Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/GATAiaBbWJKNRl13KZvWJwaMwwY.roa
File: GATAiaBbWJKNRl13KZvWJwaMwwY.roa (raw, json)
Hash identifier: y0VAAN5+3vuRxwb+C2Almc7bepAfUukK/xIDoZUGXHY=
Subject key identifier: 18:04:C0:89:A0:5B:58:92:8D:46:5D:77:29:9B:D6:27:06:8C:C3:06
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0CA0
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/GATAiaBbWJKNRl13KZvWJwaMwwY.roa
Signing time: Mon 15 Jan 2024 21:10:24 +0000
ROA not before: Mon 15 Jan 2024 21:10:24 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 210.201.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3232 (0xca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:10:24 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1804C089A05B58928D465D77299BD627068CC306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b2:c8:21:6c:a7:39:67:cb:c4:98:11:95:53:
6c:aa:8f:ca:30:0c:00:14:1c:4f:00:45:c0:1f:b3:
d8:c5:88:11:db:eb:0f:ce:0f:39:a8:c3:a8:d0:c9:
2b:eb:5d:6f:bf:ed:23:ea:b6:3b:92:7e:48:53:b2:
68:31:16:91:64:69:88:be:ac:89:7b:24:d5:09:5b:
e3:e1:6b:9b:17:34:2d:50:5d:81:fb:7b:f4:28:0a:
31:3d:19:12:ac:f6:db:71:1c:42:7b:65:52:f5:61:
b6:f1:1c:a4:7e:9f:d1:a4:3c:0a:6e:1a:53:6d:e9:
9c:36:72:18:f5:24:73:6d:64:4c:b3:3c:6f:eb:9d:
24:e3:a9:4a:b6:5d:fc:03:02:62:c4:f9:7a:68:6b:
7e:ed:ee:70:0e:9c:b9:fb:c5:99:9c:45:dd:61:85:
98:cf:9b:c8:55:d3:3f:94:6d:0b:58:b6:50:a3:6e:
11:27:b1:95:b8:38:45:9b:02:ae:64:0c:08:a5:83:
fa:65:0e:1a:d8:2a:2d:0b:31:cc:46:ab:b4:fc:84:
8a:31:c0:0b:4b:ee:9b:f6:a7:9a:15:99:33:51:7c:
ad:53:b5:97:5f:6b:27:7f:92:76:0f:0a:ba:91:68:
5f:c6:2d:e8:4d:d3:39:ad:97:11:52:aa:25:4a:cb:
3b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:04:C0:89:A0:5B:58:92:8D:46:5D:77:29:9B:D6:27:06:8C:C3:06
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/GATAiaBbWJKNRl13KZvWJwaMwwY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.72.0/23
Signature Algorithm: sha256WithRSAEncryption
c9:6e:df:c0:74:47:d8:79:dc:5d:f2:21:39:18:a5:69:58:b3:
44:75:67:e8:a2:b2:6f:d5:5d:70:cb:76:a2:58:c6:2a:6a:0c:
eb:47:3d:db:bf:2f:fc:4d:07:2d:5d:7d:77:f2:97:c8:31:af:
88:cf:f8:90:64:bf:8f:ed:57:81:ba:4d:de:63:01:41:dd:36:
50:82:e9:28:63:e8:18:55:48:c2:5d:3d:1a:02:ee:47:e7:79:
79:f7:41:3f:b1:c5:49:c3:14:c1:9d:32:42:81:df:dd:66:a0:
67:78:80:4d:19:58:7f:45:4c:88:8d:f8:db:fd:de:86:f5:60:
17:4e:d3:4d:7c:4f:7a:ed:c7:0a:af:fb:d6:4b:b6:d7:af:84:
ce:3c:6d:56:bc:7b:9d:20:bd:25:b3:af:ce:2a:37:e9:1a:1b:
18:c2:d2:da:f8:94:58:ea:6f:27:98:a4:9c:99:2e:b5:e2:c6:
46:8c:f7:de:69:72:db:b0:07:4b:f9:06:76:70:92:5c:94:20:
93:b1:71:1c:32:78:35:3e:04:e3:ab:fa:c9:8b:fe:3f:ad:71:
01:fd:15:f0:01:54:d8:cb:17:71:83:23:b1:5a:7d:20:b4:93:
7b:47:96:ad:b3:7d:71:1d:de:dc:af:f0:65:2c:d2:0d:2c:77:
48:3f:dc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org