Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EASPNET/kn8hr1uzL5_kzsZJuswmavrLBUY.roa
File: kn8hr1uzL5_kzsZJuswmavrLBUY.roa (raw, json)
Hash identifier: JeeI5KXhgR0rQQrUy+po1SuWd51iZa+DaxWYPRZZ29I=
Subject key identifier: 92:7F:21:AF:5B:B3:2F:9F:E4:CE:C6:49:BA:CC:26:6A:FA:CB:05:46
Certificate issuer: /CN=552B16164C361040D88F32D36509448CF3BB9D25
Certificate serial: 0B35
Authority key identifier: 55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/kn8hr1uzL5_kzsZJuswmavrLBUY.roa
Signing time: Fri 01 Sep 2023 08:38:51 +0000
ROA not before: Fri 01 Sep 2023 08:38:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 10135
IP address blocks: 202.168.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2869 (0xb35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B16164C361040D88F32D36509448CF3BB9D25
Validity
Not Before: Sep 1 08:38:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=927F21AF5BB32F9FE4CEC649BACC266AFACB0546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:62:9d:49:08:f4:bd:5d:4b:a7:41:64:20:
94:81:e0:31:48:a6:16:53:b9:b5:9b:1f:52:f7:1f:
95:6e:96:ea:07:8c:49:4e:59:28:f0:c2:ea:06:23:
50:e9:19:d7:c4:44:16:8d:46:d4:71:80:d6:b0:52:
b0:54:c5:45:1c:04:09:b8:f6:15:f1:4f:07:c6:fb:
a7:eb:2c:5f:a1:80:6f:e0:9a:cb:6a:d4:b8:2b:f1:
29:7c:ac:a7:5a:9d:c8:fa:a9:64:e6:b2:13:56:0b:
fc:b4:86:72:70:dc:c7:5b:2b:66:b2:13:50:4f:ef:
1e:09:49:34:30:bb:cc:0f:06:72:50:c8:d9:61:e0:
32:7d:86:23:97:26:62:70:0d:02:f4:04:4b:8c:2c:
6e:09:06:16:50:61:5f:1c:13:51:f2:10:de:77:5d:
26:23:ac:3b:77:9a:63:48:de:6e:7e:ac:11:0b:ce:
5e:3a:36:f7:9e:0a:d5:b2:4b:63:a4:2a:ff:9b:20:
5f:d7:58:b3:1e:d8:fa:1e:21:43:66:aa:95:01:56:
d6:ce:06:78:29:52:f7:ce:84:73:e1:fb:81:32:c9:
47:fd:06:da:73:8d:fc:3e:53:2f:53:a3:79:e9:b1:
63:68:48:49:5e:8b:78:66:e5:20:2f:95:5e:49:e8:
26:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7F:21:AF:5B:B3:2F:9F:E4:CE:C6:49:BA:CC:26:6A:FA:CB:05:46
X509v3 Authority Key Identifier:
keyid:55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/kn8hr1uzL5_kzsZJuswmavrLBUY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.168.192.0/20
Signature Algorithm: sha256WithRSAEncryption
af:aa:ac:a0:86:1a:80:a0:f7:b1:4c:9e:d8:20:e3:71:d1:59:
b8:43:b0:01:fa:ac:85:8b:dd:16:b2:a6:a9:95:ce:8c:f6:5c:
be:0b:aa:e4:a0:d3:cf:cd:ba:7e:4f:a7:72:61:ef:fc:8a:82:
26:27:75:67:77:dd:9d:2b:15:a8:e4:57:61:c7:cc:76:89:aa:
da:64:9a:bf:22:a2:30:ee:7d:9e:24:71:a6:d3:a5:36:b5:44:
c5:da:53:0a:ab:52:5d:d8:d5:f6:04:58:d6:13:58:a2:2e:f0:
4d:a2:d2:1e:17:20:6e:f5:69:74:03:0f:4d:52:67:7c:40:fe:
87:b7:83:cc:37:ed:aa:1b:a7:c0:2e:88:3a:6c:19:39:2d:7d:
b0:3c:46:fb:1d:4d:90:38:7e:1d:c3:18:0b:46:4f:03:5a:be:
5d:ba:99:ba:cf:50:e2:4e:a7:c2:dc:f9:6e:7c:aa:72:96:cc:
8d:62:d9:9f:e0:10:a8:9b:f0:40:4b:db:ca:08:2a:83:1a:c9:
dc:43:2a:01:7a:73:57:a0:55:34:d1:b0:16:50:02:b0:64:7d:
5d:be:bf:ae:db:22:eb:73:76:ca:c1:07:aa:d1:7a:22:8a:27:
30:6c:7d:aa:a7:f3:c4:8f:b3:36:9c:e2:54:d7:87:63:a0:e0:
4c:8a:75:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org