Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/m8p9X8cQg58FDXl6P9_Za_5gExg.roa
File: m8p9X8cQg58FDXl6P9_Za_5gExg.roa (raw, json)
Hash identifier: SJ8jzjArBiE1Hl79dIAjBl6k+2Mwao+VJ2bcnteBLa8=
Subject key identifier: 9B:CA:7D:5F:C7:10:83:9F:05:0D:79:7A:3F:DF:D9:6B:FE:60:13:18
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0D62
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/m8p9X8cQg58FDXl6P9_Za_5gExg.roa
Signing time: Mon 15 Jan 2024 21:26:18 +0000
ROA not before: Mon 15 Jan 2024 21:26:18 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18419
IP address blocks: 218.35.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3426 (0xd62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:26:18 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9BCA7D5FC710839F050D797A3FDFD96BFE601318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ef:34:d1:9c:e7:cf:77:97:8a:62:04:03:40:
e5:f2:10:d3:73:3d:ae:b4:47:cc:a9:3d:69:2c:e2:
59:6c:26:32:69:c0:d4:c0:d0:c1:a6:d0:55:6a:6d:
13:72:a5:39:75:b4:81:53:bb:10:72:5a:8d:16:2c:
b5:92:4a:78:37:d0:fe:52:d8:08:66:cb:a2:11:ab:
1b:51:9a:0c:fc:3d:21:17:0a:c1:d9:bd:3a:4c:0b:
8b:48:d6:8e:da:02:3b:cc:2b:59:e6:5f:64:be:eb:
2e:67:fb:cb:a5:0c:3c:cd:dd:22:0b:fa:ef:72:7b:
b9:d8:6c:e2:43:f8:4b:0f:e6:86:6f:b5:d6:77:19:
13:cf:5c:6c:21:fd:eb:89:68:9f:ff:a8:f2:b9:7a:
31:97:b1:1d:46:c2:05:b2:b5:8f:f6:40:83:7b:61:
8f:dc:df:33:40:c6:e0:c0:42:c3:ce:04:84:19:d5:
e3:89:a3:dc:4a:89:7a:3a:29:b4:85:84:ef:ec:f2:
59:4d:ca:56:bb:72:4a:a1:3e:3e:60:a4:21:00:c5:
2d:15:ad:f1:36:b8:63:46:c9:64:94:32:14:8c:26:
c3:6f:67:9a:b4:1f:55:04:a8:55:0f:7c:83:8a:4d:
af:9e:6f:4f:c6:a6:f2:29:40:3e:6f:63:b7:33:4e:
6e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CA:7D:5F:C7:10:83:9F:05:0D:79:7A:3F:DF:D9:6B:FE:60:13:18
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/m8p9X8cQg58FDXl6P9_Za_5gExg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.35.128.0/18
Signature Algorithm: sha256WithRSAEncryption
be:ae:67:06:b5:67:06:f5:0a:3b:fe:aa:e1:14:42:4f:d8:c4:
a3:f7:40:a3:c8:01:80:da:54:85:d4:d2:59:02:4c:0c:ff:9f:
bc:75:3a:93:5e:3e:78:ef:2d:58:64:f3:5a:4b:0d:c3:24:2b:
e4:37:85:56:17:9a:b4:26:8d:d7:5e:b6:25:53:94:34:e2:74:
d7:59:0d:41:25:57:b3:d2:a6:fd:ae:6e:71:b8:5d:d4:7b:de:
2e:46:7d:82:fb:47:9b:89:88:a5:95:1c:82:a0:56:8f:ce:e6:
09:29:7c:e3:43:48:0b:4b:06:a3:20:c1:f3:bf:6e:ff:d3:85:
d5:b4:4c:53:0f:d1:f9:2e:86:67:c6:a8:09:6b:29:32:1b:16:
19:39:3c:1c:59:7e:3f:28:f8:4c:39:8f:25:64:d2:c4:ac:85:
24:19:0f:fd:bd:03:3a:5b:f9:48:3d:9c:0f:48:1c:bd:02:72:
4e:00:c9:e1:47:85:ba:cb:5f:99:47:83:4a:bd:1c:f0:75:ee:
26:58:37:4f:aa:5f:62:13:69:17:fd:e5:4e:64:8f:cc:4e:19:
fa:96:c6:ff:df:7d:ec:8c:13:6b:72:9b:68:5e:cf:7d:0c:b7:
d1:20:a8:2a:7a:3b:52:df:20:35:e5:22:ea:ed:74:e7:e7:c2:
f6:61:d0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org