Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/BvKeJ5EhQu7halgho3tHz70MX4A.roa
File: BvKeJ5EhQu7halgho3tHz70MX4A.roa (raw, json)
Hash identifier: ttOegono45f/InUJkBHhEDyomrkn+Xze35LAD+kBi2M=
Subject key identifier: 06:F2:9E:27:91:21:42:EE:E1:6A:58:21:A3:7B:47:CF:BD:0C:5F:80
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0CDA
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/BvKeJ5EhQu7halgho3tHz70MX4A.roa
Signing time: Mon 15 Jan 2024 21:12:15 +0000
ROA not before: Mon 15 Jan 2024 21:12:15 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24154
IP address blocks: 210.63.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3290 (0xcda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:12:15 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=06F29E27912142EEE16A5821A37B47CFBD0C5F80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cb:72:c9:f5:96:08:1e:76:4f:66:ba:1e:13:
88:d1:a4:0c:22:f4:29:c8:f3:d0:7e:97:25:6a:a8:
de:b7:b5:80:b2:55:f0:1c:99:73:2e:87:38:18:ac:
fe:fd:66:47:87:2e:f6:1d:9b:14:ce:a6:21:0d:88:
c5:16:ec:72:7e:dc:35:58:21:81:bc:e2:93:22:d9:
1d:f8:b6:38:9b:50:8e:69:fe:f7:77:d1:82:53:c2:
77:67:f4:a5:00:54:b0:aa:90:dd:64:cb:97:c3:12:
f5:de:1e:26:40:de:b2:9c:5c:50:0e:3d:2d:c0:5d:
5d:e5:f2:99:92:12:0f:df:22:e1:d9:6b:86:43:fb:
a0:e6:14:0d:a3:2b:6d:a6:90:40:df:8f:49:d0:5a:
87:f6:e2:c9:41:bd:02:ad:42:f4:4a:8f:f1:6e:7f:
59:2a:c6:0c:e8:ba:b6:3d:72:ee:e9:f7:a9:5a:9d:
6d:e1:fa:46:3a:21:e4:6b:13:93:df:0e:55:9d:53:
15:dd:0c:d8:55:cb:21:97:ca:9f:7e:a8:df:5e:5d:
17:fd:a8:04:50:a5:ef:db:65:0a:6f:9a:c5:fb:46:
17:29:7b:bf:5a:92:92:7a:da:80:b3:8b:23:7b:f3:
c5:b0:59:28:44:28:69:92:67:1b:29:31:c7:71:01:
20:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F2:9E:27:91:21:42:EE:E1:6A:58:21:A3:7B:47:CF:BD:0C:5F:80
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/BvKeJ5EhQu7halgho3tHz70MX4A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.220.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:3c:de:20:ba:4b:65:a0:b6:08:c5:02:85:1e:20:22:cd:99:
5e:a8:ee:71:15:7f:4b:66:f4:7c:35:3c:ad:00:f6:2e:e2:2b:
90:ac:33:72:a9:02:e8:83:14:1c:d1:0f:e2:f8:4b:5e:78:93:
a4:81:18:e2:2e:ee:f5:d5:e4:66:b1:89:99:b8:98:00:f0:17:
20:5e:98:e7:1e:64:0e:ba:81:bc:c6:84:28:5c:b1:df:51:c9:
de:11:54:db:f3:0c:00:67:47:ed:aa:55:de:1f:e9:e3:72:03:
1e:d2:21:f5:bf:39:66:73:36:2c:c1:34:c7:0d:51:2c:8e:08:
96:6c:1d:84:22:be:6d:21:a0:89:2e:25:3d:e7:74:3f:2f:a9:
f1:0f:f1:35:19:57:2d:ec:63:8c:d7:9b:17:2c:0b:69:12:e7:
d6:04:1e:1a:6a:d4:54:0b:95:1f:e2:d5:9d:39:27:45:94:8a:
a2:fb:0c:f2:00:f6:8e:d5:19:94:67:79:10:07:cd:c5:27:27:
9c:14:34:49:e5:ca:74:df:db:f9:1e:7b:99:1e:bf:93:f8:a9:
75:cf:e3:fd:6c:f5:a1:41:05:72:34:ae:bd:da:e6:cc:cb:d2:
16:77:de:36:6e:ba:d6:ca:29:06:70:50:41:b7:ef:a7:a0:91:
43:74:ea:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org