Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/tdAgD7YCw14dwI68JYhgg_8TyrM.roa
File: tdAgD7YCw14dwI68JYhgg_8TyrM.roa (raw, json)
Hash identifier: hj1USJ5ku4DRFmx97xhn71JXKWFZ9bb7PZ1QJPc2zC8=
Subject key identifier: B5:D0:20:0F:B6:02:C3:5E:1D:C0:8E:BC:25:88:60:83:FF:13:CA:B3
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0D32
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/tdAgD7YCw14dwI68JYhgg_8TyrM.roa
Signing time: Mon 15 Jan 2024 21:25:14 +0000
ROA not before: Mon 15 Jan 2024 21:25:14 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7539
IP address blocks: 210.200.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3378 (0xd32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:25:14 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B5D0200FB602C35E1DC08EBC25886083FF13CAB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ee:c8:90:88:68:f4:d9:cb:bd:cd:03:5b:f5:
a6:f7:79:1a:cd:6f:cf:98:27:de:26:24:16:58:d1:
ac:c3:e0:5a:3b:7d:b2:58:4a:d2:c8:36:ce:17:97:
a1:56:c5:df:90:61:5a:86:63:28:65:61:9b:73:f2:
15:fd:0b:21:b0:cc:48:1a:75:82:dc:de:74:56:f3:
60:70:4e:fc:f8:d9:7d:63:e8:f8:aa:1e:59:a8:95:
b7:db:28:53:47:88:21:a2:26:59:6a:e4:d9:33:d6:
aa:35:c8:77:d3:05:03:b0:64:ba:e9:7a:77:f8:7c:
6f:46:d6:8f:4d:46:80:9f:89:37:f8:bd:76:0b:d3:
dd:a2:a9:c7:8a:4d:dc:2b:90:b6:e5:00:9f:8a:ba:
9a:c6:73:56:97:40:bb:d3:21:65:9e:65:1f:ee:d4:
f5:61:21:f9:1c:64:e5:17:d5:51:8b:b6:52:35:3c:
11:87:6e:01:df:7d:84:48:5b:15:97:42:60:56:6f:
8f:ab:b0:0e:a9:df:4a:b5:c4:9f:95:85:83:85:49:
74:fc:c9:28:a2:2f:a2:db:68:f5:cd:32:ff:07:60:
7f:3a:ab:ee:3b:dd:d8:03:cd:ff:fd:8a:08:e5:5e:
0e:da:60:ba:e0:8e:7b:43:fb:3a:8e:75:97:c0:ab:
05:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D0:20:0F:B6:02:C3:5E:1D:C0:8E:BC:25:88:60:83:FF:13:CA:B3
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/tdAgD7YCw14dwI68JYhgg_8TyrM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.32.0/20
Signature Algorithm: sha256WithRSAEncryption
b7:d8:d9:4e:e7:a4:d2:83:37:a8:34:3a:70:63:4d:90:7b:68:
52:6c:53:c0:dd:59:68:1c:bf:9d:f8:48:e8:46:f2:0c:35:49:
27:e8:25:e9:37:4a:c3:00:1d:7a:2e:5a:61:a9:30:9f:50:d7:
59:01:44:2a:02:de:17:40:d4:a3:58:0e:d6:c2:ca:cf:61:67:
29:13:bc:91:1e:3d:8f:68:f6:97:bc:54:3d:c8:23:6e:50:4f:
43:92:0a:0c:3a:aa:4f:ef:11:a6:d1:57:7b:9e:18:c1:20:99:
ec:c1:86:16:b6:b7:53:e6:9e:3c:83:e8:67:1b:19:60:50:42:
13:9d:ab:7f:20:2c:e6:a1:2c:3f:81:33:72:d4:17:8d:8e:f1:
4a:03:6b:63:45:d4:5f:2c:79:11:f3:6b:c2:30:81:ef:f6:be:
61:a6:9a:81:27:ed:e9:18:2f:61:24:4c:1b:aa:6d:f9:1d:64:
f7:96:f1:53:0d:fa:8d:2b:4b:b6:72:a4:b3:42:95:45:c7:f9:
68:2f:56:56:62:e3:52:ec:0f:80:2e:96:c8:4d:6d:66:c1:ee:
a2:18:9b:31:7a:d4:ae:eb:6c:f3:de:9b:6e:a6:2f:27:d2:d1:
53:ed:e8:71:5f:d7:96:41:dc:c4:da:8e:f7:b4:a8:32:95:13:
47:9c:6b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org