Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/2zejLU-0CxVTVKcMD82IL_jzjdI.roa
File: 2zejLU-0CxVTVKcMD82IL_jzjdI.roa (raw, json)
Hash identifier: Kroy+WJcN649QhcJ/ru0VXPaOgTHKZfnKz8rYjn+Ffg=
Subject key identifier: DB:37:A3:2D:4F:B4:0B:15:53:54:A7:0C:0F:CD:88:2F:F8:F3:8D:D2
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0D68
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/2zejLU-0CxVTVKcMD82IL_jzjdI.roa
Signing time: Mon 15 Jan 2024 21:26:26 +0000
ROA not before: Mon 15 Jan 2024 21:26:26 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131597
IP address blocks: 218.35.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3432 (0xd68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:26:26 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DB37A32D4FB40B155354A70C0FCD882FF8F38DD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c7:ea:fd:b9:73:0f:17:c3:f2:1f:b5:32:75:
be:13:a0:16:1e:8e:52:cc:eb:0e:b4:0b:cf:76:24:
95:83:4e:cf:d2:53:a8:c5:8e:66:65:ed:3f:0f:0b:
35:9c:2e:fb:e4:7a:9f:6c:98:de:f5:a3:76:08:44:
49:62:1d:4a:e0:f4:fc:c3:4a:95:d6:6e:fb:2e:be:
03:f0:41:4c:7e:7a:d3:43:55:36:3c:6f:f9:46:08:
ae:05:42:8a:46:de:e2:e6:e4:2d:6d:31:97:9f:ce:
44:90:06:74:67:17:fb:00:ce:0a:fa:91:95:8c:49:
6f:3d:4d:54:df:71:00:ba:e8:31:01:d4:c8:8f:a1:
63:94:38:9b:7a:85:1a:d1:5b:b4:60:96:e4:23:e0:
91:33:e6:3e:ce:c7:c5:04:83:17:a0:24:56:d4:00:
e7:59:aa:c6:5c:d9:ad:11:d7:20:11:90:96:41:c5:
2a:62:2e:de:6d:02:c6:ff:ef:be:68:84:0c:75:5d:
1f:92:f3:52:1e:25:6b:43:9e:28:f1:0a:49:9e:14:
49:63:dd:a6:ce:74:24:f3:12:d4:84:80:a1:d9:03:
fe:f2:44:46:29:87:04:61:4b:6e:f7:d1:15:7b:bb:
77:7a:be:5b:4a:c8:e5:dd:1d:29:21:06:bb:ce:b4:
44:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:37:A3:2D:4F:B4:0B:15:53:54:A7:0C:0F:CD:88:2F:F8:F3:8D:D2
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/2zejLU-0CxVTVKcMD82IL_jzjdI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.35.32.0/19
Signature Algorithm: sha256WithRSAEncryption
26:22:3a:0e:1f:56:cf:9c:15:4a:18:77:6e:0c:cb:96:c9:09:
9e:38:42:f0:ea:26:03:cb:5d:e5:2a:d8:43:53:fa:1b:c0:e8:
2e:ce:26:cb:90:72:70:48:0a:b1:c7:e1:95:b9:2e:6c:60:3c:
8c:4b:eb:57:87:b2:58:26:af:1a:a8:db:db:be:e1:ef:d6:bc:
77:37:40:04:35:3e:c1:16:62:68:67:7f:f1:f6:41:cb:d4:84:
2f:5c:2d:51:6f:8f:40:11:7e:03:14:46:6d:c2:c4:6a:1d:49:
65:46:5d:10:fa:a7:b0:39:2f:a4:6a:e6:2f:01:02:f0:6d:65:
80:99:22:ee:57:1c:07:eb:bd:c2:16:87:d1:c6:58:24:b3:d7:
b4:11:1b:cc:2d:67:41:b4:fd:77:92:95:fc:df:d2:5d:67:ea:
b9:ea:ef:55:28:19:e6:eb:c6:cf:f5:aa:c4:9d:ac:3b:ea:5e:
46:64:a8:78:b0:f6:7d:be:68:e2:17:07:c3:22:6b:c2:eb:29:
52:83:11:fc:d0:59:8e:a8:b2:58:84:6d:83:70:6d:45:2c:59:
8a:74:4f:0f:2a:f9:89:fd:5e:75:0c:ef:ca:7d:d4:62:11:a6:
cd:3a:ad:86:4c:33:37:75:cd:fe:d6:9d:45:85:bb:1e:af:2a:
e4:52:aa:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org