Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/M55AlZ05OpDF7zMGwQbGMpIQFFE.roa
File: M55AlZ05OpDF7zMGwQbGMpIQFFE.roa (raw, json)
Hash identifier: wCGtizWuhcmSXPPwvDXZhyaf8JqOqVuHrN/i3fQnMcI=
Subject key identifier: 33:9E:40:95:9D:39:3A:90:C5:EF:33:06:C1:06:C6:32:92:10:14:51
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0CA8
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/M55AlZ05OpDF7zMGwQbGMpIQFFE.roa
Signing time: Mon 15 Jan 2024 21:10:33 +0000
ROA not before: Mon 15 Jan 2024 21:10:33 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9311
IP address blocks: 210.201.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3240 (0xca8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:10:33 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=339E40959D393A90C5EF3306C106C63292101451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8d:e6:7c:73:cd:52:fb:db:a2:5a:44:a8:83:
06:2f:db:e9:50:a8:04:f0:98:0e:9d:fe:bd:6f:2d:
aa:a4:e3:d8:33:1a:80:3c:c5:e6:20:5f:ca:af:85:
68:18:f7:26:b4:9b:a3:cd:73:26:42:39:ba:03:7c:
6f:2e:e7:65:58:f3:5a:a8:e5:ef:a0:54:03:23:60:
1a:cf:ea:c9:4e:eb:92:89:80:14:c4:d6:41:2a:0b:
ad:be:6a:58:60:35:f6:90:4d:32:03:38:55:9d:d0:
b5:fe:bf:a7:fb:70:50:20:85:05:0a:d3:76:fc:1b:
62:0b:d7:e0:ea:60:f6:af:b8:59:41:3e:0b:b3:5f:
46:df:9f:0a:ff:ec:2f:58:4a:39:ab:53:8b:5f:4f:
37:ba:3d:bc:ac:05:ef:e3:fb:2a:f3:fa:2a:79:91:
7e:78:c9:9a:49:17:87:51:3d:ed:b5:2b:1a:c7:a9:
68:5c:65:65:9c:c7:42:d8:01:9b:79:96:0f:ad:41:
2a:71:b1:26:e1:a1:dd:8a:9f:7f:4b:aa:67:b0:56:
a9:a5:0a:4a:71:c0:72:af:5f:fc:73:e9:7a:77:c0:
38:f0:14:04:88:e7:36:d0:98:e3:c4:08:c4:e5:39:
ce:28:27:6d:38:27:4c:90:6b:38:04:44:90:d2:20:
8b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9E:40:95:9D:39:3A:90:C5:EF:33:06:C1:06:C6:32:92:10:14:51
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/M55AlZ05OpDF7zMGwQbGMpIQFFE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.80.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:2b:9f:16:a6:03:46:15:80:64:0a:ab:bf:20:ae:2b:3f:9e:
d0:bf:6e:a7:d4:d0:c1:57:55:45:51:a9:eb:44:83:eb:3f:69:
9f:66:a9:af:ec:0c:18:6d:e5:7e:94:04:54:ae:a6:d6:40:a2:
6e:c8:aa:f1:c7:3a:13:68:ac:b1:cf:60:6e:5a:27:40:b9:91:
93:e6:73:68:5d:04:28:0e:98:b2:aa:b8:43:a0:47:db:07:bb:
06:c4:72:0e:c4:cc:99:3b:5e:8b:38:b8:5f:64:ee:86:65:72:
2c:99:de:d0:39:f7:3b:d4:32:94:eb:dc:ca:c3:f1:5b:2a:7f:
ee:f2:10:f9:9e:25:24:59:64:6d:73:fe:31:21:32:6f:37:34:
41:96:4e:e7:39:e7:b8:a5:91:8e:0d:47:9a:18:25:39:3d:aa:
93:2f:ab:dd:e3:74:f6:8a:46:22:a9:7b:52:51:bf:a8:2a:c3:
9d:68:be:c9:f1:02:a1:87:30:2b:8d:07:16:05:e3:72:99:38:
28:c3:91:df:56:c1:ae:e0:64:52:5f:39:d8:44:5b:9c:89:a2:
df:c2:76:f2:89:eb:b0:4d:90:7e:e2:11:08:10:fa:08:ca:4a:
62:72:52:58:31:39:5f:f2:d1:12:31:a2:dc:24:63:9e:90:38:
f5:fa:56:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org