Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/2XQzhGnLVFHNzeitnTJzzu85Slo.roa
File: 2XQzhGnLVFHNzeitnTJzzu85Slo.roa (raw, json)
Hash identifier: 9SsNDYzNhjbiyWPgKxcb8mkQmkg/q2AzJSzrsZNndlE=
Subject key identifier: D9:74:33:84:69:CB:54:51:CD:CD:E8:AD:9D:32:73:CE:EF:39:4A:5A
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0E4A
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/2XQzhGnLVFHNzeitnTJzzu85Slo.roa
Signing time: Tue 16 Apr 2024 09:16:25 +0000
ROA not before: Tue 16 Apr 2024 09:16:25 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18419
IP address blocks: 218.34.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3658 (0xe4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Apr 16 09:16:25 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D974338469CB5451CDCDE8AD9D3273CEEF394A5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2e:73:49:1c:94:9a:ce:88:ff:4f:f8:e9:26:
45:da:1b:79:b3:30:7a:ea:3f:7d:4a:34:5c:58:01:
ad:22:94:1d:39:42:ad:8f:01:a2:4c:1d:c5:45:c4:
8e:4d:03:f3:6a:b5:f4:07:60:c9:5a:b4:f6:b5:64:
bb:d5:6d:a8:4b:52:6d:23:c8:2b:40:19:96:ea:0c:
a1:5a:64:ed:15:5b:40:f5:86:54:d8:1c:43:52:8d:
db:4e:52:f3:cf:04:48:6d:c7:ce:21:c9:b3:c7:4c:
3e:15:80:5f:d0:56:e2:e3:7f:2d:86:1c:8c:d4:f2:
dc:c2:f7:81:0a:12:60:50:02:8f:ff:bf:76:c7:92:
52:3e:98:4a:48:65:0e:0b:f0:f3:72:b8:10:41:4f:
7b:4e:5f:71:a9:c1:c4:2d:cf:29:55:ca:83:81:c4:
97:16:a3:28:9e:d7:5b:05:71:2f:c2:21:0e:fe:7d:
28:fd:76:7d:c8:79:72:9b:6e:05:be:88:de:9d:73:
25:f9:0a:96:66:04:69:6d:89:2c:4a:fc:63:7e:66:
f4:c1:d2:67:5d:d7:50:79:a2:d6:5f:f9:40:c0:58:
86:61:3d:22:f5:37:51:26:dd:af:a9:48:06:78:52:
4b:5b:9f:1f:ed:88:ce:d0:fd:54:7b:b8:a2:9d:98:
84:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:74:33:84:69:CB:54:51:CD:CD:E8:AD:9D:32:73:CE:EF:39:4A:5A
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/2XQzhGnLVFHNzeitnTJzzu85Slo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.34.96.0/21
Signature Algorithm: sha256WithRSAEncryption
69:10:7d:bc:33:2c:eb:d2:d1:3a:7a:06:73:11:ad:e6:93:b4:
a5:74:37:a8:0a:86:5a:35:11:81:a6:23:da:1e:54:1f:5f:34:
82:8c:dd:41:5e:b2:fa:1d:e9:be:77:c1:1f:9c:98:1d:cd:c5:
ca:94:f3:e3:1b:f4:bf:13:e0:67:0d:35:4b:fe:65:b9:e4:10:
73:a7:fa:5f:ba:15:9b:05:0d:3e:c2:e1:ce:3f:a8:54:85:06:
a9:01:80:16:38:31:58:82:38:8b:ec:77:43:6c:03:83:6f:65:
b7:95:6f:1b:a7:8f:54:c8:82:df:6e:27:5e:bf:15:80:85:3b:
2c:bf:26:e2:d7:fc:50:f4:49:b6:81:ee:4a:ad:4f:cd:2c:ac:
1b:04:64:33:7b:8a:70:c1:e6:29:4c:9f:cb:55:07:91:30:57:
fc:26:79:7f:e7:38:e2:3d:b3:f9:1b:37:43:99:fb:cf:56:f7:
58:ba:de:cf:f7:23:47:74:09:73:63:a6:9f:d0:7d:80:07:b7:
1c:d3:5b:6d:0e:f7:fa:f1:b1:dd:0e:e9:c3:0a:51:4d:96:43:
ae:70:3a:44:29:c7:75:e8:a4:f0:ab:c1:22:2d:f0:11:22:71:
6b:40:9f:ab:01:2b:bd:70:5d:77:81:a4:23:e1:9c:14:0b:b3:
ce:8a:aa:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org