Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/E-WzRpY3V_2bwZKJeVs-GTGT5ic.roa
File: E-WzRpY3V_2bwZKJeVs-GTGT5ic.roa (raw, json)
Hash identifier: Awrz0efGYP0zwEHW2Ma/uO7LIHyvFoT5qKTTy2siZ1k=
Subject key identifier: 13:E5:B3:46:96:37:57:FD:9B:C1:92:89:79:5B:3E:19:31:93:E6:27
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0D46
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/E-WzRpY3V_2bwZKJeVs-GTGT5ic.roa
Signing time: Mon 15 Jan 2024 21:25:41 +0000
ROA not before: Mon 15 Jan 2024 21:25:41 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131142
IP address blocks: 223.22.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3398 (0xd46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:25:41 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=13E5B346963757FD9BC19289795B3E193193E627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:23:d3:f0:11:51:b1:61:86:74:4f:08:8a:0a:
6a:1b:bc:f1:1a:11:2b:2a:37:16:25:44:c4:7f:8c:
db:61:99:a5:c0:8e:50:fe:ff:a7:9a:d5:66:1f:74:
44:f3:55:b4:97:9a:30:6a:e7:c2:ad:35:d4:31:d8:
d1:93:43:c0:d6:49:e5:a5:20:f4:c9:32:1f:9d:23:
25:ba:32:6a:2e:9e:41:3e:f2:db:a5:25:46:6e:7f:
79:8f:44:f9:aa:04:39:dc:7e:1f:12:2d:73:f4:e1:
ee:96:be:73:64:27:43:83:71:57:ab:cb:0f:05:35:
94:d5:14:10:33:ab:ae:5b:ff:7e:25:30:13:9d:e2:
a3:71:04:8c:8d:f0:fa:ad:87:5c:f9:ac:5a:92:69:
e8:8d:58:36:16:43:0f:f8:7f:6e:5e:fe:6a:c2:72:
87:3b:80:b6:8d:a0:fe:07:9e:88:a2:62:2c:80:1a:
2c:9f:8d:a7:5a:8c:2c:02:22:39:96:c1:87:b8:85:
9a:5d:a1:d9:aa:7a:60:e4:56:06:5d:13:e3:03:a5:
4b:5b:38:8b:31:27:f6:ab:8e:eb:4a:35:53:41:68:
1f:93:3c:4c:6e:5a:07:6a:93:95:ec:de:a1:71:4a:
d8:d8:72:9a:7a:78:0e:66:e3:7e:df:45:80:64:88:
82:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E5:B3:46:96:37:57:FD:9B:C1:92:89:79:5B:3E:19:31:93:E6:27
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/E-WzRpY3V_2bwZKJeVs-GTGT5ic.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.22.252.0/22
Signature Algorithm: sha256WithRSAEncryption
cb:d9:d5:31:8b:1c:11:f2:0e:40:42:34:dc:64:b5:b4:6f:73:
a9:c6:36:37:ce:1d:44:c7:5c:af:08:2b:ae:6e:80:2b:25:27:
e0:61:ea:3b:a3:68:8c:91:67:3c:c2:4a:e2:63:b3:64:5a:ad:
41:dc:38:97:16:89:d8:be:bd:7f:59:59:17:a3:9c:12:42:61:
2e:0a:9f:c8:74:54:12:b6:9f:76:4e:c6:07:dc:14:9d:c4:61:
18:39:44:70:2c:9c:ee:ee:16:0c:66:4f:3b:b3:4d:cb:07:88:
ad:80:87:ac:bd:20:56:63:0b:9d:51:19:64:f8:5a:4e:5c:47:
6d:2a:bf:40:c8:ef:4c:e0:56:2d:ca:bc:a5:1e:71:16:1c:99:
10:04:2f:46:99:cd:c9:65:16:dd:bb:3c:a5:25:d0:49:00:b5:
05:98:df:79:97:34:cf:18:e2:7b:c1:94:cf:24:6c:e2:78:ea:
ed:ad:c2:59:91:8e:67:0a:d2:f9:ab:a8:19:2c:de:7f:be:9a:
9a:c1:29:28:b4:55:2c:87:db:f3:41:ba:42:ac:4e:98:d0:39:
b3:a9:b5:20:73:31:f9:c5:e5:e8:6e:6a:3e:11:11:aa:3b:23:
76:98:35:05:25:5f:53:bd:d5:94:80:45:a2:d2:f8:22:b7:9c:
df:9d:4b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org