Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/YW4fQrKWoPxbGuHDqZB_WNhoFN8.roa
File: YW4fQrKWoPxbGuHDqZB_WNhoFN8.roa (raw, json)
Hash identifier: zPB+2Ky9meukaA44fg/1r0cF+aEaBlqQhDQmq+zTdP8=
Subject key identifier: 61:6E:1F:42:B2:96:A0:FC:5B:1A:E1:C3:A9:90:7F:58:D8:68:14:DF
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0DE8
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/YW4fQrKWoPxbGuHDqZB_WNhoFN8.roa
Signing time: Mon 15 Jan 2024 21:35:22 +0000
ROA not before: Mon 15 Jan 2024 21:35:22 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9922
IP address blocks: 124.218.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3560 (0xde8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:35:22 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=616E1F42B296A0FC5B1AE1C3A9907F58D86814DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cf:14:47:be:65:da:27:fe:bd:e4:88:38:e7:
a3:dc:3d:dd:64:7f:7b:5a:bb:e2:95:a3:34:f8:58:
d9:0b:33:4f:b4:17:2d:77:17:24:dc:4c:2e:81:08:
a7:e7:57:f6:1e:71:39:82:77:0b:18:f7:b7:a3:17:
78:45:91:77:68:c0:f9:32:99:b5:eb:5b:27:9f:f8:
5d:41:30:08:08:cd:41:de:2e:62:f0:25:27:12:b7:
d3:da:83:73:be:55:61:00:b5:c7:66:25:12:e3:18:
89:bc:bd:68:bf:ac:0a:47:89:93:e8:78:e9:eb:3a:
80:e1:f4:9f:42:64:0b:1b:36:e1:18:7e:3c:3b:12:
a6:77:9d:a7:a6:b7:ef:42:09:f5:7c:10:37:30:c1:
33:27:cb:b4:c4:4a:88:a0:c8:65:68:d5:09:82:15:
05:29:f2:b1:4a:12:c1:51:1b:e3:3d:1e:20:4c:07:
db:40:0c:b3:b5:ce:9f:a1:5f:37:29:e9:47:25:b6:
45:f5:56:de:39:f4:0c:3a:a9:a5:b4:9e:30:3e:2b:
e8:84:8b:a1:5b:94:16:99:ef:c6:47:43:e8:e2:f9:
61:5c:54:8b:f2:c7:59:50:b3:a4:6c:4e:13:5c:a5:
a8:b7:9f:bc:33:27:8f:8d:ea:47:90:41:1a:70:50:
7f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6E:1F:42:B2:96:A0:FC:5B:1A:E1:C3:A9:90:7F:58:D8:68:14:DF
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/YW4fQrKWoPxbGuHDqZB_WNhoFN8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.173.0/24
Signature Algorithm: sha256WithRSAEncryption
52:9f:0a:8c:64:be:28:65:6b:f1:4f:f5:56:a6:97:8d:e0:02:
35:35:e3:f0:a6:c5:70:4a:6d:39:4f:13:15:5f:21:fe:ac:ec:
4c:96:9f:8f:8d:62:90:cd:07:ea:5e:b7:95:3c:2e:93:2e:cb:
0a:46:33:0a:6f:1f:16:23:d1:25:ee:24:e5:88:94:94:73:69:
82:10:6f:a9:08:d7:7a:c1:2b:a0:a8:3e:a6:32:1e:b1:9d:89:
2e:1f:e9:6a:10:9e:0b:18:29:6d:3d:b2:a6:29:16:56:f4:bf:
48:95:35:b9:39:4a:17:ba:a1:3f:78:86:58:52:07:2f:dc:72:
08:68:42:e6:ab:ae:f0:e0:2d:0a:eb:e9:aa:bd:d9:b2:a5:23:
a0:91:0c:c6:a1:19:34:79:31:eb:32:40:7a:27:44:b9:91:21:
49:fa:e5:b7:00:59:ab:c2:db:ec:b6:c5:1f:8f:48:eb:d4:b0:
9c:4d:1f:cf:e6:71:fb:3f:8c:64:3e:b5:a0:55:74:75:6f:c0:
4e:21:b8:fd:48:ca:47:a4:7e:06:66:f7:ee:a5:d2:bd:6b:4e:
a1:fa:57:43:d8:26:7c:0f:34:f7:e5:d5:32:23:04:e0:d7:9e:
b4:48:e0:bc:6c:95:64:67:b9:eb:7d:36:12:f1:01:59:69:6c:
0d:3f:fc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org