Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/iSdIGltMy-DEwKGZT_dA_EinrHk.roa
File: iSdIGltMy-DEwKGZT_dA_EinrHk.roa (raw, json)
Hash identifier: /mIEKxvcc1uaxkwb40jDqDh95G9uuZOOFtPZbht5RqE=
Subject key identifier: 89:27:48:1A:5B:4C:CB:E0:C4:C0:A1:99:4F:F7:40:FC:48:A7:AC:79
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0C8E
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/iSdIGltMy-DEwKGZT_dA_EinrHk.roa
Signing time: Mon 15 Jan 2024 21:10:04 +0000
ROA not before: Mon 15 Jan 2024 21:10:04 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9311
IP address blocks: 210.200.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3214 (0xc8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:10:04 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8927481A5B4CCBE0C4C0A1994FF740FC48A7AC79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:63:f8:6f:f1:54:5b:10:6a:e5:9f:5a:f5:a6:
c6:39:ab:ff:35:95:1e:60:58:18:3e:a7:2c:f5:93:
ab:4d:cf:84:79:da:ee:ce:9b:3c:7d:07:f7:c6:90:
25:d4:90:d1:3c:7d:7a:bd:a9:e6:74:dc:c5:79:f9:
44:be:ee:cf:73:aa:0d:cf:89:b3:d5:ff:48:c2:99:
7c:5e:98:9d:e6:83:ef:d2:7e:f2:2b:cb:d5:7f:85:
b7:f5:3a:5e:4d:f3:47:bf:27:4f:d5:89:55:97:1d:
bc:94:67:31:86:a4:05:94:f0:28:4e:f4:b8:2a:b0:
11:a4:22:f6:46:c8:14:45:93:2c:aa:eb:ad:14:c5:
5b:ad:c0:27:20:9f:a0:0d:4f:ad:88:8b:de:84:ed:
8e:e4:67:f4:4c:42:9c:9c:be:39:29:b9:c2:b5:f1:
6e:0a:bb:04:03:45:ed:e3:37:93:e6:69:c7:00:77:
81:73:c9:26:5b:6e:2d:00:89:3c:e6:ba:21:0c:16:
c2:a6:46:16:b6:61:4d:50:a7:ee:cc:57:16:41:a5:
bb:e5:16:aa:9f:97:f4:de:5d:78:18:70:09:ae:18:
3c:b0:cf:7d:76:f7:b9:49:61:2a:63:fd:b1:aa:0b:
52:f0:cf:f7:7a:c2:28:87:8c:11:4b:12:64:ae:ab:
6e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:27:48:1A:5B:4C:CB:E0:C4:C0:A1:99:4F:F7:40:FC:48:A7:AC:79
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/iSdIGltMy-DEwKGZT_dA_EinrHk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.128.0/18
Signature Algorithm: sha256WithRSAEncryption
5d:73:ef:08:36:a7:31:8e:ce:82:f6:09:bd:5b:43:69:12:3f:
c3:e9:33:0a:b9:9d:b8:ae:27:57:78:cb:93:a8:2f:5c:d6:69:
f8:70:cb:99:f8:84:e9:7d:4c:2b:24:0e:ef:d1:68:1c:76:9b:
64:0e:b8:e1:b0:83:8f:85:e8:c5:cf:1e:63:11:b0:16:e6:02:
e1:98:51:e0:88:99:7a:0a:94:bb:c5:2e:72:58:65:b4:ba:3b:
74:fc:6f:bf:81:a4:10:0b:8a:2d:cf:c3:5e:c6:a1:16:22:8d:
58:fb:8b:7b:e5:a0:c4:82:24:0c:1d:7c:fb:cc:63:cf:25:91:
00:a1:63:c9:5e:57:44:79:66:dd:68:06:b0:f9:ee:57:ac:d5:
66:94:9d:ec:5d:a5:fe:a0:38:a6:9f:47:10:07:c7:9e:2d:cb:
fc:70:d0:1f:a5:8f:f2:8f:46:75:cf:50:92:07:88:57:34:eb:
4c:1b:44:d4:2d:1c:57:92:fc:48:f9:95:9f:25:b5:66:05:75:
72:10:2b:de:2a:81:7f:98:1a:5e:56:84:fa:53:3c:2f:2c:ac:
b1:93:9e:08:81:3e:98:75:21:e9:ec:a1:76:90:ea:b0:67:93:
ce:ab:ac:ad:08:71:19:e4:0b:82:6e:42:b4:2d:9b:53:63:3e:
08:92:49:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org