Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/nfNniIRbxvm2Jb5QaW6RHFMpuWg.roa
File: nfNniIRbxvm2Jb5QaW6RHFMpuWg.roa (raw, json)
Hash identifier: A505BDGr73WTN0Vk/PyP0eW/eo+lo6QhTqx4j6lbtL8=
Subject key identifier: 9D:F3:67:88:84:5B:C6:F9:B6:25:BE:50:69:6E:91:1C:53:29:B9:68
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0C4E
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/nfNniIRbxvm2Jb5QaW6RHFMpuWg.roa
Signing time: Mon 15 Jan 2024 21:08:57 +0000
ROA not before: Mon 15 Jan 2024 21:08:57 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24154
IP address blocks: 203.207.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3150 (0xc4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:08:57 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9DF36788845BC6F9B625BE50696E911C5329B968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:36:4e:96:7d:dc:30:0b:aa:df:f3:f2:36:
ad:42:02:fb:62:96:48:01:0e:2f:da:bd:b0:ee:f9:
ce:69:38:56:78:28:8c:11:a0:ee:9d:50:66:98:47:
82:29:b8:20:cf:b2:07:6e:cd:e8:11:67:61:51:d7:
1e:4d:e5:be:ee:11:e6:ec:c6:cc:fe:67:ca:c7:4c:
b6:45:54:37:b3:0f:ee:d6:b9:18:7c:32:fb:59:ab:
3a:c3:76:1a:58:e5:8f:b5:86:24:e4:f8:d2:96:dd:
3b:62:0f:3d:14:f5:d8:82:c2:0e:b0:0c:cf:0b:b8:
ff:14:c5:96:24:31:f9:c5:48:b4:2d:bd:6b:47:3a:
80:ae:ed:6c:21:8c:f1:d6:50:3a:d0:f6:1f:86:37:
34:c6:92:0f:ae:f2:6f:eb:be:72:74:1d:fd:d4:ad:
86:ea:c9:12:fe:ac:a1:fc:bd:49:c3:27:81:ef:d3:
71:f7:dc:e7:42:90:12:8c:cc:1e:e6:2f:e7:f8:2f:
94:62:d6:7d:bc:e1:0c:40:54:fc:a8:ce:f0:14:fd:
47:a3:87:ed:49:43:5a:2e:60:9a:f0:df:4b:ec:c5:
7e:f4:7c:12:12:10:6e:d5:84:8e:bd:95:78:e1:4c:
80:33:17:3e:13:0b:f0:9c:ca:dc:fa:c6:46:c2:63:
7d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F3:67:88:84:5B:C6:F9:B6:25:BE:50:69:6E:91:1C:53:29:B9:68
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/nfNniIRbxvm2Jb5QaW6RHFMpuWg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.207.44.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:6a:bd:32:66:c7:e9:9f:1e:48:d1:3f:e5:e8:0c:c3:0c:a6:
3c:c4:fd:eb:25:6d:6d:49:56:43:d3:54:db:4a:45:a8:ca:78:
bf:da:d9:76:74:f7:a1:65:ff:1a:9e:44:72:18:cc:72:1b:4b:
ba:37:dd:61:e8:15:62:a3:68:f7:c2:18:70:d2:69:66:0b:b2:
30:6e:7b:f7:9d:79:96:b8:74:8a:44:e2:c4:ce:57:9a:bb:44:
54:0c:4f:55:33:a5:b6:8c:7a:00:0a:87:a8:c5:c2:1f:3c:38:
89:25:a3:9d:7e:b8:a8:e5:63:1c:52:e1:e8:87:89:5a:1c:05:
0a:7a:53:39:db:bf:c0:19:60:1c:51:55:5c:e4:07:28:8d:6b:
68:20:8f:70:53:c4:00:82:a7:ce:80:46:08:99:07:d3:c3:6e:
aa:22:c8:50:a9:80:70:d3:d4:06:f3:72:ca:b5:8f:4c:02:4a:
c7:fc:eb:2a:e9:44:dd:e0:6f:fc:12:f9:c5:4a:2b:3e:56:95:
c6:08:f9:3a:cb:4b:ed:3e:82:c8:b5:14:1e:b5:ba:79:46:7d:
5b:77:ab:d3:31:be:f3:84:43:a0:a5:53:be:66:47:db:44:4b:
40:16:94:53:83:02:46:01:83:9b:ab:9b:47:9d:3f:a5:9a:73:
cb:30:61:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org