Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/BFifzoW_llKKg9kjhkGK6Tjh3dk.roa
File: BFifzoW_llKKg9kjhkGK6Tjh3dk.roa (raw, json)
Hash identifier: x+5vJjHrn19O1nsW54OKrKwIiuQWICPEUryEIN9f2iI=
Subject key identifier: 04:58:9F:CE:85:BF:96:52:8A:83:D9:23:86:41:8A:E9:38:E1:DD:D9
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0CC2
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/BFifzoW_llKKg9kjhkGK6Tjh3dk.roa
Signing time: Mon 15 Jan 2024 21:11:02 +0000
ROA not before: Mon 15 Jan 2024 21:11:02 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 210.202.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3266 (0xcc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:11:02 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=04589FCE85BF96528A83D92386418AE938E1DDD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:01:33:4c:0e:06:fb:db:9f:1b:26:c9:7d:2f:
25:c3:99:7c:12:6d:3d:ae:a9:9c:1c:47:bb:5c:6a:
8d:17:13:01:69:06:19:c8:2c:74:36:09:dc:5c:02:
6e:ef:5d:03:bc:6c:d7:e9:bb:b0:dc:74:4f:c4:df:
4e:ba:d0:1d:cd:1b:ff:3f:86:c1:e7:4f:74:3a:a5:
25:7d:2b:fe:26:e3:b9:b4:b6:41:28:d5:ed:7b:74:
49:36:05:fc:19:2a:fe:eb:ec:d5:f1:a5:54:fa:80:
27:fe:57:06:1f:f2:fa:57:97:c5:3b:74:70:f3:49:
44:a9:3b:3e:96:ae:f0:85:60:47:eb:5f:6d:1d:13:
77:bd:2e:06:aa:e7:11:1c:90:4f:f3:85:0b:56:12:
bc:b6:4a:28:b4:8f:ea:56:e2:ca:a9:63:05:c7:09:
8e:f1:e3:50:c0:d1:19:92:f6:7e:2d:8d:4e:c8:95:
f6:ba:08:2d:b5:1b:3a:a5:5c:72:70:08:3a:24:3f:
2f:4d:93:bc:0f:d0:db:98:08:18:86:8a:d3:9c:95:
d2:de:b9:83:a5:48:7a:ec:b1:2c:4f:c3:6d:94:68:
f0:dc:ff:49:de:2b:4d:fe:ff:7e:fe:d2:5a:2f:e8:
80:ce:ae:d4:be:19:56:66:5b:f0:4f:1d:61:54:2a:
72:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:58:9F:CE:85:BF:96:52:8A:83:D9:23:86:41:8A:E9:38:E1:DD:D9
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/BFifzoW_llKKg9kjhkGK6Tjh3dk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.192.0/18
Signature Algorithm: sha256WithRSAEncryption
36:44:f2:c7:a9:95:1d:29:b1:96:41:ba:36:60:26:83:aa:b1:
36:12:4a:8e:8b:08:d1:c9:17:b9:ad:92:ec:3f:fa:47:24:c2:
83:76:fd:83:4d:87:37:78:eb:67:d5:34:b7:f5:d8:39:36:1b:
0a:c5:16:83:ff:e1:5e:a0:cb:6c:bd:e8:90:58:33:23:05:07:
a5:aa:f7:16:29:23:60:9f:2e:2c:e6:45:61:1d:ad:f5:32:3a:
70:a4:39:49:39:32:b2:81:c1:9a:27:31:68:26:c3:c0:09:b8:
5c:fb:8c:08:b8:1b:5d:09:4e:2f:08:0e:3e:ae:77:fc:c5:c3:
5f:8c:a4:85:c9:62:d4:c9:3c:5d:10:bc:96:e9:51:c3:15:ec:
38:71:c7:49:2c:d6:fa:4d:39:24:5a:c3:34:47:23:13:87:32:
16:16:34:ff:ac:1d:7f:f9:8b:22:4b:89:56:9e:21:3e:a0:16:
64:ef:b3:5a:f4:c6:36:12:51:51:cc:9d:e6:6e:35:93:56:1f:
14:b3:a0:e7:34:a1:92:9f:d7:da:37:cd:31:11:b5:b5:5d:ec:
b6:30:2f:91:09:a8:7d:89:40:4d:ea:19:02:f3:99:03:f2:55:
6e:64:fd:51:05:4b:74:ef:31:4c:4e:15:e2:70:4e:68:71:8c:
3f:9a:53:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org