Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/B6z-dJplCcYoApiIXDFeYql75KI.roa
File: B6z-dJplCcYoApiIXDFeYql75KI.roa (raw, json)
Hash identifier: 6TDDqEDLVQBgJ5jmuLxupwbf4lzSAqoe5bvKe7fN9Wk=
Subject key identifier: 07:AC:FE:74:9A:65:09:C6:28:02:98:88:5C:31:5E:62:A9:7B:E4:A2
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0CE8
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/B6z-dJplCcYoApiIXDFeYql75KI.roa
Signing time: Mon 15 Jan 2024 21:23:43 +0000
ROA not before: Mon 15 Jan 2024 21:23:43 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7482
IP address blocks: 218.187.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3304 (0xce8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:23:43 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=07ACFE749A6509C6280298885C315E62A97BE4A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f2:2f:d7:76:06:e4:fb:0f:30:0c:26:01:a0:
b9:23:15:22:04:19:c8:36:ba:44:b9:a9:ca:dc:17:
17:20:96:9a:f7:98:e7:6d:a5:e2:e9:ac:d8:a3:da:
c3:d4:20:f2:da:2a:34:fa:2e:f8:b9:7a:6b:89:64:
0f:df:a8:dc:83:51:e5:e4:41:78:e9:ba:71:4e:e0:
5b:a3:65:3b:cc:ef:89:c8:88:de:b0:67:4e:3c:76:
c7:b8:4b:9c:b6:48:96:28:01:dc:ce:e2:4e:23:22:
65:ce:04:48:c7:4b:6e:eb:00:8f:f7:73:be:99:86:
cb:c2:e4:2b:4e:41:95:c6:86:7e:fb:e3:7d:55:0a:
de:fa:be:57:70:f2:86:7d:4b:79:a5:35:e8:56:ed:
92:6f:48:a3:71:dc:eb:ed:da:51:c0:a8:bf:a3:f1:
a7:62:97:c5:41:3e:a5:63:26:b8:d5:d5:d8:93:8b:
40:e1:90:27:0c:5a:5d:73:11:23:22:72:e0:c7:55:
cb:b7:44:81:7a:e7:b8:2a:fd:b0:80:19:21:41:1b:
82:29:f0:53:4a:85:ba:7c:4e:a8:49:67:25:4a:f3:
2d:a0:a7:6a:5c:09:41:e8:f3:3b:7a:1b:5c:9d:70:
84:3e:ab:18:d3:b9:49:bb:4e:76:22:64:f0:20:b6:
0a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AC:FE:74:9A:65:09:C6:28:02:98:88:5C:31:5E:62:A9:7B:E4:A2
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/B6z-dJplCcYoApiIXDFeYql75KI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.187.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a8:6f:1e:06:23:0c:65:f0:0b:e3:bb:4c:03:f6:bf:ae:10:86:
ca:b2:e4:3e:44:3f:05:c5:93:ed:9f:5a:3b:97:25:5f:cf:e5:
2f:a1:e7:e2:b1:3e:b8:81:47:bc:d6:a7:1a:ae:1d:7a:ca:76:
d5:85:96:e5:ca:ff:02:44:b8:2e:93:26:c9:af:08:66:c2:4a:
b9:a8:78:48:9f:6c:2f:3e:f4:9e:c3:a6:70:4b:a0:4d:22:0e:
4b:41:c0:09:5a:e8:c8:06:2c:2b:50:f4:03:b4:37:05:25:4f:
64:be:94:e8:00:36:fe:59:d1:a5:53:0e:a4:f5:9b:f3:48:8f:
f7:ae:f0:a1:92:3f:90:2b:53:b5:39:6e:77:42:96:1c:30:04:
4c:aa:2c:39:56:22:e2:dc:8b:c6:f7:01:b0:b3:2a:73:d9:af:
f4:dd:35:1a:67:79:c2:ed:f5:68:42:cb:87:a4:d8:c3:0c:20:
97:37:38:23:9c:e4:88:a6:5c:f9:43:cc:ee:d8:ce:0a:51:0c:
4a:1b:a4:62:36:47:3c:63:7b:9a:3a:bd:8d:d5:29:97:12:ad:
86:dd:bd:03:a3:05:a3:a5:54:83:16:c7:e5:f1:c4:51:72:e0:
b8:ae:90:5e:20:61:35:11:25:a4:ed:01:99:ac:5e:73:80:48:
ce:bc:0b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org