Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/OwAiu5ysmJ-ypmjHanr_SXllq3w.roa
File: OwAiu5ysmJ-ypmjHanr_SXllq3w.roa (raw, json)
Hash identifier: hLAZIRX57MtBsnc2C/T4Ha/qTmVP3n9vpVyIlNRgnDc=
Subject key identifier: 3B:00:22:BB:9C:AC:98:9F:B2:A6:68:C7:6A:7A:FF:49:79:65:AB:7C
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0D26
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/OwAiu5ysmJ-ypmjHanr_SXllq3w.roa
Signing time: Mon 15 Jan 2024 21:24:59 +0000
ROA not before: Mon 15 Jan 2024 21:24:59 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7482
IP address blocks: 124.219.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3366 (0xd26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:24:59 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3B0022BB9CAC989FB2A668C76A7AFF497965AB7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a6:b7:ee:69:f3:a4:4d:1c:51:c2:d5:24:69:
d1:db:3d:5f:be:c5:bd:3b:c9:80:6f:7d:87:19:8e:
b6:61:26:33:64:9e:84:53:bb:1c:d1:15:25:e5:42:
16:1c:8d:ca:74:7d:b5:31:e5:a9:04:99:99:b5:44:
45:ed:fc:92:62:a3:a9:1f:39:a2:da:a3:31:48:65:
98:ed:e3:a1:3e:45:45:d1:24:27:65:8c:17:4a:ee:
8c:62:e6:d6:8f:72:bc:8f:ee:ea:2a:7e:40:d4:34:
d6:e1:bc:b4:36:8a:28:70:bf:39:84:a0:ba:1c:55:
92:87:5e:ab:42:c5:28:f4:12:56:b9:fa:b0:bc:51:
c4:aa:3a:ed:94:77:1e:51:31:24:ca:71:fa:6b:48:
25:f8:1c:6e:f5:d6:a5:55:84:46:a4:18:82:55:69:
ca:df:20:2c:71:a7:80:42:ec:98:4d:a1:a9:00:57:
55:de:39:8f:06:f2:0d:9b:dd:dd:55:c7:b5:89:50:
e6:e6:e9:ad:16:fe:ae:0c:73:e0:4e:20:19:07:50:
fb:16:3a:87:b1:86:86:87:36:e2:76:ad:e2:5b:dd:
df:0b:19:9d:99:1b:5c:01:3b:5f:85:b9:39:80:71:
a9:bc:53:d0:92:56:ee:bf:56:cb:dd:f9:25:11:21:
b2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:00:22:BB:9C:AC:98:9F:B2:A6:68:C7:6A:7A:FF:49:79:65:AB:7C
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/OwAiu5ysmJ-ypmjHanr_SXllq3w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.219.0.0/17
Signature Algorithm: sha256WithRSAEncryption
4c:d6:ab:4e:4e:05:6e:24:88:de:94:eb:f7:a6:95:94:e7:e1:
b6:15:68:43:6a:a1:13:81:bc:f8:ee:d8:96:d7:cf:27:2a:6a:
7f:44:c1:eb:d9:25:61:71:31:d9:67:14:25:2e:b5:b9:c0:d4:
79:9e:94:b4:60:e2:c6:76:4a:60:e6:bf:51:1b:c1:44:e2:01:
a4:c5:3b:59:56:e4:10:5a:f5:d3:4d:96:a4:10:03:f8:57:6b:
54:95:ba:23:a4:5e:41:fc:3d:c9:d7:77:41:5e:16:a8:f9:c5:
73:48:84:95:a2:14:06:07:93:c4:11:4a:af:03:f4:3c:3c:df:
c2:03:88:4f:a0:ca:15:f8:ba:60:3d:89:4e:29:81:b7:2e:63:
d1:1c:b6:81:3c:8e:6a:09:36:99:27:80:0c:d0:a3:93:f2:49:
6e:e6:04:bd:31:cb:02:a0:95:62:c8:c0:7c:c8:fc:cb:f4:7a:
10:d1:cf:a3:15:b4:4b:6f:84:76:47:1f:a1:7e:74:82:42:ac:
2e:87:59:dc:ea:e7:07:39:cf:15:63:59:76:f9:a8:be:97:bf:
e3:a4:fa:ba:58:9b:f9:9d:85:f8:5f:9b:4f:a2:59:4e:53:7f:
b7:48:4b:57:69:e4:54:f2:ac:10:a4:84:34:c1:c9:de:6b:4b:
2c:18:3b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org