Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/TYTG3OqCFO4w61C__AtWpFGMjJE.roa
File: TYTG3OqCFO4w61C__AtWpFGMjJE.roa (raw, json)
Hash identifier: /J7aREFV692E9N4KEXIgSHY8NM6xC/Y2d2B4CuWNCc0=
Subject key identifier: 4D:84:C6:DC:EA:82:14:EE:30:EB:50:BF:FC:0B:56:A4:51:8C:8C:91
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0C5C
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/TYTG3OqCFO4w61C__AtWpFGMjJE.roa
Signing time: Mon 15 Jan 2024 21:09:11 +0000
ROA not before: Mon 15 Jan 2024 21:09:11 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131142
IP address blocks: 203.79.204.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3164 (0xc5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:09:11 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4D84C6DCEA8214EE30EB50BFFC0B56A4518C8C91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8f:1d:55:30:9e:cd:c8:39:7a:af:8d:4d:c6:
ba:b5:4d:83:9f:e4:65:0e:ac:59:15:69:9f:df:ea:
0e:3e:ee:d0:23:0f:f9:f7:64:b6:e7:83:a5:b7:7b:
71:79:d0:f1:63:3f:6b:fc:8c:8d:81:db:79:bf:7c:
f8:ee:a0:a0:e6:e1:88:1c:2b:74:4c:c8:15:a3:79:
ee:a2:c2:ef:02:93:7d:f8:ca:7a:39:8f:f7:fb:c6:
30:cd:55:6f:ac:e8:fa:27:b5:a2:c2:19:ba:92:d0:
61:62:f8:8a:c4:66:d2:69:fa:a3:dc:62:90:97:fb:
70:ff:b2:d1:8b:fd:e8:96:f6:60:56:58:30:02:b2:
b6:95:e5:a8:89:2e:f3:cb:0b:5f:6b:e1:a8:b1:a8:
58:53:35:2c:85:ac:70:53:d5:97:55:68:a4:e3:59:
80:2a:ac:f0:7d:d6:46:f7:40:a0:66:eb:98:6f:53:
f6:33:1f:26:91:93:3f:3c:7c:ad:95:2e:31:7e:44:
c1:e5:70:25:31:39:74:4d:71:37:27:ba:bb:f2:a1:
71:d5:8c:49:14:6f:e7:19:37:4c:a0:48:db:9d:23:
eb:31:56:6b:95:5c:f8:ee:ba:96:be:64:9b:2e:1b:
0e:bc:02:8d:3c:fd:63:6b:5b:b7:02:fb:98:52:2c:
39:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:84:C6:DC:EA:82:14:EE:30:EB:50:BF:FC:0B:56:A4:51:8C:8C:91
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/TYTG3OqCFO4w61C__AtWpFGMjJE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.204.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:1b:87:03:10:ab:79:76:45:c8:60:ea:57:57:1d:ff:4c:6d:
18:8f:3e:72:45:10:8f:11:2f:7b:32:50:a4:b4:40:7b:e6:6c:
af:2a:44:61:cb:a0:99:59:e0:8c:60:7e:03:dc:d8:1d:b9:65:
04:2e:5d:e4:9d:7d:99:43:12:58:45:08:95:d9:47:18:b6:83:
2a:bb:02:ef:aa:48:52:68:e9:bc:2d:02:6d:41:eb:d0:ec:30:
f5:da:5e:06:df:d4:99:0a:73:d3:b7:34:c7:c8:2d:26:8c:a8:
50:60:44:33:37:3b:ad:de:9b:45:37:55:fb:69:7c:f0:a3:3a:
b0:62:ec:c7:11:0d:b6:de:e9:b0:9f:69:44:f9:e3:3a:25:ac:
07:25:3b:7d:11:b5:06:1a:a2:d9:a2:01:7c:5d:62:bb:8e:ae:
ad:01:5e:1e:64:8d:22:dc:22:47:6a:c7:bf:0f:ec:23:66:fd:
80:af:eb:39:3a:4d:a7:ba:a5:04:93:5c:ed:fe:81:b0:62:61:
5d:35:73:56:37:7b:b7:16:95:56:fd:06:bc:44:88:7d:b4:02:
ee:cf:4d:48:6c:f9:82:33:7a:44:7b:d4:9a:cf:3b:d5:d9:68:
29:d2:58:52:86:c4:b2:18:bf:e6:a2:ba:01:b5:bd:e3:da:d0:
25:dc:a3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org