Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Tu_XH8BK2DpToFcqaP0lSE4NqW4.roa
File: Tu_XH8BK2DpToFcqaP0lSE4NqW4.roa (raw, json)
Hash identifier: ORVJBhgZWUtZnV81qgPDUqVVTwXt/D0dCU8mV87d01w=
Subject key identifier: 4E:EF:D7:1F:C0:4A:D8:3A:53:A0:57:2A:68:FD:25:48:4E:0D:A9:6E
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0C8A
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Tu_XH8BK2DpToFcqaP0lSE4NqW4.roa
Signing time: Mon 15 Jan 2024 21:10:00 +0000
ROA not before: Mon 15 Jan 2024 21:10:00 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9311
IP address blocks: 210.200.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3210 (0xc8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:10:00 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4EEFD71FC04AD83A53A0572A68FD25484E0DA96E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0e:03:d9:02:70:3f:0a:ed:fd:ef:ac:dd:c7:
e0:17:2c:be:93:df:da:68:f6:f1:c8:9b:fd:25:5e:
bf:92:e4:6b:17:02:29:6a:67:72:22:82:e1:eb:00:
db:ca:f1:ae:97:66:eb:f3:d4:10:9a:f4:19:9f:fb:
d7:17:9e:19:9b:7b:6e:fd:4f:e7:d2:cf:66:9e:ba:
c5:00:8c:a7:48:c4:01:6e:54:72:30:cc:18:da:a1:
3b:1b:b7:69:c7:3b:6c:4a:3b:04:c7:e6:58:e0:ad:
8c:61:38:5f:e6:ce:cf:cf:f7:92:e9:ec:bb:f1:39:
f5:8b:d7:bd:24:5b:7f:3e:97:91:ba:23:09:2f:d9:
57:7e:4f:e3:a0:9a:ae:04:ac:5a:63:c6:b2:3a:7f:
f6:89:59:56:60:3a:87:19:b3:20:1d:8b:93:6b:4d:
18:b1:b4:af:52:2e:62:39:12:bd:d0:06:fd:5a:73:
68:d8:09:f7:f5:59:3a:86:91:42:b7:c2:96:45:2d:
dc:9d:de:e4:21:5d:26:05:22:6a:69:8c:21:a4:22:
e7:2a:3f:d9:10:b1:d9:78:48:73:34:b7:b6:dd:17:
1e:77:26:b4:78:aa:fe:aa:b2:15:6a:f1:4e:05:8b:
3d:94:04:c8:a0:1e:13:e4:d7:0d:33:45:52:30:ca:
06:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EF:D7:1F:C0:4A:D8:3A:53:A0:57:2A:68:FD:25:48:4E:0D:A9:6E
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Tu_XH8BK2DpToFcqaP0lSE4NqW4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.106.0/24
Signature Algorithm: sha256WithRSAEncryption
42:3b:86:76:4e:c3:c6:95:d1:81:b5:f2:f5:5d:5f:c6:bf:7b:
23:30:2f:d8:8c:05:d1:fc:fe:ad:0d:ed:5b:bc:97:7a:45:6e:
62:b1:8f:5f:b6:39:fc:3f:82:98:e9:d2:0a:4e:f4:da:6e:42:
b1:51:9b:ef:75:ad:2c:8b:6e:71:d8:d9:0d:6f:a2:7b:1e:93:
ad:82:31:9d:9c:29:a6:89:9a:1b:60:53:40:0e:aa:b5:75:f8:
ae:90:8a:63:0f:81:be:16:e5:50:48:71:fa:77:bf:e3:42:91:
8a:2f:d8:a9:1e:3d:36:9e:7e:c1:90:d7:d5:e1:ca:04:8e:66:
e5:72:be:be:a3:83:a4:09:d0:05:70:da:6c:e5:bb:13:af:9a:
e7:51:63:9b:12:61:bc:c2:0d:d1:44:86:86:9c:18:48:45:9e:
0c:be:19:4a:76:68:cc:be:b4:35:02:a1:34:a6:2e:10:9a:20:
b2:b5:8f:95:58:59:e1:a6:db:5a:72:9d:30:4f:b6:cf:d2:7c:
3f:12:e5:0f:9f:c0:cc:5f:4e:f0:5d:d2:81:d0:6f:43:dc:da:
ba:6c:a5:8b:10:a9:e1:14:02:57:40:b4:b2:70:b6:67:04:f7:
22:22:89:5b:67:3b:bd:a3:d9:a4:0d:7b:84:b3:1f:8f:bc:51:
a4:62:28:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org