Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/5hcryBWjkY_nUFcTAgh_AspP4E0.roa
File: 5hcryBWjkY_nUFcTAgh_AspP4E0.roa (raw, json)
Hash identifier: yPsQUi7nbdJdHC0F3uellhDOQlfzlMO+6/xu8hn+dhE=
Subject key identifier: E6:17:2B:C8:15:A3:91:8F:E7:50:57:13:02:08:7F:02:CA:4F:E0:4D
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0C23
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/5hcryBWjkY_nUFcTAgh_AspP4E0.roa
Signing time: Fri 05 Jan 2024 11:05:16 +0000
ROA not before: Fri 05 Jan 2024 11:05:16 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 222.250.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3107 (0xc23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 5 11:05:16 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E6172BC815A3918FE750571302087F02CA4FE04D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:cc:a4:c2:b1:10:48:27:dc:dd:3f:99:03:b0:
29:24:91:8f:f9:02:0c:cf:72:88:1b:85:77:27:de:
90:e5:56:14:a1:fa:05:dc:bf:a6:04:ee:ca:fe:89:
e0:ca:b7:43:b7:73:87:09:37:21:ca:fb:9b:ae:17:
99:93:df:26:99:7c:2b:9d:d0:d9:28:da:bc:54:a0:
91:11:44:33:d8:3f:c2:98:f5:fc:cf:68:94:36:0c:
b6:55:68:e5:b1:73:03:84:db:76:18:0d:51:4f:35:
e4:c6:58:14:52:d8:e6:0f:00:42:01:37:62:78:f6:
ff:2e:92:ec:8c:e4:c8:2e:1c:b7:81:4f:ab:56:35:
d2:08:e1:a2:b5:2d:93:2e:5b:86:9a:9e:23:63:55:
f0:20:6a:1c:2f:f7:24:7f:71:2f:82:4d:2c:44:b7:
25:7a:1a:2f:18:97:79:ce:fa:9b:8b:1f:f9:8e:eb:
de:12:63:5d:de:b1:40:eb:24:04:82:36:11:4f:2f:
15:8f:29:6f:60:51:20:42:eb:cf:ad:66:26:99:46:
d0:70:58:cc:4e:bb:2d:a3:b3:df:c7:1b:24:59:96:
f4:46:c6:9d:9c:33:00:ba:09:ef:32:da:c7:e5:75:
58:af:65:3c:d1:31:1c:19:88:ad:5d:3c:e6:6f:6b:
1a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:17:2B:C8:15:A3:91:8F:E7:50:57:13:02:08:7F:02:CA:4F:E0:4D
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/5hcryBWjkY_nUFcTAgh_AspP4E0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
222.250.192.0/22
Signature Algorithm: sha256WithRSAEncryption
83:7c:0f:d0:4b:cc:2e:17:67:4c:60:47:b2:2f:63:59:b1:d9:
85:08:46:a1:e0:d6:2c:60:19:fa:3e:12:81:6f:58:69:c8:81:
33:e4:67:9b:03:81:ce:e9:27:78:c3:c9:7f:07:db:58:d3:bd:
92:a9:ed:8e:b6:64:a0:1c:fa:cc:00:41:5f:b3:b3:e9:0a:68:
46:0a:60:36:cd:7d:76:1f:42:e8:5b:9d:49:fe:d7:9d:2b:dc:
d8:85:39:33:2c:8d:df:a5:96:6a:4e:a7:2d:5c:a2:e3:0f:24:
07:d1:21:99:6b:10:f0:be:52:99:a2:9f:fc:52:2a:ab:61:ab:
70:85:45:6c:c4:55:12:1e:5a:7d:be:26:87:9f:d4:9c:ec:d4:
7e:98:da:40:2a:92:3f:04:38:5f:2e:6c:8e:05:8a:12:8e:c7:
e0:01:fd:e8:06:72:f0:b4:6b:e2:90:75:2e:cc:7c:1b:9c:08:
54:d7:86:39:a1:f0:cc:b2:c3:91:12:d1:c4:73:fe:dd:89:b5:
e5:56:38:99:22:d4:17:b0:7f:95:23:ef:73:ee:d7:c3:c4:7c:
e4:7e:10:c8:3e:34:38:a2:04:63:53:73:c1:0d:d8:a9:bc:8a:
73:89:a7:e4:03:22:2f:08:83:94:36:11:c1:fd:32:1d:6e:b0:
8c:ab:21:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org