Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/D6ZUrHA96dA2EnrGO2PBOCHmdng.roa
File: D6ZUrHA96dA2EnrGO2PBOCHmdng.roa (raw, json)
Hash identifier: 9ddfvtLLdcuSt29YfA0h4vrGJRQNIl2xWCgWcxkYis4=
Subject key identifier: 0F:A6:54:AC:70:3D:E9:D0:36:12:7A:C6:3B:63:C1:38:21:E6:76:78
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0C46
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/D6ZUrHA96dA2EnrGO2PBOCHmdng.roa
Signing time: Mon 15 Jan 2024 21:08:49 +0000
ROA not before: Mon 15 Jan 2024 21:08:49 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 202.178.128.0/17 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3142 (0xc46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:08:49 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0FA654AC703DE9D036127AC63B63C13821E67678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e4:3b:66:68:83:e0:28:5b:2d:55:90:7c:ce:
92:9f:cd:dc:98:12:51:9a:d0:d4:eb:45:4e:48:18:
d8:eb:a5:39:e9:72:af:22:32:27:4e:b0:16:7d:a4:
08:5f:05:a1:fc:e1:10:e3:86:99:5c:d9:e1:b0:22:
26:ec:a5:4f:e9:37:29:ad:39:95:db:fb:87:6d:d3:
f3:91:6e:e7:d1:32:0d:a0:f8:e9:31:ce:30:b2:69:
f6:9d:8e:bc:3f:42:c8:d9:81:20:7c:6d:84:08:a1:
af:b3:f4:83:06:78:52:8c:3f:b8:fd:44:47:47:66:
92:44:12:e2:83:ff:bf:a3:0f:23:65:ce:da:c5:9a:
6e:75:e7:74:36:21:41:76:d7:ab:fe:2d:a6:89:d4:
85:6a:26:b5:80:96:7b:74:f1:43:0b:c0:89:3e:e8:
62:ef:12:1a:d9:46:4a:c4:7b:42:8c:8d:bc:48:d0:
93:52:cb:a2:dd:8f:6f:f6:e1:cb:2c:fb:21:18:42:
1d:9b:ab:cd:5c:18:f4:5e:b2:22:30:60:1e:2d:cc:
92:f8:5b:04:f4:d9:4b:bd:47:27:3b:88:1a:21:7b:
bc:36:94:0a:21:c8:a8:b8:72:ec:be:18:d3:e7:d5:
64:38:f5:93:a4:6c:12:a6:3e:84:01:66:27:fa:63:
4a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A6:54:AC:70:3D:E9:D0:36:12:7A:C6:3B:63:C1:38:21:E6:76:78
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/D6ZUrHA96dA2EnrGO2PBOCHmdng.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.178.128.0/17
Signature Algorithm: sha256WithRSAEncryption
3c:04:0f:15:66:0e:4b:ad:7d:b5:3f:bf:2d:f6:ba:e5:b5:2b:
0d:a4:f6:96:96:94:26:02:63:47:6f:72:c5:3f:1d:7d:38:dc:
f8:ac:a3:5a:06:7a:9b:1f:26:b7:9f:99:ea:35:5d:c9:45:f8:
8d:63:29:85:0b:fc:12:2e:4f:0b:b6:a5:f3:96:7c:94:d6:99:
a2:81:d5:d3:41:b6:b0:93:1b:fd:4d:0e:27:bd:93:7d:ca:49:
32:f4:e9:e4:0f:b9:54:03:4e:63:d3:0f:be:8f:a4:1a:ae:5b:
c0:ac:47:67:7e:40:95:5f:cc:25:03:ee:c9:7a:32:da:47:5c:
66:ef:69:c0:c6:24:a3:de:1f:fb:32:c3:33:78:f0:f4:4a:f8:
fc:9d:5e:9d:35:11:2a:b9:94:9c:97:6e:6a:81:c6:46:ab:05:
45:42:f7:8c:41:59:74:0e:e6:59:ea:aa:46:bb:28:87:ca:5e:
a5:08:d8:23:ca:97:33:d2:58:17:b2:d8:a4:50:be:13:8c:81:
9a:5d:b2:f9:ff:c2:b0:86:ac:8a:d0:73:92:8e:5d:7e:75:6c:
0a:f0:bc:97:c9:74:37:fb:60:bb:00:0f:fc:97:7f:dd:57:c7:
e8:9b:ea:53:13:08:20:1a:99:1d:d6:48:c8:e1:f6:d7:6c:76:
e3:19:56:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org