Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/1NY8JliFHKki09ICvzS7JSxdKfE.roa
File: 1NY8JliFHKki09ICvzS7JSxdKfE.roa (raw, json)
Hash identifier: kJc4AosR0grnSQFtHm+9pajXBknmAKtzd12KJxKhSik=
Subject key identifier: D4:D6:3C:26:58:85:1C:A9:22:D3:D2:02:BF:34:BB:25:2C:5D:29:F1
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0E39
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/1NY8JliFHKki09ICvzS7JSxdKfE.roa
Signing time: Wed 27 Mar 2024 05:51:16 +0000
ROA not before: Wed 27 Mar 2024 05:51:16 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131601
IP address blocks: 210.58.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3641 (0xe39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Mar 27 05:51:16 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D4D63C2658851CA922D3D202BF34BB252C5D29F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4d:64:0c:91:e3:7e:bc:4b:6f:51:48:64:3c:
41:6b:70:01:82:f4:83:6f:80:85:e4:ef:c4:be:14:
ab:d0:61:56:cd:ee:41:d8:0a:0b:67:e6:5b:b4:fa:
57:e9:20:aa:d0:94:e9:ea:0c:72:ff:bf:c4:f5:44:
c3:5d:52:7c:31:73:3e:7c:0a:6c:d1:f6:7f:26:32:
d2:25:c3:6f:fd:bb:28:bc:14:c7:69:fd:f7:1f:ec:
14:49:3b:94:85:07:fc:bf:1b:03:be:7a:89:2b:e9:
b4:28:60:43:de:d6:bf:69:cf:a6:1d:26:1a:4e:2a:
ce:90:35:43:37:bf:da:87:13:00:5f:2d:14:e1:af:
35:9c:d2:7c:35:b8:22:65:61:32:b4:68:05:43:fc:
e3:7e:b6:39:fa:80:71:26:58:b5:42:36:94:18:b7:
4a:b6:6f:be:df:be:92:c1:0f:44:8c:e0:02:52:fd:
7a:03:dd:43:01:94:f1:e4:e6:b5:7b:6e:0e:0c:f8:
21:0c:1e:21:ac:b0:0a:6f:e3:04:c5:5d:ee:fd:41:
37:72:09:52:e5:56:fb:a6:0c:28:24:63:2d:c6:64:
22:c5:45:77:c4:52:52:f2:b4:e6:be:44:56:df:0c:
2e:74:96:d1:b2:d8:67:ba:c4:3d:c8:a8:f6:06:a2:
35:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D6:3C:26:58:85:1C:A9:22:D3:D2:02:BF:34:BB:25:2C:5D:29:F1
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/1NY8JliFHKki09ICvzS7JSxdKfE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.58.120.0/24
Signature Algorithm: sha256WithRSAEncryption
57:4a:d8:ac:d9:05:a2:bb:43:17:50:09:17:26:a7:da:1d:a9:
c1:37:fa:57:be:aa:03:6c:2a:93:ae:d2:61:2d:40:24:bf:bb:
8d:35:41:0a:b8:ba:16:f7:70:80:88:4f:7e:2c:67:2c:d8:13:
60:91:9a:2f:cf:b8:b1:ac:03:1e:88:ab:f1:a1:21:67:31:ed:
0f:d2:68:cb:a7:f5:d9:5e:63:09:b0:d2:cd:c7:62:f6:a4:84:
e8:8f:dd:73:04:44:ca:b1:7f:52:8f:e0:6c:fd:61:f8:fd:5b:
98:99:5f:ba:9e:4d:7c:12:7a:ee:2d:3c:f1:23:94:81:94:94:
75:24:55:8c:af:85:37:68:f5:ef:d0:cd:10:53:18:80:5e:6c:
34:ae:1c:79:36:cf:52:4c:95:fc:2f:2e:72:ea:a6:f2:13:99:
56:d7:cc:82:05:6c:e5:e5:e7:65:16:05:f1:87:77:fa:03:46:
4f:21:29:eb:29:46:6d:dd:b1:04:34:f6:be:81:e7:47:b4:24:
1b:2a:46:81:44:45:99:39:e2:ea:11:7d:88:4f:12:4a:d3:3a:
b8:24:ea:b9:b4:98:e7:98:ec:65:c7:f5:50:82:62:58:b9:c4:
df:a2:f0:9b:27:bd:86:47:bf:51:29:c5:ed:2d:0a:fe:f3:d8:
d6:ff:3a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org