Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/8hp-VTC6JxVS63EMsH2yYXKsjD0.roa
File: 8hp-VTC6JxVS63EMsH2yYXKsjD0.roa (raw, json)
Hash identifier: yG9vJBi3OqZOhmilROIiLOP3hWSslbjXoE0oSu+m5ks=
Subject key identifier: F2:1A:7E:55:30:BA:27:15:52:EB:71:0C:B0:7D:B2:61:72:AC:8C:3D
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0D5C
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/8hp-VTC6JxVS63EMsH2yYXKsjD0.roa
Signing time: Mon 15 Jan 2024 21:26:10 +0000
ROA not before: Mon 15 Jan 2024 21:26:10 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131584
IP address blocks: 210.203.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3420 (0xd5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:26:10 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F21A7E5530BA271552EB710CB07DB26172AC8C3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:56:f4:f3:4d:2e:c6:da:94:fb:35:39:4b:e2:
7b:fa:d1:56:23:77:51:cb:cd:f2:2f:1a:10:f8:ff:
06:3a:3d:f2:4b:e7:84:17:b4:43:6e:0f:1a:65:ac:
dd:aa:f7:bd:29:72:cf:2d:21:37:e0:23:b4:9a:bd:
75:fc:50:ca:b9:ab:63:75:8b:92:8d:3f:67:f0:81:
42:ea:0e:c5:27:26:1a:31:36:3f:61:e3:d9:68:95:
10:9a:09:0d:d5:b4:3c:20:60:dc:7d:14:84:1e:9c:
f3:5a:6e:55:33:80:8d:c8:3e:df:da:85:61:4b:ca:
6f:91:19:19:72:fc:f8:f0:04:f4:ec:a7:43:b3:3d:
b3:ca:70:e3:7b:7b:e8:ab:c9:89:da:75:c1:67:a7:
4e:0b:27:0b:28:33:68:e7:12:1e:58:c9:b4:96:b3:
f7:18:e5:85:b1:b3:2c:58:d9:f1:e2:b2:eb:0c:2e:
d9:61:9b:94:36:0e:ed:7c:6d:d8:b7:96:7f:3a:e8:
40:31:ce:62:d9:d8:0a:65:a2:7a:85:97:a4:d4:ec:
ce:00:44:ae:10:d0:fe:7d:53:67:b2:ca:05:2c:44:
73:ef:87:18:b9:99:e3:32:16:dd:d2:14:da:71:69:
53:cb:e9:90:59:77:76:b6:99:f6:a4:5e:b1:3d:88:
b7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1A:7E:55:30:BA:27:15:52:EB:71:0C:B0:7D:B2:61:72:AC:8C:3D
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/8hp-VTC6JxVS63EMsH2yYXKsjD0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.203.48.0/20
Signature Algorithm: sha256WithRSAEncryption
8e:20:71:bb:ea:8c:0d:23:50:df:da:d0:26:4a:c5:84:37:77:
cd:ac:c5:94:55:23:20:91:f0:0f:55:0a:56:1e:21:a9:9f:e7:
7e:7d:20:ed:55:a2:47:2f:b4:84:bc:a6:2b:67:44:19:8e:cf:
9a:5a:6b:ae:98:ee:77:c7:14:7a:da:f7:59:44:70:03:3f:83:
e3:86:e5:2c:b6:42:db:9a:fd:44:a6:1f:fc:12:f8:78:84:01:
d8:5d:16:85:0a:86:87:99:64:39:34:7d:18:6c:13:dc:85:95:
28:2c:c9:61:91:8d:79:5b:ab:b2:19:32:25:6a:59:96:7a:80:
e6:3d:66:26:99:80:45:dd:03:fe:7b:7f:3b:c3:12:f3:cc:26:
70:d7:b5:93:39:f1:5e:d3:a6:ed:42:37:71:9a:66:95:b6:dc:
02:4a:58:1d:6d:8e:0a:f1:76:91:c7:47:c3:57:8a:dd:55:b2:
b6:10:9f:e0:98:8f:14:c8:48:d0:be:ee:e6:07:d1:b4:16:91:
e6:e2:78:dd:9b:1a:b9:33:1e:70:5c:c9:39:de:8f:96:4e:48:
55:81:a0:af:b1:5c:6e:ab:6f:99:58:f6:2f:a5:ab:ab:9c:f2:
dd:e8:87:fa:ee:f4:1f:e8:65:7d:21:94:b5:e1:ea:11:55:90:
a0:e6:dd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org