Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/4MwHZTviwBkKi1GbOPb9t-gw2nI.roa
File: 4MwHZTviwBkKi1GbOPb9t-gw2nI.roa (raw, json)
Hash identifier: cAi7pVDVdZcqjCwPeX1cyTxA8Kt6lG3NhWO6PwrXU4w=
Subject key identifier: E0:CC:07:65:3B:E2:C0:19:0A:8B:51:9B:38:F6:FD:B7:E8:30:DA:72
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0C1F
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/4MwHZTviwBkKi1GbOPb9t-gw2nI.roa
Signing time: Fri 05 Jan 2024 11:05:12 +0000
ROA not before: Fri 05 Jan 2024 11:05:12 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 222.250.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3103 (0xc1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 5 11:05:12 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E0CC07653BE2C0190A8B519B38F6FDB7E830DA72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:2e:ec:01:44:6f:63:0c:9f:26:9d:02:d6:
c2:cf:85:b4:22:72:0c:5d:11:3b:a4:14:2f:73:aa:
45:ca:84:d6:9c:c4:f4:30:6c:cc:26:45:cc:3b:22:
03:d4:c8:6f:ee:cf:f7:e3:e5:be:14:bb:a6:d9:dd:
8b:84:e2:db:7e:82:bc:91:bf:bf:a7:67:80:a0:0b:
bf:bb:b3:e9:67:8b:32:8e:35:c6:be:f8:91:cf:47:
77:5c:a4:b0:c2:95:d4:ef:54:fb:d2:b8:8a:5b:80:
c6:0f:fe:23:db:c9:10:f3:77:03:1c:58:ac:f3:6b:
e5:eb:31:77:7a:62:98:06:c2:69:0e:fc:af:bb:04:
ea:bc:fc:33:f4:74:94:08:41:02:bd:9c:a8:d7:79:
56:a1:35:1f:41:30:ab:27:87:50:48:51:78:94:06:
10:74:8d:7c:5b:9c:9e:d0:47:d9:3e:0f:78:84:96:
2d:c4:c2:db:00:fd:b6:7c:f9:36:c8:a0:28:7c:0f:
e6:f4:9f:99:6e:53:64:65:96:60:9b:8a:7d:65:2e:
d6:14:08:da:09:ba:ea:d1:ec:16:ce:43:93:7d:ee:
86:39:ee:b9:b6:29:07:55:36:25:b1:ba:79:aa:b7:
a5:96:c2:c8:1b:14:94:18:30:c7:b8:72:6e:05:07:
4a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CC:07:65:3B:E2:C0:19:0A:8B:51:9B:38:F6:FD:B7:E8:30:DA:72
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/4MwHZTviwBkKi1GbOPb9t-gw2nI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
222.250.128.0/18
Signature Algorithm: sha256WithRSAEncryption
60:2f:8b:49:3d:9b:eb:97:e0:fc:43:43:04:86:43:82:f0:bf:
a5:0e:43:1f:c5:e0:45:b5:8c:d1:ea:15:5b:46:53:44:a0:7b:
0a:a4:e1:d0:a1:78:95:6c:c0:ed:3f:3e:14:89:da:f7:eb:63:
2a:2c:df:5a:83:6f:d6:9c:ca:eb:23:06:bf:2c:1d:22:a7:e3:
1b:d2:83:c1:fc:14:f8:c3:a9:5a:9d:6b:89:ab:02:a0:e6:ca:
85:07:a6:11:65:ad:24:b5:e6:2a:2c:3f:b8:6d:d0:76:c9:05:
46:39:b0:91:4b:42:df:6e:4b:b5:3a:70:79:25:ae:0c:02:42:
db:d8:e0:dc:55:28:6e:a8:70:cd:d6:00:be:60:85:51:99:d1:
6d:d9:b5:31:c9:11:c0:29:13:9c:7b:dd:3e:57:7e:91:89:88:
79:c8:fe:3d:0b:3b:9d:6a:3d:80:0d:54:5c:ec:7b:05:d7:c9:
41:89:bf:dc:f0:71:8e:31:6e:34:57:62:d2:75:1e:55:d3:36:
2d:27:4c:58:32:f9:29:e8:74:03:db:e9:69:8f:3b:cc:74:3a:
d6:b9:3f:27:53:5e:dd:fe:3a:14:be:e2:86:cd:f6:4e:eb:8d:
ba:c7:d1:d9:8c:3d:43:cf:70:07:5e:e8:88:c8:34:84:c0:ea:
10:8e:a1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org