Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/OVO2TpmA6z3HyNh3LwRnN9E_4MY.roa
File: OVO2TpmA6z3HyNh3LwRnN9E_4MY.roa (raw, json)
Hash identifier: A4JA25oMQjTaNe+/ApV9OscN5zCCoVkCQVhbTDKDmbg=
Subject key identifier: 39:53:B6:4E:99:80:EB:3D:C7:C8:D8:77:2F:04:67:37:D1:3F:E0:C6
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0E22
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/OVO2TpmA6z3HyNh3LwRnN9E_4MY.roa
Signing time: Mon 26 Feb 2024 07:39:02 +0000
ROA not before: Mon 26 Feb 2024 07:39:02 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 22787
IP address blocks: 210.58.90.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3618 (0xe22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 26 07:39:02 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3953B64E9980EB3DC7C8D8772F046737D13FE0C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:09:99:28:d9:af:9e:69:cf:f9:aa:59:2c:81:
64:5e:cf:8f:fa:69:61:63:18:37:53:9e:65:9d:5f:
19:7d:d1:06:d1:fd:30:48:99:b3:c0:7a:0d:d5:9f:
7a:84:54:6a:11:bd:fd:c3:22:23:9a:1d:61:b6:6a:
c5:7e:40:e1:47:67:dd:2e:e3:2f:1b:fd:15:50:db:
b1:57:44:07:f1:f9:e5:02:c8:bd:d4:b8:bb:30:13:
6b:6d:99:dd:b4:e0:15:b9:30:cd:f8:c6:38:9d:74:
15:ee:05:5e:ef:7b:c1:82:02:ef:74:c0:55:e4:f4:
9a:46:b3:ee:99:40:0b:06:4a:28:2c:b2:d8:1a:f3:
b1:33:92:b6:5e:42:fc:59:15:eb:d1:10:91:cb:c5:
88:d7:a5:84:99:f4:58:46:e5:b2:68:05:e5:83:18:
ee:37:6b:36:cf:02:e0:2b:c0:03:28:c5:41:cf:d3:
2f:5c:07:c8:65:db:fb:b3:73:90:ea:e6:fb:9e:7c:
4b:7e:db:d6:74:2b:d0:6d:60:cd:d4:16:09:0c:fb:
dc:e6:eb:24:57:46:ae:9e:1c:7d:66:4b:46:7a:1a:
29:c7:b0:7c:78:be:5e:16:dd:13:db:e9:83:ac:57:
6b:59:c3:50:5d:61:57:89:e8:17:d4:89:2e:4a:d7:
63:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:53:B6:4E:99:80:EB:3D:C7:C8:D8:77:2F:04:67:37:D1:3F:E0:C6
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/OVO2TpmA6z3HyNh3LwRnN9E_4MY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.58.90.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:f8:7f:c3:b4:e3:c1:5f:47:2f:35:e6:01:bc:6e:68:e6:cf:
87:0d:99:f2:7d:4a:96:d4:4f:f8:48:17:d2:20:2f:89:ee:c6:
52:e8:30:8b:e9:30:3a:60:a3:47:40:c4:9a:b8:3e:9a:83:95:
01:8f:4d:61:17:4d:e8:ea:d3:58:e1:41:f2:75:d2:fc:48:aa:
48:b8:ce:ea:ee:d9:3f:d1:95:49:1c:f8:bd:d2:a5:ec:77:a8:
44:98:66:85:18:3c:aa:13:a5:f5:8b:0d:6f:8a:6b:1f:30:68:
fa:be:70:21:f5:d9:3a:08:38:81:7a:e7:53:e4:a9:8a:58:3e:
8a:75:f5:94:c5:3d:d3:77:d0:de:da:7b:3f:5c:89:4d:49:ca:
0d:f8:2b:c1:27:5f:d2:90:db:bb:d3:17:b3:c6:a9:72:c4:ab:
e0:19:c4:c6:48:6e:1a:9f:48:fb:cb:b9:21:c4:46:39:50:c4:
76:10:d2:13:fd:46:fd:1a:ab:2a:c7:e2:f2:a8:7f:bf:3d:c7:
b7:7b:ed:6e:ae:01:6b:8c:21:69:c2:da:33:da:d9:42:d1:e4:
89:54:e2:dc:bb:3d:51:9f:d7:fd:18:e1:09:e3:cf:16:47:f2:
b8:b2:bf:1a:52:c2:c8:92:80:14:5c:4d:c9:15:5f:b4:ce:76:
f8:a3:65:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org