Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/5wVUsFnzJIWxqI0nzMz1xr2pJlk.roa
File: 5wVUsFnzJIWxqI0nzMz1xr2pJlk.roa (raw, json)
Hash identifier: G0V3mAvwOkV46Qw9kO5o1SwygAAcsvY9B0HthV0jnxw=
Subject key identifier: E7:05:54:B0:59:F3:24:85:B1:A8:8D:27:CC:CC:F5:C6:BD:A9:26:59
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0DDE
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/5wVUsFnzJIWxqI0nzMz1xr2pJlk.roa
Signing time: Mon 15 Jan 2024 21:35:07 +0000
ROA not before: Mon 15 Jan 2024 21:35:07 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24154
IP address blocks: 60.244.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3550 (0xdde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:35:07 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E70554B059F32485B1A88D27CCCCF5C6BDA92659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:45:89:96:f4:f9:c7:a7:bb:77:3b:53:97:4e:
b8:05:ba:cb:f0:9e:3a:fc:4a:2f:26:28:b4:0c:de:
51:c5:a4:a2:d3:83:36:ec:59:75:81:f2:8f:cb:3e:
5b:72:e9:28:2a:af:34:57:47:6d:f2:4e:3e:65:25:
b3:47:00:ed:f6:fc:a3:6f:cd:d7:6e:ca:c7:89:bc:
79:6a:33:ce:8a:05:41:60:44:d4:aa:c9:27:bc:34:
58:44:79:be:83:57:de:d6:49:e4:e2:7e:f9:2c:33:
4e:91:41:c2:81:b1:f1:cf:ee:3a:b7:12:81:57:e6:
77:29:49:c7:0f:c3:6b:83:bd:1a:62:4c:c4:8d:e9:
dd:b1:d9:59:80:e6:29:e1:d2:03:b1:d2:ae:03:dc:
2d:b0:c6:4a:56:97:5c:dd:e9:31:65:cc:7f:72:c8:
a7:36:c8:2a:27:c2:bf:27:fb:68:d6:7e:92:37:38:
0b:20:f2:89:78:02:44:52:12:1e:1b:d5:2d:4e:e3:
87:04:69:d0:b1:93:9c:95:16:c4:af:fd:28:dd:0b:
89:18:c1:cf:1f:f0:3e:c9:c4:83:09:3f:51:57:1f:
54:1d:0b:83:48:6e:5b:4c:3a:25:20:d2:52:ee:2a:
ed:62:6f:2a:51:f8:a9:38:08:70:bb:db:50:c3:6d:
d0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:05:54:B0:59:F3:24:85:B1:A8:8D:27:CC:CC:F5:C6:BD:A9:26:59
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/5wVUsFnzJIWxqI0nzMz1xr2pJlk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.244.0.0/18
Signature Algorithm: sha256WithRSAEncryption
85:8e:2d:ba:4e:9d:00:ae:cf:a0:ab:bd:29:ff:0e:b3:6b:96:
1e:c7:c0:4f:90:a6:03:99:8f:6d:9c:3f:b7:c6:7b:f7:8a:08:
c0:8f:d6:36:c8:b8:93:09:b2:1c:af:23:89:3d:54:5c:df:df:
a8:0f:2d:39:8d:5c:0b:34:99:6d:e3:f5:b3:47:6a:92:e7:80:
3c:78:49:d7:33:03:bf:ee:e2:d1:8c:81:8f:ba:20:2a:bf:ae:
9b:6c:d2:0d:64:d1:a8:f9:0e:cc:c3:4f:8a:81:31:72:8d:e7:
de:4a:63:d9:25:55:23:52:5f:68:89:ce:af:ca:96:ba:3a:be:
81:6a:0a:41:7a:a1:a5:68:80:a1:07:e6:86:b1:5a:28:f2:31:
7c:7b:f1:e8:1e:aa:64:43:ed:a6:99:38:cd:95:a4:7c:de:e4:
4d:23:5c:81:7e:52:9b:f6:37:d0:c4:71:e4:39:af:8d:65:be:
4b:3f:0d:7a:fb:c1:70:99:df:23:cf:8e:af:9c:d9:03:9b:cc:
83:ae:51:ff:0b:27:5f:63:a3:b2:5d:79:87:48:d7:f5:bd:68:
fe:17:57:8e:70:b4:d1:1b:17:9c:a0:0c:3c:dd:22:74:ba:d0:
87:b6:20:87:07:21:9c:b2:4a:5c:f9:0d:99:23:a5:53:90:b7:
95:6b:34:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org