Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/umIYLBWH0AIHcLKb4pMIYYOi9O8.roa
File: umIYLBWH0AIHcLKb4pMIYYOi9O8.roa (raw, json)
Hash identifier: zf7BVLgDzR9AZ5cW0SCDVPBd7a2f3U5sHIP9i+zSX+4=
Subject key identifier: BA:62:18:2C:15:87:D0:02:07:70:B2:9B:E2:93:08:61:83:A2:F4:EF
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0C68
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/umIYLBWH0AIHcLKb4pMIYYOi9O8.roa
Signing time: Mon 15 Jan 2024 21:09:24 +0000
ROA not before: Mon 15 Jan 2024 21:09:24 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7482
IP address blocks: 203.79.232.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3176 (0xc68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:09:24 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=BA62182C1587D0020770B29BE293086183A2F4EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:35:60:b5:74:ef:9a:61:8e:23:9e:41:97:
5f:c9:6b:49:9c:9c:84:7e:ec:61:0a:d3:5f:8d:39:
2c:26:b9:84:e0:b5:7c:18:38:be:7f:e5:88:d9:62:
12:14:8d:e4:cc:d9:a7:7a:b5:e7:cb:5a:73:cc:59:
6a:b7:d4:2d:c7:33:32:a4:20:ea:cf:a0:2c:e8:35:
df:9c:f6:58:98:b1:1d:45:12:16:80:b5:31:25:d0:
76:0b:f1:c2:38:e9:63:35:92:6c:17:38:3d:1b:be:
d4:f0:36:3c:8c:f0:88:8d:f8:75:b2:48:ce:1b:ea:
60:4d:6b:ea:5b:51:df:5c:0c:ce:24:3c:5d:2d:6a:
eb:68:4b:f1:b7:4c:8b:ff:0c:d4:fc:d3:54:41:8d:
88:24:5a:a7:fd:ea:f7:91:03:2e:fd:ea:78:4a:8c:
76:52:f1:0a:45:e6:0f:a4:20:2e:26:8d:bf:db:2d:
76:bd:57:a8:1c:2d:d7:5c:0b:b1:b7:ae:cc:c5:20:
b9:e7:bb:d9:1d:6a:a5:a4:55:b8:af:53:aa:87:e0:
e0:f0:b6:11:d2:ab:26:24:95:67:a2:e3:2e:06:fc:
46:b0:20:b0:4e:d4:2b:f1:9d:86:16:5f:09:df:0c:
71:73:da:6e:be:15:f9:38:b2:5d:21:47:74:db:72:
fd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:62:18:2C:15:87:D0:02:07:70:B2:9B:E2:93:08:61:83:A2:F4:EF
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/umIYLBWH0AIHcLKb4pMIYYOi9O8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.232.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:0c:3f:79:d6:ae:6c:d4:26:28:ac:77:5d:b4:0f:83:1f:47:
ab:86:95:6d:b0:87:c1:cd:4e:95:91:ad:b8:db:0b:87:ff:02:
8d:8d:b4:ba:51:18:67:5d:99:fd:28:1a:31:9c:12:37:08:bd:
41:bb:6d:69:1a:27:37:e8:7f:bc:54:08:b9:e7:8b:f0:52:39:
30:8f:1b:e1:23:1a:dd:20:10:a6:9e:3b:b5:ba:23:67:75:93:
9d:91:d8:69:10:74:e2:13:73:d1:c6:aa:92:1e:a5:66:a5:38:
76:0b:79:6a:1d:50:98:62:52:83:3e:3b:5e:3d:2a:4e:bc:62:
97:39:9c:81:7e:a0:c6:82:01:63:d0:3a:dc:15:47:b1:67:c4:
2c:be:af:53:ed:3e:a5:4e:5e:7b:be:68:79:a0:5d:6e:38:e9:
7c:5b:db:99:d1:79:a1:48:8c:f7:85:00:d1:6e:bb:35:66:fc:
37:d0:25:40:de:4e:fa:45:89:ac:f8:68:45:c5:bd:7e:40:2d:
19:68:f8:7e:cd:70:20:e3:6e:c7:2b:fb:97:72:96:8b:f3:99:
f7:90:47:df:a4:f2:d8:50:49:2a:e6:8c:2f:b9:2f:eb:bc:3f:
73:f9:29:3c:56:33:d2:c9:46:4c:e4:06:37:76:03:fb:6f:01:
a0:2f:8b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org