Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/aR1uol9uFor5p5ul_gj-9WYxutg.roa
File: aR1uol9uFor5p5ul_gj-9WYxutg.roa (raw, json)
Hash identifier: tBMUCWeeBFA7CFWHwUcyaVKy3kaYcTp4EqC86y5ikuo=
Subject key identifier: 69:1D:6E:A2:5F:6E:16:8A:F9:A7:9B:A5:FE:08:FE:F5:66:31:BA:D8
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0C7E
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/aR1uol9uFor5p5ul_gj-9WYxutg.roa
Signing time: Mon 15 Jan 2024 21:09:47 +0000
ROA not before: Mon 15 Jan 2024 21:09:47 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7482
IP address blocks: 210.200.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3198 (0xc7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:09:47 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=691D6EA25F6E168AF9A79BA5FE08FEF56631BAD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:82:6a:d0:17:77:ff:73:04:11:28:45:42:cd:
fc:a9:cd:9c:e5:51:9b:04:13:da:55:b1:e8:6c:04:
cd:ac:8c:a9:6e:2e:f6:48:e4:4d:c6:bb:c3:23:7b:
0b:e2:d8:54:89:e6:be:08:64:30:62:7b:a0:3a:22:
33:73:97:68:a4:81:00:b5:72:72:2b:e1:c4:6d:73:
d7:69:f2:01:3b:cf:8d:07:22:9d:9a:78:b6:b1:c6:
7d:ef:fc:f0:df:ab:c6:af:f3:86:97:de:64:1a:75:
c6:00:cb:0e:e5:b5:41:5d:b7:e4:82:10:ed:dd:8f:
e5:92:3d:3b:d1:c9:a9:17:94:9f:69:e5:33:b8:ec:
6d:59:b8:e1:bd:90:db:d7:74:a0:d0:21:fd:19:96:
f1:f1:c6:72:e1:90:e2:c7:c0:02:ec:ec:19:9b:2c:
b8:c3:7a:21:4f:48:8e:dd:51:7c:f4:a8:53:02:4b:
2d:65:6e:66:5a:02:93:9a:bb:94:57:0b:f2:a3:74:
85:9a:86:3d:39:8a:fb:21:b7:43:82:a2:98:aa:be:
22:ab:1c:b5:69:7f:ec:2e:f4:42:e0:ec:14:e0:dc:
23:c4:ec:53:9f:1c:17:4e:00:a7:2f:d5:50:fd:45:
18:3b:e7:05:ff:32:74:b6:f5:e4:69:97:b3:55:f8:
06:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1D:6E:A2:5F:6E:16:8A:F9:A7:9B:A5:FE:08:FE:F5:66:31:BA:D8
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/aR1uol9uFor5p5ul_gj-9WYxutg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9a:7c:b1:bd:66:3b:45:4f:8a:4d:b6:0a:95:18:b5:a8:24:95:
98:96:db:c6:ef:5a:3c:96:12:fe:80:1d:f9:00:f3:54:6f:a4:
28:b0:09:f8:6f:68:f2:2d:44:6a:b3:7c:18:f0:50:65:9c:f1:
8e:42:9e:5c:f5:5f:55:7f:33:77:82:7c:56:75:3d:66:71:d8:
6a:ae:d8:27:73:db:ae:50:7b:52:a4:ad:56:f1:ce:0f:90:56:
ea:31:f3:13:4b:a2:b5:b6:e6:98:cb:e0:8b:be:67:cb:ec:f2:
cc:31:8c:67:e8:9e:8a:97:e2:ac:7b:f2:55:ce:53:6a:ef:d2:
19:4e:7f:3f:09:e0:00:96:54:d3:1d:08:b4:47:33:2b:ef:de:
fb:f2:c5:75:90:a5:6d:7d:f6:ea:8c:08:4b:47:3b:c6:09:02:
b0:50:f7:7f:89:b4:21:45:dd:4f:c5:61:ac:2a:9b:54:26:c7:
ee:bb:1c:dd:bf:28:b6:a1:a4:25:fb:01:8e:16:b1:f0:74:f6:
c1:f4:0d:eb:3a:93:0b:1d:33:a0:0e:fd:0b:3f:d6:38:90:a0:
93:e3:ca:80:38:fa:bf:b0:d5:ad:31:2f:e6:8b:7a:ed:f1:73:
d1:a4:9f:cb:4c:79:8e:68:97:76:e2:8e:8d:39:ba:2d:d8:72:
38:71:7e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org