Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/AJ4_rxJXVEVsWwf_dNcEEmkt2iQ.roa
File: AJ4_rxJXVEVsWwf_dNcEEmkt2iQ.roa (raw, json)
Hash identifier: uYV/dq6VObmnUijkAK1hE771ju9y89vrMReZezIOHxY=
Subject key identifier: 00:9E:3F:AF:12:57:54:45:6C:5B:07:FF:74:D7:04:12:69:2D:DA:24
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0CA2
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/AJ4_rxJXVEVsWwf_dNcEEmkt2iQ.roa
Signing time: Mon 15 Jan 2024 21:10:26 +0000
ROA not before: Mon 15 Jan 2024 21:10:26 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9311
IP address blocks: 210.201.74.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3234 (0xca2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:10:26 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=009E3FAF125754456C5B07FF74D70412692DDA24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4b:61:3c:32:d2:28:cd:f1:ab:2a:b5:5f:cb:
fb:cc:98:28:ae:e0:46:99:8d:61:f7:b6:8b:7f:93:
6a:8e:3e:ac:c6:63:a6:32:e6:35:37:ac:ad:4f:34:
49:fa:e6:0e:dd:76:76:51:2c:24:40:9e:99:25:b9:
54:39:f1:97:1c:ba:03:2a:5d:f9:95:5e:2c:0f:92:
e6:ea:13:29:2c:34:35:ef:af:89:09:c1:1a:9f:76:
c0:49:14:ab:33:be:52:7c:e5:89:c2:d5:9a:43:a3:
7e:9f:d7:fd:ed:41:e1:66:c9:ac:ed:d3:ca:3a:21:
46:32:26:27:aa:60:3a:59:a6:a7:91:97:f3:f9:c2:
60:a0:0d:f2:a0:1a:2d:f2:a2:1e:89:4a:60:13:48:
7e:7c:46:ca:78:81:85:56:52:1d:5e:45:8d:79:63:
8c:08:7f:69:2f:84:25:07:8f:e4:b5:05:af:47:08:
da:e7:3d:b7:ff:8c:b3:e8:7b:d4:28:ff:84:71:9c:
ed:9e:d3:b1:91:a8:29:71:ba:c3:39:8e:80:a1:34:
40:67:58:1d:cd:0c:f2:d1:0b:a9:05:a7:0e:fe:fb:
45:e5:37:a4:7e:77:80:d2:e6:1a:05:c5:dd:16:e2:
b7:ee:e9:4e:02:31:94:27:75:31:0f:69:a2:60:c0:
4d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9E:3F:AF:12:57:54:45:6C:5B:07:FF:74:D7:04:12:69:2D:DA:24
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/AJ4_rxJXVEVsWwf_dNcEEmkt2iQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.74.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:05:59:18:f7:ec:c9:73:87:8d:b4:9c:5c:d3:43:b4:31:90:
4a:8d:69:b7:de:aa:e0:4f:2c:c0:a1:d3:0d:20:8d:f4:b4:cc:
b3:09:9e:6c:8f:30:7d:2a:6e:c2:85:e9:bd:31:58:f4:9d:be:
50:92:90:43:30:b0:4b:9f:9e:78:96:98:dd:ee:2f:6b:c1:45:
5c:c8:fd:c5:2b:63:86:50:bf:56:1f:12:e7:87:df:8b:30:09:
d3:ee:db:e6:52:c4:f7:15:0b:7f:17:14:b8:52:29:14:5a:78:
72:68:43:2a:41:28:3a:2d:08:c0:3d:a2:46:fd:e7:37:57:62:
c8:52:7a:94:2d:0e:08:48:2c:38:9e:90:bb:61:da:f3:88:1e:
cf:d2:90:d4:ad:89:b3:a5:a4:a7:ae:84:be:19:a5:92:0c:2b:
cb:9e:fb:e9:4b:d5:ce:f9:ba:db:2a:b6:d1:20:a8:cb:82:4a:
65:94:73:13:35:57:eb:e2:c8:25:45:12:a7:24:bf:0e:6c:58:
62:ad:a0:1f:38:53:93:a4:e6:8c:ff:d6:8e:28:7f:f0:2e:e4:
e5:3f:53:64:25:a1:ea:2e:6a:2a:31:97:98:7f:8e:d2:f1:c8:
4d:91:62:bc:bd:55:14:7a:8b:76:6f:17:81:df:c9:6b:e3:05:
f9:df:93:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org