Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Z-uwah9lJ34O1m3rpnKdfbS5lE8.roa
File: Z-uwah9lJ34O1m3rpnKdfbS5lE8.roa (raw, json)
Hash identifier: jEvHXAKkp382pmqPaD5+Q/StCVL+MIHAHNBoyy8yTRQ=
Subject key identifier: 67:EB:B0:6A:1F:65:27:7E:0E:D6:6D:EB:A6:72:9D:7D:B4:B9:94:4F
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0DD2
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Z-uwah9lJ34O1m3rpnKdfbS5lE8.roa
Signing time: Mon 15 Jan 2024 21:34:49 +0000
ROA not before: Mon 15 Jan 2024 21:34:49 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 124.219.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3538 (0xdd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:34:49 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=67EBB06A1F65277E0ED66DEBA6729D7DB4B9944F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:94:3a:c4:9a:a8:1f:69:95:aa:32:49:88:7a:
ca:7f:6a:f6:f7:2c:2a:e1:13:40:a4:60:4b:51:8d:
35:cf:f7:15:c4:1d:ab:11:d9:c5:12:9e:38:cc:73:
37:fe:d5:65:4b:89:f9:da:58:45:1a:e1:ff:85:b5:
ca:ed:cb:de:cf:fd:58:7b:61:77:50:b6:b8:36:d6:
0e:44:84:60:7a:22:87:c8:89:2e:2b:b2:72:f4:87:
04:78:a4:af:86:0c:4e:44:5e:3f:4f:fa:15:a2:fe:
53:e3:d1:1b:7d:7e:2f:22:94:4f:99:86:91:78:d7:
24:f9:70:e1:bf:0e:e0:1f:81:7c:d6:e7:4c:68:ea:
18:79:a2:c3:04:a6:8e:c8:53:21:51:af:e3:03:3c:
ef:59:af:78:27:82:22:b8:01:0e:18:2e:0d:e1:6b:
b9:5b:ce:80:b1:a2:49:1b:5c:93:c1:91:bc:9d:02:
b4:c1:7e:10:a7:93:35:88:2c:89:f7:20:72:46:9f:
be:4d:1e:7c:74:0d:2c:8d:c6:95:2f:fe:5a:0e:7e:
31:45:67:73:fb:19:ba:77:66:03:f6:b7:01:c3:2b:
7d:41:3a:19:9f:6a:8b:fa:24:5f:7e:55:2c:3a:a3:
ac:e5:6e:d9:33:71:e2:0a:c2:b6:41:f4:01:d4:5f:
3e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EB:B0:6A:1F:65:27:7E:0E:D6:6D:EB:A6:72:9D:7D:B4:B9:94:4F
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Z-uwah9lJ34O1m3rpnKdfbS5lE8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.219.0.0/17
Signature Algorithm: sha256WithRSAEncryption
0c:af:52:b9:53:23:d0:1f:06:bc:d6:be:e6:09:78:a7:bb:b1:
e4:ef:58:ab:dd:5d:47:8a:2b:10:f0:cb:e2:fa:88:ba:f1:9c:
90:f7:ae:4a:85:fd:65:6e:f7:6a:4a:a7:0b:aa:dd:6b:a3:47:
1d:d7:95:3a:83:2b:21:c7:89:b9:05:e1:31:22:ea:cf:ee:1b:
4f:b1:c5:40:88:c3:54:c8:0c:17:fb:5b:9d:65:fb:a0:ad:e8:
69:91:74:1b:45:4b:e7:c2:85:87:fc:b0:25:e0:a9:bc:11:04:
fd:f9:9c:c6:49:4e:f6:51:e7:93:1f:fa:36:85:36:30:19:19:
64:93:2f:d1:ac:9c:d4:d5:3c:c1:88:c2:a9:30:bd:8b:61:38:
d6:a1:48:d4:26:f8:92:64:f8:6a:ac:71:2c:91:4d:a0:17:4d:
7f:da:08:ed:7d:f2:e9:ab:7f:8d:d8:d5:11:85:d4:78:80:73:
8a:89:49:a1:1f:2f:f4:2a:92:60:c6:1c:6d:02:9b:f7:a5:e9:
7f:89:e0:26:ff:61:45:ac:7f:00:8f:da:38:be:fb:8e:63:7a:
32:21:08:90:d7:dc:dc:db:c9:5d:76:09:c3:e9:9c:d6:42:88:
d4:6e:4e:10:70:bf:dc:6e:ba:d5:5c:56:3c:d3:83:29:61:ee:
dc:7c:c8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org