Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/exzvNrHsxRovkL2EzR7w0AJ9fyc.roa
File: exzvNrHsxRovkL2EzR7w0AJ9fyc.roa (raw, json)
Hash identifier: 44l5R59Cl9O3ydoio9qzbsOVH64XhCIoCwdtUWqrPdU=
Subject key identifier: 7B:1C:EF:36:B1:EC:C5:1A:2F:90:BD:84:CD:1E:F0:D0:02:7D:7F:27
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0E08
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/exzvNrHsxRovkL2EzR7w0AJ9fyc.roa
Signing time: Wed 24 Jan 2024 06:16:35 +0000
ROA not before: Wed 24 Jan 2024 06:16:35 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4780
IP address blocks: 219.91.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3592 (0xe08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 24 06:16:35 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7B1CEF36B1ECC51A2F90BD84CD1EF0D0027D7F27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:10:00:4e:c5:70:50:f2:09:13:38:78:9f:bc:
12:37:98:7f:9c:10:b0:fa:8a:e2:80:a7:e6:27:b2:
a8:ab:4d:b9:74:4c:59:a3:69:0e:e7:de:83:60:0f:
cc:7e:50:67:c8:02:76:78:01:ee:ba:e2:0a:b6:69:
2b:8c:1b:78:4a:0b:1c:ef:35:2c:16:b2:ab:b2:e3:
af:56:17:77:6f:8f:7a:78:34:b6:01:2d:f1:b3:db:
bd:6a:bb:14:c1:6c:f1:30:3a:37:e4:19:58:df:9c:
ea:b2:e7:28:4c:8c:4c:44:ce:19:f0:1a:3b:28:5f:
87:0c:43:d6:9c:be:32:19:74:2d:b7:02:b0:ff:ec:
59:7c:a3:ab:d1:09:83:27:6d:07:cd:a5:27:4a:01:
5b:76:9c:57:0e:c8:4c:c9:70:20:75:2e:b5:bd:5e:
da:c8:f0:2b:97:3c:69:eb:97:ed:30:3c:8b:6f:00:
71:f8:b1:8d:6f:09:08:74:4f:c3:f2:61:81:e7:26:
8b:d1:fb:52:a6:82:15:5f:3b:9b:5e:dc:39:72:db:
c1:04:09:4e:e6:71:f1:b0:a0:d5:56:ce:80:05:bd:
20:cd:29:94:06:c6:41:66:8c:47:d1:fe:ac:fc:7d:
c9:20:2e:a3:e1:d7:5c:08:bb:2a:10:d6:f4:97:77:
11:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1C:EF:36:B1:EC:C5:1A:2F:90:BD:84:CD:1E:F0:D0:02:7D:7F:27
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/exzvNrHsxRovkL2EzR7w0AJ9fyc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.91.0.0/17
Signature Algorithm: sha256WithRSAEncryption
92:14:4e:fc:bc:08:10:9c:18:04:e4:45:e0:3d:0f:e2:66:50:
99:1a:87:12:2f:81:6d:85:4a:7f:0d:0f:d2:37:06:68:e0:99:
bf:5a:5b:27:75:a7:d0:f4:7f:67:14:3e:65:6b:e1:0d:9d:72:
77:fb:10:a9:05:aa:41:b2:0e:9f:7d:9d:c7:13:70:05:31:69:
73:7a:ae:66:06:1b:13:56:6f:0a:c5:35:3e:90:69:83:3d:e8:
20:33:85:1d:18:ae:e3:34:ea:5f:6e:1c:de:39:d9:92:3a:63:
0c:15:e5:f5:b7:85:dc:e5:16:83:2d:fe:0d:a4:70:3f:74:6f:
4b:8a:ba:4c:e0:19:40:5e:2b:5d:2a:5d:62:a6:b1:c3:46:2f:
50:18:df:98:86:ce:d1:df:79:a8:ef:d7:e4:cd:f6:d5:ea:8a:
d0:ab:dc:30:54:a1:5c:58:9b:14:be:15:b4:bd:0f:0c:30:f0:
06:92:9e:e8:85:ce:76:86:2a:d0:31:46:a0:db:20:3f:1d:94:
9b:e7:1b:7d:a2:73:06:30:1a:b6:24:f1:67:57:bb:a3:c2:75:
f5:48:68:a3:66:8a:b0:eb:ac:59:18:c4:4a:a0:8c:f8:2c:47:
c8:2a:82:8a:bc:9a:8b:af:4c:09:e9:ab:50:88:2e:66:b0:32:
a6:6a:84:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org