Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/JKzWwgOzJ4H05jar1cWvBR02jqA.roa
File: JKzWwgOzJ4H05jar1cWvBR02jqA.roa (raw, json)
Hash identifier: 9Tn+GestXjtjSHOwHgmQyEpEtMuxlDyLNkyZy/+3isU=
Subject key identifier: 24:AC:D6:C2:03:B3:27:81:F4:E6:36:AB:D5:C5:AF:05:1D:36:8E:A0
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0C34
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/JKzWwgOzJ4H05jar1cWvBR02jqA.roa
Signing time: Mon 15 Jan 2024 21:08:31 +0000
ROA not before: Mon 15 Jan 2024 21:08:31 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131591
IP address blocks: 101.136.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3124 (0xc34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:08:31 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=24ACD6C203B32781F4E636ABD5C5AF051D368EA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:51:ba:24:dd:46:68:79:3b:c3:95:da:c3:
5a:a9:a0:56:ff:88:8c:5b:d8:27:2e:28:c1:15:59:
19:d5:9b:3b:1d:e0:69:60:9d:c3:ac:aa:4a:c2:b7:
1d:e3:1d:fd:b0:ca:db:51:f1:e9:7a:a1:04:48:9d:
23:9b:c8:26:2b:e7:aa:33:15:a1:97:27:a8:b3:6b:
3d:e5:d8:d8:e3:2c:63:a8:7d:27:8a:94:9a:9f:f1:
b4:50:15:23:7c:6d:f1:c1:1b:e6:a3:b9:e4:3a:ed:
3c:96:b3:94:cd:bc:7b:ed:9b:eb:0f:c1:a7:b2:a1:
08:63:72:34:c2:2d:ea:77:81:fc:b3:c4:6a:b1:27:
8c:be:01:cf:cc:66:70:fd:3d:79:01:5e:d0:d0:fd:
42:9a:28:fb:e3:77:33:40:9b:e4:02:f2:78:2a:0f:
d9:3d:b6:f9:b4:31:bd:5e:45:84:5e:fe:fb:91:8f:
86:33:b7:fe:30:4c:bb:35:d8:a2:ec:8b:10:68:b7:
8c:5b:1f:99:0a:5e:2e:80:b7:7f:37:df:58:4e:13:
36:28:63:f9:3a:12:65:06:8b:c0:90:1e:55:59:7a:
c2:9d:64:40:b7:2b:8c:4a:4e:83:a8:d3:b0:64:b4:
19:5b:1a:f4:ec:32:50:6e:07:93:66:e9:64:31:1c:
55:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AC:D6:C2:03:B3:27:81:F4:E6:36:AB:D5:C5:AF:05:1D:36:8E:A0
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/JKzWwgOzJ4H05jar1cWvBR02jqA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.136.0.0/14
Signature Algorithm: sha256WithRSAEncryption
bc:13:25:c3:f9:8a:65:cc:7b:0d:3c:3f:af:f3:af:3d:1d:3b:
2a:85:dc:70:f8:0d:6e:f1:b3:16:b3:91:50:5e:b7:be:79:f9:
b9:b9:4b:b4:de:cf:6f:de:f9:2e:4a:8d:8a:1d:e3:b5:22:3b:
04:b8:ac:c9:b7:36:8a:f6:3a:56:b2:33:20:a2:e6:0c:70:cc:
06:0b:b4:28:23:5a:88:3c:02:40:f1:46:7a:18:40:ef:67:aa:
38:c0:c2:5b:18:d0:eb:4c:1b:90:0a:62:7a:ce:c9:f3:98:11:
3f:52:ee:6f:77:02:dc:ba:ea:46:ab:1a:fb:29:8b:4b:03:36:
30:19:2c:9b:58:bd:53:c2:01:89:8e:d1:c6:d6:5a:86:4d:3a:
0d:a5:dc:b2:a6:3c:72:e2:28:11:9f:f4:5c:4c:d9:b9:1a:5b:
f5:4b:cc:7f:d5:42:80:c5:2d:47:24:40:35:a3:fb:5c:8e:65:
6a:71:c7:1a:9a:88:45:ea:d0:1c:61:ca:34:b7:b2:8a:0b:f3:
43:4a:12:e0:5e:50:73:ba:62:4b:24:83:e1:f3:61:03:6c:e8:
bc:db:50:d3:fe:a7:9d:8f:4c:62:00:1f:60:84:cd:09:7f:d0:
14:34:f1:b4:95:04:e0:8d:bb:be:1c:ae:b3:b2:d6:7e:3e:b0:
75:d7:e9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org