Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/7UC26TLCbpa9Lr86vOqOLLFzNuE.roa
File: 7UC26TLCbpa9Lr86vOqOLLFzNuE.roa (raw, json)
Hash identifier: mgl7IVIsWWo0T3i94nE3l8FDyG4E0tqM1D4WhtpsLRk=
Subject key identifier: ED:40:B6:E9:32:C2:6E:96:BD:2E:BF:3A:BC:EA:8E:2C:B1:73:36:E1
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0C40
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/7UC26TLCbpa9Lr86vOqOLLFzNuE.roa
Signing time: Mon 15 Jan 2024 21:08:43 +0000
ROA not before: Mon 15 Jan 2024 21:08:43 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 60.244.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3136 (0xc40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:08:43 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=ED40B6E932C26E96BD2EBF3ABCEA8E2CB17336E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f2:29:18:fc:c3:8e:1b:42:78:ec:ab:6b:ed:
3a:09:09:36:ac:13:3a:8a:f1:b7:06:7d:88:cb:ed:
d2:8f:0f:84:70:de:6d:7e:f8:af:74:58:e6:04:94:
72:d7:79:e9:f9:50:aa:58:9e:c3:53:2c:05:d8:dc:
8e:89:5c:5a:f1:3d:c2:32:51:73:50:b7:20:76:ba:
e3:4b:26:2e:3a:47:d4:fe:0a:d4:cf:f9:c3:2c:6d:
fd:cf:96:87:76:d8:9a:46:fb:45:06:bf:55:d6:fd:
2a:7d:a9:77:29:f3:03:5e:a4:95:97:d6:33:30:20:
60:98:7c:83:8f:68:36:b6:4b:9a:30:b9:25:88:14:
de:fb:f4:5b:4c:8d:64:ed:06:02:82:f8:86:12:96:
75:eb:ba:d2:83:80:a8:38:ce:ff:ea:de:76:fb:38:
3b:0b:87:3f:71:c9:af:b3:06:66:7a:fc:5d:12:46:
77:74:d5:bc:02:40:2f:9a:29:5a:c4:a3:e7:9c:59:
68:73:82:fd:16:20:a7:43:a0:20:7e:26:82:85:68:
e5:de:91:81:d0:73:7e:88:41:5a:ca:47:fd:83:cc:
59:c9:a6:5e:11:2d:1a:cc:b4:01:59:95:6a:9b:af:
87:41:5e:fe:72:78:d9:a2:00:d9:67:2d:98:86:03:
fd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:40:B6:E9:32:C2:6E:96:BD:2E:BF:3A:BC:EA:8E:2C:B1:73:36:E1
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/7UC26TLCbpa9Lr86vOqOLLFzNuE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.244.0.0/17
Signature Algorithm: sha256WithRSAEncryption
92:65:3a:5f:ec:df:68:b2:bf:7e:42:06:ae:3b:a1:bd:01:eb:
13:ae:ed:80:8a:18:aa:f6:70:18:a2:df:be:2f:b7:18:b0:b2:
13:6d:87:b5:fa:fc:17:67:c4:a7:56:aa:9d:82:c4:c2:8d:fb:
a3:02:7e:80:74:19:38:48:cc:65:2d:2f:fe:25:9c:05:a6:ac:
2b:7d:ac:33:8c:59:77:96:b4:fc:15:8b:4b:8c:d6:66:55:0d:
13:9d:d9:33:67:ba:25:a9:6b:04:d9:06:70:9a:a1:49:90:ef:
51:bc:e2:4c:2e:f3:d7:22:17:48:a9:d6:ec:a6:73:08:46:f8:
0a:e0:f5:41:59:bc:27:9f:ee:a7:a5:f1:69:c7:d7:db:dd:03:
19:a6:39:7e:d0:0b:8f:62:fe:ed:88:ff:c1:9e:08:28:34:54:
02:6a:8c:48:ed:87:0a:20:a3:67:71:25:f7:ce:f8:60:1c:aa:
29:17:1d:89:18:cf:14:41:94:00:6e:02:0f:b5:e1:83:c8:50:
34:ab:c9:3c:5a:0c:50:cc:06:64:23:aa:14:a5:fb:e6:8d:10:
2f:f9:47:2b:a7:ee:0b:0e:0d:60:49:62:3b:df:08:1f:e7:69:
b9:5c:77:5f:57:e4:11:8a:e7:c9:5c:b5:54:f6:02:b3:2a:19:
68:ba:8e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org