Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/AcdN5sfMacOzFsy2jKvS-sEzz34.roa
File: AcdN5sfMacOzFsy2jKvS-sEzz34.roa (raw, json)
Hash identifier: hVUq/9E+oFB0qFTz3MKUcBzdT6ZxmAeKDbG2PmkaDd4=
Subject key identifier: 01:C7:4D:E6:C7:CC:69:C3:B3:16:CC:B6:8C:AB:D2:FA:C1:33:CF:7E
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0D64
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/AcdN5sfMacOzFsy2jKvS-sEzz34.roa
Signing time: Mon 15 Jan 2024 21:26:20 +0000
ROA not before: Mon 15 Jan 2024 21:26:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131597
IP address blocks: 218.35.32.0/19 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3428 (0xd64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:26:20 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=01C74DE6C7CC69C3B316CCB68CABD2FAC133CF7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:05:f6:e8:b6:6d:0f:3d:8c:b3:81:ec:5e:
b1:5b:ad:8c:12:46:53:8e:fb:d0:cf:96:9e:41:3d:
89:40:c2:cf:ea:6c:7e:35:91:af:71:88:e4:49:4e:
17:b4:25:4f:d6:e0:b9:c3:cd:26:b2:27:8f:53:cd:
da:10:36:43:69:71:31:3e:64:fc:39:a6:2b:e2:f0:
a6:41:b6:10:73:5c:4c:05:46:ea:68:62:62:18:67:
5f:01:22:87:d2:cc:4f:68:1c:ab:fa:fa:73:69:59:
d9:19:4e:23:b9:b5:e5:5c:2c:c9:a6:3f:09:9b:cb:
59:74:e4:e4:c2:55:f6:d6:53:e3:1c:58:8d:55:27:
e1:3a:9c:c1:d8:19:0a:49:7c:1e:1d:5f:b5:a7:ee:
c0:0d:86:62:4c:90:82:a4:78:82:4d:b3:de:85:fd:
c4:38:68:96:7d:85:80:fc:02:22:2a:08:6d:04:87:
78:f7:93:bd:cd:f5:44:d4:f8:92:4d:ed:02:cb:17:
46:45:d0:03:e5:2e:63:68:69:2f:d8:a3:5b:e7:4b:
d3:81:99:b5:17:5e:a5:0f:89:f8:d8:e6:e1:17:6e:
7f:a8:15:69:29:2b:77:64:49:7d:55:aa:ab:37:a1:
82:80:8a:d5:83:ea:ad:2c:f4:02:cc:f5:d8:42:a1:
42:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C7:4D:E6:C7:CC:69:C3:B3:16:CC:B6:8C:AB:D2:FA:C1:33:CF:7E
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/AcdN5sfMacOzFsy2jKvS-sEzz34.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.35.32.0/19
Signature Algorithm: sha256WithRSAEncryption
b8:2c:6e:61:81:c5:0e:b1:e6:69:39:c9:ed:ab:7a:89:7e:e1:
20:c1:85:1b:16:c1:c3:1e:98:4e:a1:2e:0b:4e:e7:9c:fd:e2:
93:4b:2d:f2:f8:20:43:29:55:e7:7d:a8:09:48:ae:bf:16:31:
f5:ea:72:36:5f:11:8e:93:e3:28:f7:57:2e:1e:04:50:ff:88:
b1:21:8f:b6:ff:93:2f:5a:16:46:99:ff:28:dd:e0:7b:60:cc:
92:2a:37:41:94:28:80:fc:7f:b5:86:e5:c4:d1:58:e3:b0:d0:
3e:5e:49:1c:48:fe:e3:d1:9b:90:7a:fe:8f:c1:93:9c:3d:a7:
df:bb:90:18:a7:aa:b1:9c:da:24:99:43:1a:45:34:2d:a0:29:
33:a4:50:a1:85:3b:5b:f8:8b:32:31:d3:f4:3f:4a:87:8c:2d:
de:d2:d0:fb:4b:b0:6a:42:96:f6:83:ce:56:a4:03:d4:6a:69:
f6:f4:7e:98:05:8e:30:c5:51:e5:e6:21:f5:0d:27:b9:78:49:
55:1d:b5:ce:b6:07:2f:d5:16:3b:13:81:da:61:4a:52:1c:12:
03:4b:9f:12:98:77:2a:15:98:f5:07:45:38:31:7a:d1:e3:c5:
77:fc:cd:ea:3f:50:9f:e4:8b:12:66:6c:c6:d9:59:b8:b6:7b:
5a:93:79:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org