Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/qJ4HXFTc-xpRmNYz8FptjLgr0Eg.roa
File: qJ4HXFTc-xpRmNYz8FptjLgr0Eg.roa (raw, json)
Hash identifier: pWVjHFoAfcehDbfsuxsTVs5JMm0BHW/sL2duCP55Y38=
Subject key identifier: A8:9E:07:5C:54:DC:FB:1A:51:98:D6:33:F0:5A:6D:8C:B8:2B:D0:48
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0DEE
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/qJ4HXFTc-xpRmNYz8FptjLgr0Eg.roa
Signing time: Mon 15 Jan 2024 21:35:31 +0000
ROA not before: Mon 15 Jan 2024 21:35:31 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9922
IP address blocks: 124.218.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3566 (0xdee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:35:31 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A89E075C54DCFB1A5198D633F05A6D8CB82BD048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dd:df:6b:7d:00:23:58:eb:46:c4:3e:96:9d:
fe:22:87:9b:60:37:d0:65:ec:83:54:b8:2c:e0:44:
d6:18:9a:c6:76:8e:8b:88:ad:08:ff:e2:cb:15:f4:
34:66:a9:d6:67:0f:57:2e:ed:4b:86:97:84:2d:9f:
91:27:14:07:62:02:99:12:45:44:f4:62:8f:82:2b:
21:cf:94:51:77:73:47:a4:59:83:92:d4:bb:63:05:
49:59:68:09:34:58:bb:2e:23:cd:98:47:7d:79:c2:
90:b1:77:11:3d:92:93:de:87:ca:1c:bb:39:30:38:
4f:22:ce:5a:14:d2:dc:19:1d:08:0e:d5:47:e1:0d:
29:a2:07:db:55:65:2c:28:f6:1c:aa:a8:69:07:9a:
e5:83:3c:81:b3:4d:fa:d1:25:88:ae:db:d6:65:af:
c1:74:6f:99:21:bf:85:6a:b9:2d:c7:13:ac:cb:bc:
b6:ca:57:27:f8:87:c3:3c:d0:d0:6d:c6:3d:51:e4:
1c:66:09:72:66:74:1d:5f:3a:89:93:7f:18:7b:54:
5f:de:92:7d:9e:6a:f4:48:50:06:99:a2:0f:ca:4e:
43:6b:6c:33:b3:9e:ae:f0:e1:16:23:b6:99:5a:75:
68:aa:a9:3a:45:46:54:04:43:73:67:eb:f9:a7:a4:
0c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9E:07:5C:54:DC:FB:1A:51:98:D6:33:F0:5A:6D:8C:B8:2B:D0:48
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/qJ4HXFTc-xpRmNYz8FptjLgr0Eg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.176.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:c8:19:99:56:be:58:d3:c2:39:31:bf:2b:85:e2:c7:7d:7b:
66:a8:dc:48:80:21:ec:16:1c:35:fe:f1:9b:95:fb:47:bb:f4:
38:a3:ca:69:fc:d9:40:13:e7:b6:2a:95:36:1f:42:bd:41:f2:
87:f4:5e:09:49:83:18:94:1c:39:62:ba:56:a5:39:83:8b:34:
39:f6:e2:cd:51:f2:97:01:1e:49:a9:90:ef:3f:af:a6:4e:31:
6a:88:be:c6:d2:84:57:1f:cc:df:52:27:96:aa:96:6d:6f:6b:
ea:26:23:23:60:6c:c2:2d:4d:48:ca:5a:a5:d7:a5:49:92:99:
9f:c7:a8:52:24:bc:40:e8:50:7a:eb:7c:d4:2f:97:52:9d:e6:
f0:40:9f:48:63:5e:ff:0f:30:ee:26:c8:b6:f1:68:20:99:1f:
45:03:88:0f:d7:c2:3c:68:91:1b:77:a5:d2:7f:81:ad:ca:3e:
b4:97:e5:fb:61:2f:80:d7:13:01:28:ca:e9:ce:cb:a7:54:d3:
77:ee:e5:41:75:27:37:08:74:df:1f:0e:5f:23:1f:40:76:3e:
03:f1:0f:14:83:86:34:2d:87:67:36:34:e4:d7:cd:c3:75:cc:
dc:23:aa:dd:98:c0:d1:fe:ac:fa:94:9a:07:0c:e2:6a:24:d2:
9a:5b:ee:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org