Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Zqzb4pl0-rLR7GbAq-WiQy-6VOQ.roa
File: Zqzb4pl0-rLR7GbAq-WiQy-6VOQ.roa (raw, json)
Hash identifier: ACb5Ulqsqu+HK3G4P7/efdLPqC4FKmPBVtVsjlv1xz0=
Subject key identifier: 66:AC:DB:E2:99:74:FA:B2:D1:EC:66:C0:AB:E5:A2:43:2F:BA:54:E4
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0D3C
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Zqzb4pl0-rLR7GbAq-WiQy-6VOQ.roa
Signing time: Mon 15 Jan 2024 21:25:28 +0000
ROA not before: Mon 15 Jan 2024 21:25:28 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131627
IP address blocks: 219.91.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3388 (0xd3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:25:28 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=66ACDBE29974FAB2D1EC66C0ABE5A2432FBA54E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:94:19:1e:aa:dc:75:87:5c:ba:73:a2:af:
11:bf:0d:da:2b:91:9e:31:d0:60:a7:b8:a6:88:73:
ca:62:1a:2e:f0:41:3b:ab:49:24:e4:cf:6b:e8:15:
74:81:87:4a:ac:d0:c6:a2:17:cd:27:40:9c:fc:8f:
77:28:d7:7c:01:e7:e0:06:7a:c5:21:32:c5:5b:55:
0c:3e:f2:38:9d:2b:ec:d4:b5:59:01:a3:e1:de:b4:
9e:8f:6c:a7:dc:9f:f4:db:a2:f6:7a:63:f1:e1:24:
61:19:03:5c:03:33:63:19:fa:44:2d:8c:21:ff:96:
59:11:18:3a:e1:cb:cf:8b:5e:c9:3e:32:55:8f:ae:
cb:b3:72:3a:13:de:f8:5d:46:ad:c5:61:11:a5:10:
b2:8a:b0:5c:75:6c:2d:5f:f2:ec:c3:a7:f8:af:ac:
41:67:0c:a6:ca:ad:21:62:5c:3d:38:a0:8e:1b:26:
9a:f4:03:9d:47:61:7f:a8:d3:84:d3:35:b9:69:da:
ec:2d:d6:5f:3f:d6:6d:af:a8:e6:79:48:9a:2b:24:
33:97:76:3d:af:9e:55:5e:a1:9a:48:2b:e7:29:8f:
32:c3:56:b4:17:cb:0c:02:5a:36:7d:94:ec:80:b8:
5a:bb:b3:92:6b:86:d0:3a:ff:59:e5:ad:a1:42:e7:
cc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AC:DB:E2:99:74:FA:B2:D1:EC:66:C0:AB:E5:A2:43:2F:BA:54:E4
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Zqzb4pl0-rLR7GbAq-WiQy-6VOQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.91.0.0/18
Signature Algorithm: sha256WithRSAEncryption
85:bf:3b:ce:63:ae:83:3b:67:91:8e:9c:f3:b3:71:6a:8a:b1:
67:f0:e5:f3:65:7b:1a:ce:35:a9:1e:5c:56:d4:45:2b:34:a4:
ce:9d:d2:63:a2:11:26:2e:38:2c:25:7b:ba:ff:bc:1b:b7:f4:
81:b5:f6:2c:25:f8:e5:b2:c4:b8:2b:69:8d:30:41:54:83:28:
97:8f:4f:b4:1d:a0:61:77:74:14:dc:d6:ec:29:ec:ce:05:67:
bb:a6:15:d4:42:cf:7d:f2:73:fe:66:07:ab:23:91:bf:d4:22:
cd:71:9e:64:b4:1f:87:bd:01:b1:33:3c:5c:33:52:58:d8:c7:
52:10:46:ee:b6:f1:61:91:ad:f5:25:23:57:19:c3:5c:3b:29:
53:69:23:e5:82:27:cb:2e:ae:96:94:b8:6f:0d:f4:f8:91:40:
a2:50:dd:2b:51:45:e5:34:b8:a5:fd:52:96:9d:0e:64:61:02:
8a:57:fa:83:b2:14:b0:4b:98:4f:92:38:12:25:06:6b:61:fb:
47:51:76:0b:70:64:24:4a:8f:6e:33:46:b5:a0:dd:b2:b1:10:
88:8e:e2:be:39:55:59:16:36:47:8c:74:db:18:72:cd:6e:ea:
13:f9:4e:ff:d7:cc:8c:f0:fc:25:e7:60:64:3c:7e:21:df:75:
12:6d:98:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org