Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/OkfeEHtA8VOFjWTQwqEyQq_5oYM.roa
File: OkfeEHtA8VOFjWTQwqEyQq_5oYM.roa (raw, json)
Hash identifier: xlPCzF6mKmywlTzINLMqFI0husU+vYbB10Qc2mUtBzk=
Subject key identifier: 3A:47:DE:10:7B:40:F1:53:85:8D:64:D0:C2:A1:32:42:AF:F9:A1:83
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0CB0
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/OkfeEHtA8VOFjWTQwqEyQq_5oYM.roa
Signing time: Mon 15 Jan 2024 21:10:41 +0000
ROA not before: Mon 15 Jan 2024 21:10:41 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 210.202.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3248 (0xcb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:10:41 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3A47DE107B40F153858D64D0C2A13242AFF9A183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:3b:59:99:3e:ac:a5:a4:3b:52:35:3a:21:
9a:ba:3e:31:de:3d:33:bd:5a:e2:34:50:4e:26:70:
1b:a6:a3:b9:40:2b:1d:3e:fa:cb:f4:64:96:76:2a:
21:29:b1:9b:ab:ca:73:b4:6c:63:e1:35:30:74:ad:
b9:8d:0a:3e:4e:d1:68:69:af:e7:f3:61:48:cf:cc:
08:89:b8:bb:22:e7:c4:02:d2:a7:24:04:0b:96:8e:
a9:95:6d:a4:bc:63:ca:99:66:e5:f7:b7:68:b3:8f:
da:c2:4b:f2:a5:95:fd:7b:91:f0:e4:3d:6b:e3:d7:
54:94:d5:3d:f0:72:07:05:f7:43:1a:0b:b9:2c:ca:
80:99:d5:33:a6:03:6e:52:83:fb:2d:60:ad:cb:1e:
2a:29:45:ef:68:36:10:eb:d5:b7:28:32:f1:d8:70:
92:37:c5:21:43:8e:f4:96:5b:f6:14:2c:a3:3a:8a:
82:8b:e1:6b:41:09:c7:ed:93:71:d5:62:01:c3:58:
c6:ad:0d:9d:91:ae:4e:a2:21:0e:a1:0e:4a:29:b5:
65:ad:d2:21:07:91:fa:7e:41:51:c6:9a:a3:1c:7e:
73:0c:10:9b:b6:9a:1e:21:4b:9b:99:7d:5f:93:d9:
53:37:eb:88:aa:e4:1b:fe:9c:c5:ff:f1:a0:50:79:
5f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:47:DE:10:7B:40:F1:53:85:8D:64:D0:C2:A1:32:42:AF:F9:A1:83
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/OkfeEHtA8VOFjWTQwqEyQq_5oYM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.0.0/19
Signature Algorithm: sha256WithRSAEncryption
7e:05:15:a5:93:15:b0:da:53:2d:b9:b4:85:f1:38:10:e7:3b:
2a:36:f4:0c:0f:de:c6:9c:8e:d7:d8:c3:4b:fe:cc:a9:d1:6d:
0a:ea:b5:37:cd:4d:5f:74:f8:4a:54:5c:a6:11:83:b2:84:e8:
b9:75:96:be:f4:e1:6e:66:c1:59:47:78:87:c0:e3:53:fa:31:
8c:a9:45:ee:55:80:90:2e:11:73:66:b8:56:0b:fd:7f:f4:9d:
83:75:bc:ba:e5:b6:e2:0b:3d:f6:22:b4:54:87:f3:91:cd:3d:
e1:47:34:69:17:e4:48:11:2b:7e:a1:7e:ca:d6:71:dc:0f:85:
ab:54:67:95:dc:d4:01:0f:b8:18:5a:7d:30:2f:bc:8a:45:f4:
38:64:4b:3f:11:76:6d:fa:c0:e6:9d:7f:56:b2:f8:20:80:bf:
ba:be:9e:b3:3f:0b:e4:b5:5e:1c:ff:8d:c3:be:96:12:a1:df:
90:9b:c4:66:2b:ec:11:e3:17:87:c8:e3:2f:ca:54:a8:f9:7f:
3a:91:9f:bf:55:79:71:e3:37:78:b7:be:a5:da:e5:21:a8:43:
29:f7:71:9f:f4:ea:2b:ec:21:b8:c4:98:4d:05:42:15:e8:e0:
c8:4a:e4:05:9f:ff:6f:3d:49:15:4a:ff:63:f8:96:b1:dd:0d:
e5:8a:4d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org