Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/FbX4eA8uJBEb051kSDB5bYaOBpE.roa
File: FbX4eA8uJBEb051kSDB5bYaOBpE.roa (raw, json)
Hash identifier: /tcP3tLp8kNAKJJbkgCUlohnp2L4IFHKzYzJ7whvfbA=
Subject key identifier: 15:B5:F8:78:0F:2E:24:11:1B:D3:9D:64:48:30:79:6D:86:8E:06:91
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0C21
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/FbX4eA8uJBEb051kSDB5bYaOBpE.roa
Signing time: Fri 05 Jan 2024 11:05:14 +0000
ROA not before: Fri 05 Jan 2024 11:05:14 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 222.250.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3105 (0xc21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 5 11:05:14 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=15B5F8780F2E24111BD39D644830796D868E0691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:bc:12:88:18:7b:c3:d6:9f:3a:a7:e2:53:
f4:bf:9e:7a:cc:65:a3:68:6a:f7:17:ef:b4:fd:9b:
fb:44:5c:70:e2:fe:fc:19:41:91:ec:b2:35:bf:ab:
11:88:4a:07:0a:7c:92:19:f8:12:d8:8d:c5:35:7e:
ea:d7:f3:b5:fc:b7:cf:bd:85:ac:79:83:98:f2:a3:
c6:f1:b1:77:ba:91:3c:0e:90:8c:3b:ae:8f:33:26:
75:ca:5d:2f:ff:9e:83:92:81:9b:89:0a:2b:63:bc:
43:86:c7:7f:7a:3e:b2:80:3b:c1:f8:40:d2:e2:31:
47:1b:25:b3:be:e1:a4:75:12:81:e1:bc:59:00:17:
f4:31:b5:51:ff:69:7f:6e:a3:39:2f:85:02:fa:e7:
82:f2:36:1c:ba:b9:f3:e6:18:59:c3:95:62:d8:21:
95:cb:56:5d:9e:fe:04:5b:31:d1:e0:e3:50:5a:e2:
7a:52:bf:f4:3f:81:a4:80:be:25:8b:74:9b:a5:2e:
8b:ba:30:f9:c5:13:70:33:23:ff:94:54:c2:a2:4d:
f0:eb:bc:59:b8:56:f3:12:b9:42:70:83:12:a8:f0:
91:73:b8:ed:8e:4c:8d:41:76:fa:dc:4d:75:3c:90:
71:b4:55:f0:51:7d:47:5e:62:ac:8a:c6:55:07:b5:
53:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B5:F8:78:0F:2E:24:11:1B:D3:9D:64:48:30:79:6D:86:8E:06:91
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/FbX4eA8uJBEb051kSDB5bYaOBpE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
222.250.192.0/18
Signature Algorithm: sha256WithRSAEncryption
71:3b:c4:69:ca:f0:06:43:4f:ad:e3:58:a1:2f:c1:b3:b4:a0:
c6:e8:9f:1d:64:6f:12:bb:04:d8:f7:22:f2:85:4c:bd:da:67:
12:cc:d6:02:40:d1:dc:6a:ca:1d:6c:21:81:10:a6:cb:04:af:
5b:da:5b:f0:ba:f5:5d:3e:9a:58:3f:76:71:81:ca:35:72:4b:
f0:dc:77:3f:00:26:39:e8:28:5d:0d:3c:d6:dd:dd:ca:62:22:
76:30:bb:f6:c3:c3:37:bc:e4:28:61:a5:3d:8d:e6:6e:f6:b2:
d9:41:8c:c1:43:c9:11:02:eb:98:f2:e6:c4:a4:40:1c:e0:ee:
16:a2:e8:59:f0:0e:d1:6e:ed:6e:ab:54:df:c2:b2:dc:f7:5c:
33:aa:2d:1f:89:a6:3b:12:b7:9a:2c:63:c6:cd:63:14:62:0c:
d4:d5:47:2b:a5:a7:4f:13:38:fc:49:2f:08:e9:d9:24:91:4b:
6f:9a:9b:d3:fa:ea:7a:d4:17:9a:8d:fe:87:a8:83:52:40:4e:
f2:46:68:8b:5e:f8:b0:4e:ff:cb:8e:d4:4f:7d:22:fb:3c:fc:
77:87:74:72:df:b3:ef:20:9e:ea:be:5a:bd:41:b9:7a:b5:c8:
ba:dd:75:2d:64:80:ff:04:6b:56:04:07:ba:0f:71:41:b7:6d:
d3:45:be:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org