Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/C5gmNnVrZtqNOY0eGsgfKJXbnkE.roa
File: C5gmNnVrZtqNOY0eGsgfKJXbnkE.roa (raw, json)
Hash identifier: A/Hqc4jW0ABBo2z1TpijYZikaE5nS2QVEXlxDGKvTak=
Subject key identifier: 0B:98:26:36:75:6B:66:DA:8D:39:8D:1E:1A:C8:1F:28:95:DB:9E:41
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0C70
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/C5gmNnVrZtqNOY0eGsgfKJXbnkE.roa
Signing time: Mon 15 Jan 2024 21:09:32 +0000
ROA not before: Mon 15 Jan 2024 21:09:32 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 210.200.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3184 (0xc70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:09:32 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0B982636756B66DA8D398D1E1AC81F2895DB9E41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:82:22:cc:91:8f:e2:3d:46:ca:6b:ff:6b:db:
e5:7b:71:13:58:d3:fc:5d:25:1b:b0:a2:9e:ea:bf:
bb:fe:30:b8:1d:e7:6c:4c:93:8a:85:03:5f:cd:60:
12:e4:8b:30:4e:51:d5:74:a0:5a:39:5b:d7:79:67:
e7:48:9e:88:12:27:e2:b1:9c:42:a1:f7:68:6d:42:
08:1f:7f:07:3f:03:a6:b3:af:04:a3:5b:3d:ac:e1:
25:32:be:f8:f5:19:b8:75:4a:d3:a7:29:9a:98:59:
4c:e0:04:5c:d0:be:bc:a8:22:16:16:e4:df:9b:58:
30:05:e9:35:07:3a:4e:87:5d:76:78:94:8c:87:4c:
cd:94:30:36:fb:52:cf:ff:c4:d6:e2:28:d5:e2:82:
5c:2a:3d:45:fc:47:48:8d:47:4a:da:65:dd:87:9c:
79:c8:bd:25:1a:86:3f:85:9a:e5:1e:fc:b9:d7:76:
10:da:c6:47:f5:f9:f7:65:3e:9f:02:08:ac:6f:e3:
f3:77:5d:d6:64:cb:5d:30:79:bc:61:90:62:4e:e7:
3f:f7:a3:f0:52:42:4e:08:5b:39:4a:d0:47:2c:cb:
46:d3:ca:7b:fd:49:ab:b6:35:ba:47:4f:7c:46:b7:
e6:70:9e:aa:14:81:ed:cd:67:2e:6b:d9:47:b0:55:
d0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:98:26:36:75:6B:66:DA:8D:39:8D:1E:1A:C8:1F:28:95:DB:9E:41
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/C5gmNnVrZtqNOY0eGsgfKJXbnkE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c9:f6:10:b4:2f:41:57:a0:47:29:dd:cd:f4:58:00:cd:15:a8:
df:cc:8d:80:f7:a3:ea:55:4e:ae:af:08:73:7e:ff:43:9d:35:
61:f4:11:7d:0c:a0:ca:76:00:f8:1f:fe:31:e9:51:18:96:7d:
f3:50:5e:08:15:07:35:65:1b:34:c1:8d:61:6b:5d:97:2b:5a:
08:d9:c6:7c:69:64:d9:ee:e3:84:b8:3a:b1:e5:42:29:0c:1b:
e9:1c:b6:f6:76:d7:96:c6:cc:26:32:d7:fc:ff:07:56:a0:05:
19:c2:77:48:98:82:63:f2:31:68:f0:07:a4:5f:20:c9:98:39:
44:0e:56:4f:87:b1:e5:8d:c7:8c:87:03:aa:2d:02:77:df:96:
d8:b3:09:9f:b4:88:c5:11:22:18:17:92:c4:c3:4a:ca:06:d8:
9b:d5:03:8f:8f:f7:49:ec:80:a5:c6:98:07:3a:1f:4a:9f:8b:
69:98:c4:9a:cd:4b:8a:ab:f4:4b:c8:5e:e2:b2:24:c2:e5:50:
30:b5:ba:cc:82:cf:7b:42:2b:de:a5:41:d4:4e:53:1d:ec:42:
4f:c2:5a:86:f5:d1:a5:56:9f:56:c5:e5:f6:8f:67:10:bf:1f:
8e:c4:23:ec:83:7b:0e:05:e1:7f:3d:1e:37:40:71:b1:0e:62:
0c:67:54:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org