Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/NcQp-qL9ulkR9Em3Q6DLCZ6Ag8A.roa
File: NcQp-qL9ulkR9Em3Q6DLCZ6Ag8A.roa (raw, json)
Hash identifier: edQoYBLJ6kUOfkIXQELihpdNDANY1P34yHFBNdKbQRg=
Subject key identifier: 35:C4:29:FA:A2:FD:BA:59:11:F4:49:B7:43:A0:CB:09:9E:80:83:C0
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0D8A
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/NcQp-qL9ulkR9Em3Q6DLCZ6Ag8A.roa
Signing time: Mon 15 Jan 2024 21:29:15 +0000
ROA not before: Mon 15 Jan 2024 21:29:15 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 210.201.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3466 (0xd8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:29:15 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=35C429FAA2FDBA5911F449B743A0CB099E8083C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:4d:84:24:76:a4:35:f1:38:1e:df:8a:d2:
1b:72:65:3e:eb:68:be:57:39:9e:49:73:b3:99:3d:
02:ae:82:19:a0:ad:df:db:2c:07:c2:7a:e9:8a:17:
f7:af:b0:8e:0c:ba:1c:87:55:fe:4e:ec:f9:72:1e:
76:78:45:bc:5c:f4:2f:b5:57:93:20:fb:ee:a7:b4:
ff:01:b5:e6:f7:06:f1:fd:c3:42:53:36:20:6e:6d:
6b:d6:3c:cd:08:1f:ea:68:47:3e:a6:d0:bc:49:f8:
45:93:ef:53:10:7e:bf:27:a0:23:b7:1c:9c:06:64:
1c:48:75:35:68:67:bd:b1:83:00:29:96:35:ed:fc:
76:d3:52:be:ae:14:da:71:fd:3c:a7:af:e1:59:83:
45:cd:29:4e:c3:c9:df:6f:72:5d:d3:18:b9:45:6d:
2d:b7:de:4e:1a:8e:96:ca:ad:df:9a:f6:d0:7b:29:
34:57:90:e0:64:17:66:59:f3:06:c8:e9:66:79:f5:
16:44:cd:0e:b1:04:77:ff:b8:e9:4a:54:54:94:1c:
98:70:84:ab:82:71:af:62:f9:0c:18:13:3e:de:b9:
67:1f:25:98:a3:b0:eb:04:fb:39:36:8c:c9:4d:b2:
ba:fe:ca:13:d8:07:f2:b9:62:d3:07:27:50:91:5e:
5f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C4:29:FA:A2:FD:BA:59:11:F4:49:B7:43:A0:CB:09:9E:80:83:C0
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/NcQp-qL9ulkR9Em3Q6DLCZ6Ag8A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.32.0/22
Signature Algorithm: sha256WithRSAEncryption
42:cf:e2:ec:29:13:62:72:bd:b5:ab:e3:d7:a3:36:74:7f:2c:
d7:b8:12:70:74:61:49:d4:6c:a2:b0:a6:d0:b2:30:6d:b8:31:
fc:b4:19:60:97:1e:ba:88:04:e0:58:c9:1b:9d:54:7a:f4:e0:
95:65:92:7a:b0:96:f1:5e:32:a0:5e:62:09:69:d6:07:2f:de:
53:36:4e:e5:ac:a2:2d:57:cf:b1:3a:a2:ab:c3:f5:5d:8a:73:
02:f5:1b:e0:f5:0c:f5:cd:d7:f1:7d:53:c4:1a:68:dc:9f:4b:
b7:27:5c:31:a8:76:92:ae:a2:a6:c9:51:1b:e1:e6:e6:83:13:
76:d2:40:5a:70:a6:68:8b:3a:c9:96:21:11:2d:79:04:4a:1e:
91:08:03:8a:5c:bf:d1:24:22:77:8b:58:ed:f4:4a:a9:fa:d5:
df:15:2c:68:3b:62:3d:74:ec:5e:e0:58:74:b1:48:47:1f:77:
3f:6a:ec:b9:02:88:b2:47:2d:bf:7e:cf:3e:f0:78:cf:19:86:
7d:ce:34:c6:d1:73:8b:30:7a:09:ee:a6:19:0e:0a:7f:86:64:
50:b4:8e:49:3e:17:18:c6:34:5e:6d:97:a0:26:fc:0b:87:46:
94:8f:9e:97:a3:31:7a:16:29:31:9e:60:0f:7a:be:7d:a9:9e:
69:e2:70:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org