Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/KHTVqqtqgqGEZ-VMBhJSzDA_RuY.roa
File: KHTVqqtqgqGEZ-VMBhJSzDA_RuY.roa (raw, json)
Hash identifier: eCFjmfDFSuPqCKJSNrgLQOTQSsAEANlgbNRqBHpz/Z4=
Subject key identifier: 28:74:D5:AA:AB:6A:82:A1:84:67:E5:4C:06:12:52:CC:30:3F:46:E6
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0C62
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/KHTVqqtqgqGEZ-VMBhJSzDA_RuY.roa
Signing time: Mon 15 Jan 2024 21:09:17 +0000
ROA not before: Mon 15 Jan 2024 21:09:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7482
IP address blocks: 203.79.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3170 (0xc62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:09:17 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2874D5AAAB6A82A18467E54C061252CC303F46E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:94:ae:9d:20:33:99:fd:3e:e7:4c:1b:28:
52:8d:99:87:74:58:fc:f1:92:ce:0f:b2:d1:cc:77:
15:63:f5:fe:69:9b:75:bc:e4:68:18:54:83:07:79:
bf:ac:a1:e7:76:33:20:ee:d3:8b:1f:3e:51:cc:54:
e0:b3:ad:68:35:e8:18:b0:8a:fd:5f:f5:22:57:98:
25:dc:0a:f5:6f:3e:5b:ab:12:9a:10:b9:f4:bb:3b:
8c:9d:e5:a7:07:06:55:c8:6e:81:62:8a:33:fd:d4:
a3:95:94:5b:3c:ad:21:3f:97:32:83:0e:14:b3:b8:
55:16:59:cb:42:50:43:b9:b0:89:c9:78:52:7e:27:
47:95:65:20:05:4c:bf:d1:76:bf:0a:eb:1d:df:7a:
8f:bb:d6:8f:bc:e9:59:d7:0d:11:67:2c:6c:cf:b9:
23:1f:30:43:0f:ff:42:4f:f3:99:2a:6c:65:37:4d:
e9:2c:b5:6b:08:54:64:d4:cb:b7:07:a1:d5:7d:c6:
6d:48:66:21:75:b3:c0:b6:ba:91:90:04:a3:0c:58:
38:c4:86:04:33:4a:24:a5:4f:6d:31:1c:4d:73:30:
d5:ac:2c:48:e6:69:1e:1c:3a:98:c0:19:99:36:28:
25:38:21:10:cc:27:ce:07:e4:f3:d5:9a:26:e4:af:
7c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:74:D5:AA:AB:6A:82:A1:84:67:E5:4C:06:12:52:CC:30:3F:46:E6
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/KHTVqqtqgqGEZ-VMBhJSzDA_RuY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.216.0/22
Signature Algorithm: sha256WithRSAEncryption
24:af:0d:96:af:da:fb:23:3b:98:15:43:f2:f0:bf:c2:4a:30:
eb:f9:35:3a:39:40:80:38:d4:ba:12:5f:f3:12:ed:47:32:4d:
40:f6:44:1b:1e:2f:e3:24:80:d7:18:2a:a8:e5:46:56:86:b8:
62:3e:68:97:fe:72:d0:89:48:0a:b3:ba:e8:90:0c:23:3a:d8:
8e:cb:8f:96:d5:b8:c0:29:65:0d:bb:76:70:41:69:81:fe:8f:
0e:e6:66:0c:22:c6:fc:35:1f:90:c6:f4:98:88:73:46:00:72:
68:76:e3:64:82:03:2e:2c:14:94:f5:43:76:f4:85:00:6f:5a:
26:9c:d2:49:a4:a6:a5:cf:fb:2a:c5:55:67:d7:ed:6a:ab:5b:
d8:74:e5:94:91:26:39:8f:dd:1c:76:c1:6e:30:fe:0b:68:0e:
f8:3e:3b:50:1f:4b:1c:65:b6:ce:5b:6b:27:3a:aa:a8:eb:bf:
05:37:2a:e3:70:09:66:7f:8c:90:f9:76:33:bd:9c:a3:4e:11:
c1:81:d2:ff:6c:a4:71:62:3a:90:9d:e0:f6:76:64:bd:71:61:
55:91:b6:39:2e:45:e5:df:7e:3c:df:e3:b4:55:e1:2d:62:6e:
b8:4a:55:2c:df:e0:c7:73:3b:42:ac:fb:98:b8:38:b4:74:5a:
08:d8:70:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org