Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Ru_Mbn28fK9BycehH82B-K_s0xc.roa
File: Ru_Mbn28fK9BycehH82B-K_s0xc.roa (raw, json)
Hash identifier: DZ3rKIsZ6EbLbhwnzN6ojepNUFnI79NxjffagtzS9ik=
Subject key identifier: 46:EF:CC:6E:7D:BC:7C:AF:41:C9:C7:A1:1F:CD:81:F8:AF:EC:D3:17
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0D78
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Ru_Mbn28fK9BycehH82B-K_s0xc.roa
Signing time: Mon 15 Jan 2024 21:28:47 +0000
ROA not before: Mon 15 Jan 2024 21:28:47 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 210.63.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3448 (0xd78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:28:47 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=46EFCC6E7DBC7CAF41C9C7A11FCD81F8AFECD317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8f:29:64:d5:4e:8d:6d:48:6d:0f:09:7b:f4:
8a:09:77:b1:94:5b:9c:48:7c:77:43:93:97:3f:78:
fc:20:25:cf:ea:a7:03:64:ba:0a:a3:9b:41:f3:9d:
c9:70:85:85:99:6a:a8:b6:f7:24:ef:d5:d5:81:c7:
31:f4:16:12:2f:0e:12:c2:a9:9d:8a:d9:39:b5:5f:
38:6f:b6:f4:70:bd:ee:df:ad:75:15:cd:6b:16:15:
de:1a:48:6d:6c:54:77:56:2a:95:00:50:e5:e2:1f:
3b:1b:ed:b0:84:d7:9a:5d:33:7a:ad:dd:81:cf:d8:
db:bb:94:4c:eb:47:47:29:69:60:37:ba:e1:89:e9:
57:c6:10:62:62:7e:65:9f:b1:4c:ed:0d:30:b9:bc:
47:1d:84:35:56:d4:42:54:7a:23:fa:9d:af:e3:08:
a7:ff:07:88:a3:4f:cd:5b:66:a7:83:e1:93:38:46:
14:88:10:07:71:93:c5:92:b0:fc:51:ce:1a:c9:db:
5c:3e:2c:88:9e:76:39:2b:4f:fc:a4:3a:16:b1:6a:
ee:9c:be:9c:d4:89:e7:cc:f4:0c:68:f2:ed:fe:fd:
10:53:97:aa:cb:f9:6d:3c:14:aa:c3:70:8e:d4:ad:
88:e9:b9:45:aa:a2:f4:29:ed:6f:b3:ce:cb:98:5a:
37:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EF:CC:6E:7D:BC:7C:AF:41:C9:C7:A1:1F:CD:81:F8:AF:EC:D3:17
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Ru_Mbn28fK9BycehH82B-K_s0xc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.200.0/21
Signature Algorithm: sha256WithRSAEncryption
02:87:a9:9c:11:6e:99:b9:d8:ec:50:83:4d:05:8b:c1:ec:7b:
23:d3:aa:47:aa:71:2f:67:50:32:1c:c1:00:b9:ab:62:c4:aa:
73:50:ce:f3:77:b2:e3:f2:46:34:11:f1:86:3e:31:83:e2:2e:
f5:e3:3b:36:70:0f:49:2e:b3:2f:34:bf:7f:5b:e3:bd:fb:27:
5d:84:40:1d:20:8f:cc:9c:6e:8c:56:d9:09:9f:de:12:a8:e7:
49:d5:9d:69:50:d9:e1:4d:9c:db:92:c5:9e:e6:c7:9c:4f:27:
ec:22:97:e6:95:d0:60:f4:9a:f4:8b:8d:7b:a6:68:6a:49:b2:
cc:bc:a4:1c:3c:d2:65:28:4d:50:42:31:06:84:5e:f9:fa:c2:
39:97:ab:c6:62:fa:a5:d9:a1:41:9d:6b:4d:fd:f5:52:f0:91:
12:0b:11:7f:cf:46:e2:67:73:02:06:c1:2a:1b:b1:cf:cd:9f:
31:bc:b7:ed:f8:e5:8c:80:ec:d8:e4:9d:19:75:16:fa:1f:7b:
30:8d:e2:14:a5:28:68:15:a8:38:c7:1b:1d:b4:6c:b6:a7:bb:
76:5f:aa:c2:df:71:dd:d2:2e:78:e5:6e:ec:98:2b:69:cf:b8:
73:96:5b:5c:94:4e:35:be:6a:66:9b:91:69:d2:fc:9f:41:2c:
9f:85:69:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org