Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/EY1TT6d1np67lRqAoKmBEM32ApM.roa
File: EY1TT6d1np67lRqAoKmBEM32ApM.roa (raw, json)
Hash identifier: 0qbf5k9SfXdM6F2per+EO7YglsI77PxtK58LMvr397g=
Subject key identifier: 11:8D:53:4F:A7:75:9E:9E:BB:95:1A:80:A0:A9:81:10:CD:F6:02:93
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0DF0
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/EY1TT6d1np67lRqAoKmBEM32ApM.roa
Signing time: Mon 15 Jan 2024 21:35:34 +0000
ROA not before: Mon 15 Jan 2024 21:35:34 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9922
IP address blocks: 124.218.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3568 (0xdf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:35:34 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=118D534FA7759E9EBB951A80A0A98110CDF60293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:ee:fb:60:ae:c0:b7:23:b9:46:b8:a5:c6:
65:fd:ae:cb:69:52:12:f8:e6:86:ce:7a:d6:89:1b:
80:fa:58:a1:ef:0c:82:cd:54:c8:5f:9d:37:6e:ef:
7e:0d:27:07:ee:9c:d7:2d:67:1d:3e:53:73:73:a0:
c8:c0:79:59:0b:d6:31:90:c0:63:47:5f:97:53:ee:
15:b0:4f:ec:12:8c:57:7b:c0:35:e4:5a:27:4e:44:
e8:6b:ac:f4:4a:5d:53:34:4f:65:e4:ea:b0:78:e9:
9b:95:ea:d8:8c:54:be:84:80:4f:91:3c:78:f8:82:
bb:54:08:a6:5a:80:93:e4:98:b8:21:12:3a:22:2f:
51:af:39:b6:32:8c:a2:fe:84:e9:63:c9:29:70:7c:
32:c2:53:ab:d4:15:cf:15:01:c9:ef:64:80:7e:17:
51:a4:d5:fd:2a:0f:a4:22:2e:fd:81:00:cd:39:29:
a5:7e:71:c4:9e:9b:57:2b:23:bb:b3:87:9e:b2:14:
e3:c3:a9:50:80:f8:33:43:23:20:0c:ac:b0:c3:36:
4c:44:30:6b:82:b4:f1:1c:13:d9:ff:47:2b:d5:3e:
a0:64:f3:72:35:85:e5:f0:8a:78:32:d6:e2:79:4f:
bd:bd:9c:40:da:53:f3:13:d4:0a:00:b0:25:75:cb:
a0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8D:53:4F:A7:75:9E:9E:BB:95:1A:80:A0:A9:81:10:CD:F6:02:93
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/EY1TT6d1np67lRqAoKmBEM32ApM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.177.0/24
Signature Algorithm: sha256WithRSAEncryption
27:d6:e2:74:be:88:a0:08:c7:b2:0f:4a:a7:c2:d6:e3:4d:d7:
b4:b1:2e:99:8f:1d:00:bd:db:e8:4d:8b:3b:7b:00:d7:b2:fc:
29:6b:10:d3:94:d7:b2:d5:98:1d:5b:8b:1b:4c:af:5a:b6:05:
28:59:9e:70:fb:ec:1e:55:5b:9f:7e:0b:41:03:24:28:d3:53:
ac:fb:f0:c5:da:c1:ba:ed:39:41:c9:38:fa:ed:bc:1d:18:ef:
68:b1:10:36:18:17:69:d4:33:c5:63:7b:7b:b4:6b:5d:b3:4c:
cc:e3:62:96:28:a0:4c:5d:23:f1:fe:a4:2f:6b:a1:ad:37:8c:
f8:ab:2f:77:3e:19:6b:ba:8b:fd:e9:ba:60:08:d3:2c:1c:64:
ec:cd:c4:a3:6b:0c:45:39:0e:0c:a4:ff:27:d8:28:32:ae:df:
bf:71:1c:51:84:75:ad:f7:f4:a7:1b:68:dc:d4:e7:13:b3:82:
41:3f:3e:62:42:4a:a2:92:4e:95:3f:98:6d:70:b9:12:18:a7:
cd:18:c0:fc:a3:ec:1e:54:a4:0f:d7:22:50:99:34:b7:be:8c:
d7:65:a5:0e:3c:fa:1f:47:0e:69:28:cb:be:c1:9c:67:52:04:
4c:1e:fc:f3:01:ad:01:7a:33:2d:1d:8d:5c:71:e1:c0:fa:96:
12:23:8a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org