Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/dgqsh8J_FgttOdE-Wl6GZmt_Nxc.roa
File: dgqsh8J_FgttOdE-Wl6GZmt_Nxc.roa (raw, json)
Hash identifier: gZH6wn4FpPZkLFEtv7zFMpsWzLwMZQAJz95NSikvw2c=
Subject key identifier: 76:0A:AC:87:C2:7F:16:0B:6D:39:D1:3E:5A:5E:86:66:6B:7F:37:17
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0D4C
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/dgqsh8J_FgttOdE-Wl6GZmt_Nxc.roa
Signing time: Mon 15 Jan 2024 21:25:48 +0000
ROA not before: Mon 15 Jan 2024 21:25:48 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 203.79.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3404 (0xd4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:25:48 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=760AAC87C27F160B6D39D13E5A5E86666B7F3717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:13:28:d4:94:84:6d:22:dc:89:0c:97:5c:46:
28:86:2a:c9:66:e5:4c:30:f2:c6:d1:0e:49:23:1b:
1c:31:88:de:4a:6c:57:5a:16:d3:28:a0:87:2e:df:
33:49:74:97:fa:dc:da:68:f1:c2:12:76:f0:8c:fa:
07:ce:15:77:b3:90:6c:d8:67:5e:ba:d0:d1:2e:bf:
ad:5d:51:c3:58:07:78:df:7f:ee:ab:8b:c7:60:23:
13:e9:b2:26:9b:23:26:cc:2d:42:ea:43:66:e7:41:
08:4f:af:46:6a:d7:d2:23:02:47:18:43:91:9b:ec:
46:ac:89:fc:c9:68:f3:a1:ab:35:70:45:c1:e3:67:
5c:68:b8:69:56:72:4d:46:bd:56:5a:38:0a:8f:ac:
4a:46:cf:35:bf:59:e5:b1:a6:9d:de:1d:63:5a:b0:
90:4a:37:2d:c0:f6:65:59:44:86:23:82:85:5c:85:
5b:d3:61:1e:92:41:0c:48:df:21:77:36:32:8a:60:
be:d8:ce:fd:f6:18:b5:f8:24:f4:f7:e5:95:27:1c:
e0:b1:93:86:72:46:85:6f:61:de:2a:4b:27:0d:61:
79:71:62:bc:d7:f3:64:e0:ca:aa:b1:b1:e6:19:66:
f0:cb:32:6e:30:95:6e:d7:cc:7a:9a:ca:1a:35:56:
77:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0A:AC:87:C2:7F:16:0B:6D:39:D1:3E:5A:5E:86:66:6B:7F:37:17
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/dgqsh8J_FgttOdE-Wl6GZmt_Nxc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.251.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:c1:38:21:af:b8:2d:62:da:83:c8:78:5f:57:d6:e7:8e:a2:
2e:d4:7a:0d:a7:c4:15:63:5c:b7:fe:76:68:ae:4c:77:3a:fa:
2c:08:90:da:0a:c6:bc:5b:03:9e:a8:49:c6:37:49:ec:d6:93:
8f:36:d0:f0:03:f6:4d:35:a7:8c:88:0a:8a:9c:45:de:96:d7:
3d:5d:de:61:14:18:d5:fc:96:86:fd:54:e0:f5:d1:64:97:2d:
ea:4d:ed:4a:50:57:39:63:42:4e:e9:a4:f8:b9:b8:5c:44:b5:
10:4a:41:78:53:4a:98:bc:eb:78:27:e5:3b:3e:69:09:17:93:
97:76:fd:4b:81:1b:52:07:8c:10:7e:5d:48:da:48:00:40:3e:
a2:31:4f:da:68:65:cc:51:18:3c:9f:32:a7:dc:d4:89:26:f7:
25:48:48:f5:c1:b9:cb:c1:45:56:5b:3a:5b:ac:28:e4:ca:6a:
34:dd:9c:35:81:8b:fb:e3:ca:4e:88:70:88:ea:41:2a:be:d4:
c8:a6:f2:85:73:ab:69:96:63:4c:eb:d8:36:cb:c9:32:60:82:
d0:22:2b:70:d9:d3:39:17:43:e0:97:df:5f:55:e4:49:73:b6:
dc:da:20:ec:20:82:73:85:74:d4:4e:43:77:ca:74:6e:40:5a:
f7:42:db:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org