Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EASPNET/_FSfvEK3UVKgzMdhv7o5F-fPlLM.roa
File: _FSfvEK3UVKgzMdhv7o5F-fPlLM.roa (raw, json)
Hash identifier: Ec99rK91SA5eP5xmlB81O+lHx9cTrrhNsKky0t1Ql4o=
Subject key identifier: FC:54:9F:BC:42:B7:51:52:A0:CC:C7:61:BF:BA:39:17:E7:CF:94:B3
Certificate issuer: /CN=552B16164C361040D88F32D36509448CF3BB9D25
Certificate serial: 0B33
Authority key identifier: 55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/_FSfvEK3UVKgzMdhv7o5F-fPlLM.roa
Signing time: Fri 01 Sep 2023 08:38:50 +0000
ROA not before: Fri 01 Sep 2023 08:38:50 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 10135
IP address blocks: 115.85.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2867 (0xb33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B16164C361040D88F32D36509448CF3BB9D25
Validity
Not Before: Sep 1 08:38:50 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FC549FBC42B75152A0CCC761BFBA3917E7CF94B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6a:a3:93:b8:87:3a:81:54:97:79:10:a4:f0:
7f:c9:55:27:28:96:3a:dc:02:7d:be:eb:34:80:70:
1b:d9:23:be:19:9c:e5:b0:9e:3c:24:ac:44:51:61:
68:e4:61:d0:c6:49:8a:d1:49:6c:26:24:5a:3b:b3:
fd:a1:ca:b9:00:79:e4:ed:8a:a8:c8:22:44:ed:f2:
e0:e1:70:87:55:c9:1b:40:07:0e:67:80:f3:8a:ce:
ca:6e:3e:96:ec:55:f2:b0:1b:eb:c9:35:4d:35:4b:
fb:b9:85:fe:d4:e0:4e:3f:12:73:be:b0:b3:77:f8:
6c:68:aa:12:0c:81:c1:de:dd:75:1c:fe:a4:f0:e8:
5e:c2:a1:03:90:82:cf:b8:37:bd:e6:2d:e3:1f:ab:
3f:8d:e3:54:1e:bf:37:fe:e4:19:46:37:da:6a:d7:
7f:46:4d:f8:82:ee:bd:3d:6c:90:72:1f:e1:02:ee:
7b:5d:7e:0c:04:cb:a7:64:4c:0f:24:d6:6b:8a:73:
01:24:e8:0a:f5:bc:08:62:94:de:a0:66:c2:cb:d1:
97:fa:65:ce:95:b2:4f:86:37:e9:ba:b2:92:9d:03:
ae:bd:27:93:f9:44:f9:18:d7:63:3d:6f:01:12:05:
c0:8c:f6:43:91:4e:18:ae:e5:18:fd:66:cc:6d:f3:
80:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:54:9F:BC:42:B7:51:52:A0:CC:C7:61:BF:BA:39:17:E7:CF:94:B3
X509v3 Authority Key Identifier:
keyid:55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/_FSfvEK3UVKgzMdhv7o5F-fPlLM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.85.144.0/20
Signature Algorithm: sha256WithRSAEncryption
6a:dd:38:d8:51:02:56:4e:1b:f2:54:1a:28:83:7d:43:f3:3f:
88:64:98:b5:c5:65:52:6e:ad:57:b6:52:45:06:74:6e:9e:2d:
c9:3f:5f:78:2b:11:98:d7:71:69:4f:e7:2b:82:29:c7:cd:ba:
cb:76:9c:6d:36:d9:33:e5:2b:f9:bb:b0:54:c4:a4:a4:44:ec:
29:2c:c6:95:76:34:8c:5b:0e:48:d0:76:1f:eb:d6:15:fb:63:
73:1f:60:81:89:5a:ad:4c:7d:05:53:b7:cf:ae:41:c4:81:2b:
07:99:8c:fd:0d:1b:91:7a:7c:51:c9:2e:36:2d:87:53:73:65:
6a:c1:36:07:db:47:5a:99:63:be:3b:09:9b:74:94:cf:0d:42:
fa:2a:49:3e:94:69:8b:5e:de:03:2f:07:55:59:fa:fe:83:ce:
e3:da:80:4a:06:ec:31:fe:6f:7f:43:e9:58:da:30:f1:a5:ec:
3f:59:86:28:93:cf:e6:7a:0d:66:c5:c5:81:80:69:1f:e5:d2:
bd:4c:b5:9c:9b:a9:72:cb:da:78:25:b1:73:72:c6:a2:b5:61:
5f:0b:88:35:fd:db:ff:21:1d:05:08:9e:b8:ce:b4:2c:5c:b8:
05:29:ab:e2:f3:b0:0e:20:80:0c:fe:33:31:18:43:f3:5b:f5:
07:4a:a9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org