Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/5gucUfoWVuh_qIcuBX-TCW6zyBQ.roa
File: 5gucUfoWVuh_qIcuBX-TCW6zyBQ.roa (raw, json)
Hash identifier: m5YhfFsn8BRwixDGjddRkexiPt3v79d/ZyA/MdB+McA=
Subject key identifier: E6:0B:9C:51:FA:16:56:E8:7F:A8:87:2E:05:7F:93:09:6E:B3:C8:14
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0D56
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/5gucUfoWVuh_qIcuBX-TCW6zyBQ.roa
Signing time: Mon 15 Jan 2024 21:26:02 +0000
ROA not before: Mon 15 Jan 2024 21:26:02 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131627
IP address blocks: 219.91.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3414 (0xd56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:26:02 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E60B9C51FA1656E87FA8872E057F93096EB3C814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:34:e7:67:ea:af:ac:88:6b:f9:35:43:aa:03:
59:60:c7:09:27:0b:84:3a:fc:1e:66:fa:06:92:12:
cb:0b:d5:bb:64:bc:f3:62:ba:19:7d:91:69:3b:1f:
87:d6:fa:9a:23:44:0e:12:c2:9d:9a:29:cc:23:9c:
fe:cd:d0:3c:81:98:4c:3d:f7:d8:36:fb:f1:63:3b:
d5:b7:e8:ac:91:73:6a:5d:91:cc:30:9e:5a:0e:93:
df:48:d6:c7:20:c2:fb:12:f7:eb:24:6d:1e:5c:aa:
9c:4e:f4:14:dc:c4:49:d9:bc:1f:18:c2:6c:53:bd:
4d:c3:9c:5d:5b:66:12:9d:14:a2:4f:73:64:cd:40:
4a:61:c3:ef:28:d4:27:71:b9:db:de:78:cd:6b:ad:
2c:50:22:70:87:e0:a2:4d:96:ab:27:83:d3:1e:c2:
b5:c7:73:dc:f3:ae:63:df:56:e7:18:c1:e2:f5:db:
c9:77:d0:d7:d1:b9:8d:70:6e:ec:62:e9:99:e0:34:
e7:a4:fd:63:66:04:0a:a8:89:bf:b2:a7:67:47:64:
c5:14:ed:50:01:38:48:91:2f:b4:ff:86:db:bb:31:
88:cd:28:0b:4f:75:ed:e8:de:48:b8:27:75:a2:d5:
92:9b:c4:9a:01:b4:ee:61:ff:c7:40:97:23:72:9a:
29:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0B:9C:51:FA:16:56:E8:7F:A8:87:2E:05:7F:93:09:6E:B3:C8:14
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/5gucUfoWVuh_qIcuBX-TCW6zyBQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.91.64.0/18
Signature Algorithm: sha256WithRSAEncryption
43:3b:22:eb:04:dc:55:5c:9b:9d:ec:f3:ea:ff:c7:9b:47:d1:
88:87:50:df:ba:ad:a2:9d:1c:f8:c6:3c:d2:fc:33:4a:80:f5:
f8:73:e4:f5:67:8d:09:cf:f4:bd:09:7f:4d:78:bb:5f:92:fe:
50:0f:8f:c4:4f:c4:ee:e5:83:bb:1c:59:25:e2:56:83:27:a6:
c9:fa:35:84:d5:01:ba:21:28:a7:7b:3a:20:b2:23:f2:bb:30:
9e:84:6e:2e:75:3c:4e:08:ee:4d:1c:c0:e0:54:53:ce:e4:f2:
13:da:c7:10:b9:cd:e5:04:36:89:3a:62:d4:58:1a:53:cf:cb:
9d:6a:9c:e1:4e:52:1f:62:91:cd:ec:b9:17:94:23:80:1c:58:
20:6e:66:75:04:21:9d:c4:b0:57:c8:ca:25:f3:af:0c:83:e9:
d5:9e:17:0d:08:14:76:c9:62:45:e8:82:d3:95:66:b4:06:ef:
49:5f:32:19:da:c6:c3:c8:56:1e:02:b9:14:68:b6:2c:59:2d:
9d:8a:5a:ef:d1:9b:56:99:0d:27:dd:36:1d:7d:ed:f9:66:dc:
9a:81:ac:3b:45:71:11:cb:bc:ef:a6:1a:e0:9c:67:e2:87:83:
5b:cd:b6:38:f2:0e:cd:f6:c1:62:ba:db:5f:d3:4b:f4:ef:c3:
14:db:67:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org