Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/_O888euPOrM16dIfs8aljNiR0Z0.roa
File: _O888euPOrM16dIfs8aljNiR0Z0.roa (raw, json)
Hash identifier: 8sVhjX6rxEdtnqLg7n+tx7KKJKNi6ZaznO0YT9vW2IE=
Subject key identifier: FC:EF:3C:F1:EB:8F:3A:B3:35:E9:D2:1F:B3:C6:A5:8C:D8:91:D1:9D
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0BB0
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/_O888euPOrM16dIfs8aljNiR0Z0.roa
Signing time: Fri 01 Sep 2023 08:50:53 +0000
ROA not before: Fri 01 Sep 2023 08:50:53 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9674
IP address blocks: 114.140.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2992 (0xbb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Sep 1 08:50:53 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FCEF3CF1EB8F3AB335E9D21FB3C6A58CD891D19D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:76:9d:a4:6b:2d:15:0b:13:cc:c4:23:26:
c1:71:ed:eb:d2:2a:7c:a6:49:0b:e5:63:30:f4:43:
58:d5:af:71:5b:35:90:3f:05:fb:2b:f8:cc:82:c6:
72:9b:93:ee:09:23:10:57:87:1a:08:97:75:13:fa:
8e:fc:a1:ad:ba:8b:17:ee:ef:8b:76:cc:f9:72:9f:
0f:20:2f:56:ce:d6:05:4f:cd:99:ce:fa:49:65:64:
89:3f:d6:83:90:fd:23:3e:32:29:fd:e6:87:43:ab:
7d:86:22:4f:9e:f6:35:19:4c:12:c9:52:c2:27:53:
58:55:72:86:f1:a3:ee:b7:a2:ba:f9:53:af:a8:68:
19:db:46:ba:4b:2d:fd:9f:09:8b:36:de:cf:47:17:
1d:c4:12:cc:06:9d:c8:00:5f:7b:dc:60:48:0c:37:
0a:6f:0b:9a:bb:02:17:29:7d:18:69:af:31:3f:8e:
97:2f:cf:8d:18:65:ea:ec:ea:0e:60:cd:ea:fd:2a:
7a:8b:53:1c:10:10:e2:90:01:70:0e:8a:21:ab:51:
cc:43:84:d3:1d:e4:94:8b:be:e9:da:8f:7d:86:d6:
2e:10:e3:c8:23:82:ba:45:74:d9:df:34:4b:a4:d7:
78:44:18:cc:ba:ae:0b:21:0c:eb:9a:ef:53:a0:a2:
54:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EF:3C:F1:EB:8F:3A:B3:35:E9:D2:1F:B3:C6:A5:8C:D8:91:D1:9D
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/_O888euPOrM16dIfs8aljNiR0Z0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.140.0.0/16
Signature Algorithm: sha256WithRSAEncryption
af:de:f3:f4:ec:c7:a9:30:78:d5:f5:3f:11:b9:e8:11:1e:29:
1d:4f:df:d2:ae:ab:8b:d8:50:12:94:4a:9c:3c:5a:64:bb:23:
ba:5d:c1:a2:09:f4:15:61:7d:f0:8b:b2:40:27:8d:a5:aa:bb:
a3:4d:fe:3d:22:19:7e:72:f8:d0:c4:35:33:72:ab:bf:cb:ef:
79:5a:31:9d:f3:eb:c5:93:36:5f:b1:58:75:5b:4c:4b:6c:d0:
a2:ed:d2:87:5d:85:29:43:a2:04:4b:b5:5b:9a:d0:a1:b4:55:
f7:f6:12:0b:d8:80:91:87:74:78:16:0d:e4:50:83:4f:ff:c6:
d8:6c:51:97:e1:eb:e3:8c:e8:a3:ef:1b:fb:34:cd:c2:03:bd:
0a:d3:ec:03:ff:53:9f:ba:74:47:0a:eb:6f:b6:72:4f:3d:b6:
f0:2e:12:48:2d:6a:02:e7:3a:47:42:02:f2:2c:9d:ee:0e:52:
6f:7f:bc:75:3d:ba:46:6e:dd:d2:ea:66:ff:08:89:a7:8e:3f:
06:b3:12:23:8d:ed:eb:40:e0:8e:ec:15:af:d0:95:0b:a4:2a:
df:4d:c2:d1:9b:f5:62:53:94:87:09:0e:c0:f9:74:81:83:47:
9d:f1:87:ca:ea:26:98:41:56:26:89:ba:c9:da:f2:27:ba:68:
ef:74:2c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org