Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/gqUXUnDURbAIMUvcCPkz9A8Ku4k.roa
File: gqUXUnDURbAIMUvcCPkz9A8Ku4k.roa (raw, json)
Hash identifier: TDqrNdab5Vzf1r2QumWbDleDTSDf3MZwElHJNsFBe7Q=
Subject key identifier: 82:A5:17:52:70:D4:45:B0:08:31:4B:DC:08:F9:33:F4:0F:0A:BB:89
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0D9E
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/gqUXUnDURbAIMUvcCPkz9A8Ku4k.roa
Signing time: Mon 15 Jan 2024 21:29:45 +0000
ROA not before: Mon 15 Jan 2024 21:29:45 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18419
IP address blocks: 124.218.232.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3486 (0xd9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:29:45 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=82A5175270D445B008314BDC08F933F40F0ABB89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:30:30:dd:a9:58:c9:fd:45:80:e3:94:ec:d2:
1f:05:93:c2:66:57:70:22:d1:90:92:bf:26:e6:5e:
99:92:a7:29:b1:f9:ab:b6:49:09:11:d6:9a:a9:17:
9f:55:8c:b6:d8:05:be:93:15:53:77:ca:f7:0f:ed:
34:79:11:97:88:5f:43:1b:e4:0f:07:c2:37:e7:73:
59:3e:32:bc:5b:4b:3c:1e:e3:d1:6c:46:7d:aa:f6:
f0:b7:80:7e:99:35:b5:ed:67:3a:80:3c:02:c9:40:
dd:d7:52:cc:fa:74:ef:be:47:3a:3d:2b:c0:84:10:
4a:7b:c4:aa:15:87:c2:0d:0d:f6:b9:99:29:08:1e:
15:20:c0:2f:a8:27:e1:43:7e:be:a0:30:8b:ea:b1:
ac:d0:43:e1:61:9d:76:b8:28:a5:5b:ce:5d:d1:2e:
9b:67:73:0b:16:4d:f6:b8:3f:b0:1d:ac:12:2f:24:
bf:e4:f3:b9:b6:b6:e1:bc:9b:b8:94:46:e6:d5:48:
49:51:86:91:b8:9e:c6:fe:82:9f:9b:bf:25:d9:09:
5c:6f:41:70:31:33:dc:bc:76:a0:38:36:e5:cd:fb:
6d:5c:32:34:82:e3:a9:2c:e8:d3:59:1a:ff:11:9c:
a5:b3:16:60:1e:c7:d5:94:33:23:e4:d3:4e:a2:4b:
12:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A5:17:52:70:D4:45:B0:08:31:4B:DC:08:F9:33:F4:0F:0A:BB:89
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/gqUXUnDURbAIMUvcCPkz9A8Ku4k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.232.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:e0:79:e0:28:da:d6:32:c0:78:27:7d:29:e3:a0:2f:c8:07:
20:7e:23:d3:65:d9:03:fb:ff:3a:74:8d:41:25:a9:29:95:87:
ae:21:f0:3b:e9:b4:ae:ae:8e:63:8f:61:fe:de:74:9d:cd:f7:
73:50:58:e3:46:7e:3e:f5:2c:df:50:14:8c:30:7f:d4:10:49:
49:da:77:34:c1:f2:0f:b0:82:ab:25:a3:80:d2:50:f2:6c:c4:
5d:15:ee:8c:e6:2b:c1:6b:0f:be:b4:c0:f5:89:27:2d:8e:ee:
db:23:ca:93:e1:92:76:7e:53:8a:ff:80:64:5e:be:a5:24:8c:
6c:af:fa:1d:f1:48:3b:90:24:ca:e5:52:ba:f3:3a:a7:db:4b:
cd:1f:7c:c1:22:10:9f:de:95:70:ae:f7:83:31:2e:94:36:d0:
f9:88:9b:1f:4f:ad:c5:3c:63:83:03:b7:3d:fb:84:36:9c:05:
3c:77:60:e1:0c:7a:2b:ec:aa:c6:7b:ea:79:66:ec:f5:bf:03:
b4:31:3f:18:3c:86:40:2a:69:84:7f:12:72:d1:3a:9c:1a:dd:
fb:53:9b:3e:1d:94:c9:46:f3:a7:51:05:dc:cc:99:fb:14:eb:
c7:c1:17:fc:ab:2e:4e:33:03:dc:f8:61:5f:8f:88:1e:a2:b8:
ba:5e:16:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org