Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/8K6WvpZqSZsX6wieDaV8xxiOXo4.roa
File: 8K6WvpZqSZsX6wieDaV8xxiOXo4.roa (raw, json)
Hash identifier: jS+ZdQ4124azjsC9cTNlKvw5yJKqZvG8iS2Jm4J7pUY=
Subject key identifier: F0:AE:96:BE:96:6A:49:9B:17:EB:08:9E:0D:A5:7C:C7:18:8E:5E:8E
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0E3B
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/8K6WvpZqSZsX6wieDaV8xxiOXo4.roa
Signing time: Wed 27 Mar 2024 05:51:52 +0000
ROA not before: Wed 27 Mar 2024 05:51:52 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131601
IP address blocks: 210.203.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3643 (0xe3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Mar 27 05:51:52 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F0AE96BE966A499B17EB089E0DA57CC7188E5E8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:ba:09:77:fc:dc:96:f1:cc:67:2a:05:a5:
1f:7b:2d:1b:c2:cb:d7:8e:66:24:2c:6c:f3:e1:88:
7d:1a:af:9c:91:95:3f:77:f7:9d:82:3a:6b:36:2f:
d7:dd:44:b4:4b:01:db:14:47:5f:90:c1:e6:59:37:
ef:e7:e2:0d:6d:40:fd:c1:9e:57:53:bb:2c:37:43:
29:23:b3:fd:dd:64:94:49:14:16:21:9b:33:ee:09:
ef:ae:22:7d:50:f2:4d:a0:5e:a4:07:e1:94:fc:e4:
64:46:da:d6:99:cc:b4:52:49:53:e7:1c:ce:e7:7f:
d5:3d:0d:87:aa:f5:08:13:32:22:7d:fb:9d:12:0a:
fd:65:28:5d:73:87:85:20:8c:7f:c0:bc:c8:cc:1b:
0f:e5:e1:5a:60:14:ce:f4:48:eb:ef:15:88:41:9e:
0a:09:1b:41:b1:ba:51:62:f1:aa:dc:9e:ee:0f:86:
51:21:6a:90:13:af:6d:db:43:c1:83:82:92:c8:d7:
60:7d:81:a7:7c:90:af:9a:7d:44:59:a4:6f:f5:4b:
69:f5:1d:83:0c:76:ca:74:14:f9:7f:81:27:b3:e4:
0e:86:0e:f2:e9:29:77:a5:f9:64:cd:06:86:40:a7:
c0:dc:59:ef:24:d2:64:54:c2:4c:f4:74:68:5f:ae:
23:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AE:96:BE:96:6A:49:9B:17:EB:08:9E:0D:A5:7C:C7:18:8E:5E:8E
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/8K6WvpZqSZsX6wieDaV8xxiOXo4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.203.20.0/22
Signature Algorithm: sha256WithRSAEncryption
72:bb:e0:e1:d4:e8:99:f1:f4:31:88:40:6d:2a:89:e5:10:14:
1f:df:78:75:48:9d:d2:3c:5b:1f:dc:1b:da:36:7f:30:85:62:
bc:c2:0f:03:c2:9e:41:cd:a2:75:45:40:78:f4:cb:8a:ab:3a:
43:a3:9e:f8:f4:ee:ac:7c:23:b8:7e:4b:fb:c6:a8:0d:84:cc:
a8:2d:47:44:99:b3:6c:c8:0e:71:51:f9:6f:55:5f:b8:d8:e5:
fd:98:19:6e:6d:74:97:48:51:81:6c:db:aa:88:b3:ee:23:9e:
86:5b:d4:9b:a5:fa:6c:05:73:7c:9e:4a:bb:40:2c:ef:ec:40:
53:4a:fb:55:a1:86:59:11:c4:c9:b4:72:ee:64:ba:24:c3:f1:
32:ae:65:17:1f:d8:46:ff:e3:3e:5b:a5:2b:c8:ba:c9:61:c0:
dd:42:bd:86:b2:66:e5:67:d1:5b:a7:8c:f2:a3:de:aa:68:1e:
a7:98:f8:bb:89:d1:93:fe:12:1c:7f:17:30:07:2b:8d:44:b2:
60:bb:e9:73:85:33:d9:7d:6a:18:92:ab:7d:17:38:54:af:47:
7e:a2:eb:3f:55:5f:1f:69:fb:6e:12:48:f2:b0:0b:1f:88:01:
b9:ca:27:36:50:92:dd:38:e3:70:bd:69:a4:41:26:fb:04:26:
89:63:97:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org