:71:09:
40:ae:8a:c5:b0:5c:63:0d:fa:e5:44:a2:48:0e:85:0d:7e:d0:
e5:ea:d9:11:84:03:27:51:71:3c:de:75:cd:43:fb:3c:09:59:
44:6e:90:ab:ce:26:86:f1:19:c2:05:10:43:1d:a0:80:3b:82:
01:e8:cd:13:45:7e:12:ac:3f:18:ce:78:7b:40:a9:b9:54:d8:
b2:5b:f9:51:1f:ce:08:45:07:1c:c5:9e:0f:78:d8:a0:bd:c5:
6c:65:b9:95:44:1f:bc:09:b7:1d:de:c2:d8:d6:69:52:d3:ac:
8e:90:be:73:de:e6:cb:0a:68:06:47:34:41:13:46:3a:65:d5:
00:81:a7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org