Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/-VGxomTDnefm8e1HJSyIQjRDYRI.roa
File: -VGxomTDnefm8e1HJSyIQjRDYRI.roa (raw, json)
Hash identifier: 4iXEho+kD0rti1oAlVAaP0f3psHvts07oOwlkDGEfWA=
Subject key identifier: F9:51:B1:A2:64:C3:9D:E7:E6:F1:ED:47:25:2C:88:42:34:43:61:12
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0CC4
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/-VGxomTDnefm8e1HJSyIQjRDYRI.roa
Signing time: Mon 15 Jan 2024 21:11:05 +0000
ROA not before: Mon 15 Jan 2024 21:11:05 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24154
IP address blocks: 210.202.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3268 (0xcc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:11:05 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F951B1A264C39DE7E6F1ED47252C884234436112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7a:8c:a9:4e:c7:ed:83:68:60:5c:ad:76:91:
ca:d1:a8:fa:71:10:83:43:40:08:3f:ae:56:7e:f1:
58:2d:8c:cc:f1:e7:39:55:99:65:ad:f5:0d:b7:dc:
81:94:48:7f:9f:86:2d:0e:4e:23:64:b4:69:55:34:
2d:03:47:0f:7e:ca:41:14:e3:9e:f9:f2:14:f7:3c:
25:ac:77:db:54:67:62:90:29:9e:8e:ce:91:9c:8a:
f8:a6:b4:e3:44:29:32:13:a0:34:18:14:b4:94:ed:
5e:13:2c:b1:3c:90:7c:d3:d3:26:25:20:5f:96:c5:
3b:0b:0a:d3:16:03:44:99:a6:b4:54:dc:88:55:9f:
8a:81:6f:ef:ee:6d:cf:8d:68:21:d8:27:05:8d:fb:
6a:96:4c:65:db:59:e1:ec:fb:49:14:c1:69:0c:80:
87:43:84:80:ab:47:6b:a4:2e:2f:2d:44:ea:01:a8:
91:f5:30:23:09:f5:26:13:1d:2a:5c:13:da:d5:14:
6d:a2:14:9d:a2:50:4b:ce:31:a8:1e:63:68:55:a1:
12:7e:0e:72:33:09:e1:8a:74:69:f8:56:bb:d6:c8:
6b:b9:2f:e7:7c:7f:1d:8f:84:a3:47:44:a8:34:73:
8f:66:43:50:e2:41:2c:59:6c:24:ad:9c:da:92:a3:
52:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:51:B1:A2:64:C3:9D:E7:E6:F1:ED:47:25:2C:88:42:34:43:61:12
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/-VGxomTDnefm8e1HJSyIQjRDYRI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.192.0/18
Signature Algorithm: sha256WithRSAEncryption
84:c0:52:fe:ae:e5:fc:3f:dd:23:98:31:59:1e:a1:46:8d:e4:
a4:db:d3:9f:cb:68:1a:0b:df:ba:23:dd:00:3d:31:22:48:5b:
3c:8b:6f:76:92:dd:b1:f7:2c:39:a5:44:20:21:21:e8:9d:0d:
25:9b:00:0a:c4:81:1f:0d:b4:95:a6:e8:b3:88:79:5c:e4:4d:
54:1f:33:1d:77:18:e5:07:28:9d:b4:4d:f4:ee:7f:3d:fa:b6:
b3:f2:be:88:20:f8:10:7e:90:b2:7a:e7:d3:7e:cf:7a:e5:bc:
99:06:a6:d4:a4:92:78:f6:52:5c:39:73:a1:32:51:e2:04:17:
79:bd:a0:dd:b1:b6:4f:e4:22:ef:8e:04:72:47:50:14:57:42:
44:c7:d7:fa:32:b1:fb:0e:89:76:74:55:86:81:47:7c:b9:f1:
76:d3:16:ad:ce:f1:48:f8:57:eb:cd:2e:98:27:25:be:41:a1:
62:29:89:32:f4:f9:5a:65:22:75:b7:50:ec:66:84:06:28:be:
15:b4:0c:a9:95:5b:66:4f:67:9e:ac:6a:07:db:4d:a5:4e:f5:
ca:36:7e:5f:7c:e8:bb:01:12:3e:2f:a7:c0:26:05:18:18:1a:
f3:49:54:03:b1:79:40:7d:c8:b4:32:1c:af:5a:c6:b0:be:88:
44:34:3e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org