Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/4Sd9h-FOFipRxjfws7MZ31BDqYU.roa
File: 4Sd9h-FOFipRxjfws7MZ31BDqYU.roa (raw, json)
Hash identifier: bC70mCDcNA1u6TUoP4aqh6YDVKbH+1mOK30/5w/fi6c=
Subject key identifier: E1:27:7D:87:E1:4E:16:2A:51:C6:37:F0:B3:B3:19:DF:50:43:A9:85
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0D88
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/4Sd9h-FOFipRxjfws7MZ31BDqYU.roa
Signing time: Mon 15 Jan 2024 21:29:12 +0000
ROA not before: Mon 15 Jan 2024 21:29:12 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24154
IP address blocks: 210.63.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3464 (0xd88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:29:12 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E1277D87E14E162A51C637F0B3B319DF5043A985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b2:ef:78:34:5e:19:53:8b:6b:9c:30:ef:cf:
74:f7:00:7e:62:71:e7:12:d1:00:5a:75:f8:ab:b3:
b8:34:78:8c:55:5b:ef:a3:ae:59:f9:84:60:c0:80:
16:06:b8:6f:a2:0c:41:bd:da:70:ca:37:d7:e6:8a:
e9:0f:8a:83:0c:1f:5d:68:d2:c4:bf:ca:20:8d:36:
f9:e8:9d:be:93:47:c0:3d:a6:43:83:8e:b7:bb:80:
48:f4:c2:99:ee:73:ce:ae:de:5d:5d:a7:72:71:63:
7f:a8:a6:6e:e3:76:a2:2f:ba:d8:1e:4f:aa:99:66:
c3:07:e9:5c:ed:a4:fc:1e:97:6e:59:73:29:29:42:
0b:88:c2:ff:99:1b:21:11:d8:10:40:6c:2e:2f:9e:
71:c4:db:84:d4:2f:8a:e6:7d:f4:14:97:1d:b3:e7:
15:88:ab:85:fa:f0:d4:5b:ae:06:c5:db:80:59:24:
fe:1b:8c:53:40:b2:bd:4e:8c:0d:a1:c4:0b:ab:60:
0f:01:10:8f:6d:8a:89:f3:cb:d0:ca:0c:9e:ca:eb:
a3:b0:4a:2f:f1:9d:e7:f0:74:84:fc:3a:1c:1e:ab:
55:27:8b:c6:c2:cd:fd:6a:73:53:b1:7a:90:33:49:
05:8a:3a:8b:4c:95:a5:7d:06:b0:52:af:01:87:ec:
dd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:27:7D:87:E1:4E:16:2A:51:C6:37:F0:B3:B3:19:DF:50:43:A9:85
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/4Sd9h-FOFipRxjfws7MZ31BDqYU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.236.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ea:dc:d4:2d:10:30:35:40:f4:8d:da:56:5b:5d:56:8f:a1:
91:b1:0d:f3:7f:c6:06:91:4d:42:78:b3:63:49:a6:49:8c:9a:
5a:a2:6b:fd:f6:b0:c6:d1:fd:0b:42:b6:34:e5:bc:8c:1b:25:
a4:62:f4:3d:d5:1c:04:99:24:00:14:6a:8f:af:90:b7:16:69:
e2:e4:b2:f3:55:a1:37:7d:60:4f:a6:6f:03:14:79:30:c9:4a:
d4:6b:06:32:4b:53:8e:2a:a9:85:1d:60:cf:7c:e5:ee:c0:aa:
f5:cb:be:1c:e8:ad:d3:d4:a1:d3:49:86:96:3f:c7:61:a8:c7:
5c:05:07:5e:31:81:5d:83:0f:09:c7:d1:f5:3d:0e:00:2d:6e:
3d:4b:47:67:eb:fb:35:1b:f0:30:d3:1d:11:ee:4b:06:68:05:
6a:9d:20:4e:39:9b:c7:15:c7:7f:e4:5b:50:69:b4:a7:cb:3c:
e4:57:0f:7d:77:a9:b9:c5:75:6e:a5:7f:83:ac:4e:7a:fb:fe:
62:b1:6f:cf:47:6f:50:16:92:22:c0:e4:f3:8b:40:24:0d:b3:
a4:28:b4:f2:f4:a6:50:e6:3f:f7:17:7f:0d:ea:85:b9:42:40:
2c:a1:a3:a9:d0:d2:65:81:97:75:d5:94:40:c0:72:9a:10:0d:
93:be:88:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org