Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/pGDwLsjXg57uX_D2k72qzZqHLxc.roa
File: pGDwLsjXg57uX_D2k72qzZqHLxc.roa (raw, json)
Hash identifier: B0qp8cd5w1j1AhIpYMIPgYCZOkvI0Mvtk0gdaHgfvHA=
Subject key identifier: A4:60:F0:2E:C8:D7:83:9E:EE:5F:F0:F6:93:BD:AA:CD:9A:87:2F:17
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0C60
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/pGDwLsjXg57uX_D2k72qzZqHLxc.roa
Signing time: Mon 15 Jan 2024 21:09:15 +0000
ROA not before: Mon 15 Jan 2024 21:09:15 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24154
IP address blocks: 203.79.208.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3168 (0xc60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:09:15 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A460F02EC8D7839EEE5FF0F693BDAACD9A872F17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:e3:e9:97:d1:e8:1b:6d:d4:a4:d8:58:3a:9e:
72:d5:7a:77:fb:b8:db:16:26:0d:cd:f4:7e:11:ab:
97:de:39:e5:21:19:db:6e:c9:8e:03:a5:cf:e7:83:
66:e7:f8:df:fe:c1:05:19:16:c8:fd:22:db:6e:0b:
a4:bb:43:a5:99:92:cd:14:5b:23:0d:45:54:9a:8f:
20:00:dc:57:37:bf:0e:f6:66:c5:c9:1e:a4:45:23:
e6:c5:00:57:8c:86:ce:e4:dc:49:79:f7:9f:43:68:
55:25:04:dd:da:94:96:9d:84:06:a6:8b:d2:5a:c0:
7f:74:59:5e:25:3e:68:e8:0a:ac:96:d1:11:b5:ee:
b5:9c:05:82:97:dc:fc:89:b9:e1:af:82:6c:02:0e:
b4:f5:0b:78:d4:9f:0d:0a:61:33:b0:af:78:ec:75:
0e:0a:33:69:86:b6:bd:34:1f:84:23:e3:aa:fb:26:
40:d0:e3:54:38:df:1c:e2:9e:51:8e:11:d0:51:16:
ac:aa:57:a0:76:73:4b:aa:09:97:1a:7d:5a:96:7f:
0a:7a:e3:af:d7:d5:3c:70:a0:84:8d:0e:a7:89:e0:
7b:c3:94:da:7c:63:18:9e:e5:c1:95:54:94:56:05:
c6:8d:03:e4:77:0e:a0:9d:39:ed:74:5a:57:9e:10:
eb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:60:F0:2E:C8:D7:83:9E:EE:5F:F0:F6:93:BD:AA:CD:9A:87:2F:17
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/pGDwLsjXg57uX_D2k72qzZqHLxc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.208.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:c9:2c:ff:6d:c5:2d:87:b1:35:36:f8:60:c3:8a:e6:f7:17:
0f:ae:d9:fc:b3:20:56:02:a1:d0:51:44:94:66:e1:6e:da:df:
c3:0a:46:c6:ed:b0:09:2b:b0:a0:57:3b:65:e6:cf:df:db:9d:
2e:ce:ac:e7:7a:36:0b:22:24:87:1e:f6:e0:f0:a5:2e:48:53:
c0:3e:c3:7b:b1:e0:1b:d7:6d:5c:3e:05:72:1f:45:8d:7b:a2:
11:35:0a:64:fb:ec:3b:2b:93:ef:4a:a5:ef:45:37:36:d4:76:
f6:74:d9:68:0a:c2:78:2e:c3:57:e3:5e:14:43:46:d3:37:4c:
2c:f9:ea:fb:2d:ba:20:a7:72:b3:a9:47:56:c5:cd:c9:f9:d4:
cf:53:22:72:5e:1d:59:99:68:40:fb:6d:84:e5:2b:d0:9e:86:
51:5e:f1:64:0e:be:65:83:94:26:b1:a6:79:3c:36:52:92:89:
05:38:c1:27:e3:f7:50:9b:67:9d:7b:e3:2a:cc:5a:19:99:97:
7f:8e:62:8f:d3:a1:06:9c:86:11:62:31:4b:d4:fe:a9:80:bd:
db:ec:3f:5c:91:de:b5:25:44:d1:c8:fb:48:83:da:8c:3e:90:
e3:18:52:c9:20:fa:6d:6a:d8:0f:eb:e4:3a:f2:e8:02:6a:fc:
c9:91:74:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org