Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/jyGK5wGL7RvYG6h9S5_5ST6-hKo.roa
File: jyGK5wGL7RvYG6h9S5_5ST6-hKo.roa (raw, json)
Hash identifier: AuUDhp/ptIkUkl3zUIPijiMfjpRltuiys+adsKFfVmc=
Subject key identifier: 8F:21:8A:E7:01:8B:ED:1B:D8:1B:A8:7D:4B:9F:F9:49:3E:BE:84:AA
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0CF4
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/jyGK5wGL7RvYG6h9S5_5ST6-hKo.roa
Signing time: Mon 15 Jan 2024 21:23:57 +0000
ROA not before: Mon 15 Jan 2024 21:23:57 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24154
IP address blocks: 222.156.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3316 (0xcf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:23:57 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8F218AE7018BED1BD81BA87D4B9FF9493EBE84AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:18:cd:2b:c2:c4:c2:c3:6d:bf:56:cc:3c:3a:
56:0f:b4:44:3a:da:fb:3a:91:e7:4c:3c:0b:0d:f9:
88:e5:01:6b:2f:54:4a:2f:80:03:29:a9:f1:43:68:
6d:25:b8:51:1f:5e:25:6e:74:49:92:58:87:3f:59:
e0:cc:4b:75:e4:ed:42:09:d2:d9:eb:ad:3b:20:2d:
4f:d8:4e:0c:43:26:d2:5a:86:ce:5f:57:c0:25:b9:
c3:50:72:bb:25:74:36:24:9b:61:87:df:b2:3d:56:
02:e9:c1:e0:95:54:f9:a8:1c:bc:e1:56:63:dd:8c:
df:cf:ad:d2:88:04:32:06:bf:d1:16:15:a0:c3:de:
58:9e:1f:91:73:62:ff:1a:43:0a:ed:6e:db:1a:95:
c7:9c:67:87:92:12:53:92:22:70:36:2f:b7:20:e0:
04:96:50:61:58:ec:d2:bc:e3:fb:39:98:89:97:57:
bd:56:2b:48:bb:d6:01:ba:8a:e5:3a:97:0b:ab:63:
4c:6d:03:f7:2e:7e:9e:fd:57:01:8b:6f:cc:91:12:
cf:eb:df:05:db:84:9b:b3:87:a2:e6:9a:e3:2b:63:
d4:56:49:6e:5b:27:5f:6d:29:df:fc:da:b0:63:03:
3a:43:f0:19:23:11:8e:35:c6:ac:be:ae:7e:c7:ad:
7c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:21:8A:E7:01:8B:ED:1B:D8:1B:A8:7D:4B:9F:F9:49:3E:BE:84:AA
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/jyGK5wGL7RvYG6h9S5_5ST6-hKo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
222.156.246.0/24
Signature Algorithm: sha256WithRSAEncryption
95:de:aa:7f:31:d1:5f:a4:23:3e:20:40:b4:42:56:53:bf:59:
c2:57:7e:1a:b8:70:a7:42:69:34:be:26:f8:33:19:99:18:d5:
e2:12:42:7c:ce:4c:9b:2c:37:d2:45:39:ee:08:1e:39:18:6d:
7d:70:38:84:88:c4:91:e1:bc:32:11:3e:0b:d4:26:21:12:f7:
d3:14:43:5a:b4:7e:3d:78:19:ac:d8:19:d3:b7:7b:47:bf:58:
d8:f7:bc:39:76:d9:4c:b1:f2:e9:40:e9:ec:fb:f6:78:98:70:
b5:fb:ec:4c:e5:eb:32:b8:4d:64:c4:e9:37:96:92:b6:df:48:
62:1d:5d:0a:a6:ae:75:1d:4b:f5:15:3a:76:57:f5:61:65:87:
8f:6a:ef:01:f5:39:47:77:81:11:65:17:88:c9:20:73:83:47:
97:1c:08:54:7d:e8:91:ca:58:1d:ab:2c:4f:2f:fd:2b:6c:74:
b8:08:41:d9:df:cc:aa:ea:d0:1e:2d:79:66:d5:39:04:0f:30:
57:72:93:13:66:0a:72:ff:c1:d4:88:27:75:6d:dd:02:ed:9c:
39:92:f7:98:9f:2a:cd:e1:bb:20:2f:c9:b9:d6:5c:7c:d9:5d:
f7:90:93:f3:71:3b:39:6d:0d:73:d8:e7:59:09:69:cf:ed:1d:
2f:0c:a1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org