Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/uxaUTXujCrVpyqiQVshmftuqoJc.roa
File: uxaUTXujCrVpyqiQVshmftuqoJc.roa (raw, json)
Hash identifier: Gl2Dzycq13EpoBN1+m6cqbFKLYpFFSSk2+Ro3PLcYtU=
Subject key identifier: BB:16:94:4D:7B:A3:0A:B5:69:CA:A8:90:56:C8:66:7E:DB:AA:A0:97
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0DB4
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/uxaUTXujCrVpyqiQVshmftuqoJc.roa
Signing time: Mon 15 Jan 2024 21:30:16 +0000
ROA not before: Mon 15 Jan 2024 21:30:16 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18419
IP address blocks: 124.218.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3508 (0xdb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:30:16 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=BB16944D7BA30AB569CAA89056C8667EDBAAA097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:81:02:48:67:7a:cf:83:a5:58:eb:58:69:d9:
7f:69:54:9b:61:06:75:74:90:be:7b:6e:ae:61:b1:
2c:88:f9:aa:b4:05:73:59:24:b0:03:22:8e:bd:85:
6a:6c:b7:ef:3a:14:b5:4c:04:a6:e5:b8:06:ef:9f:
58:22:9c:f7:ff:71:11:c6:63:eb:f5:37:10:d6:2d:
74:ad:cb:43:49:9f:01:07:8d:c2:38:88:ae:4c:c3:
49:60:70:9f:08:0b:3e:f6:ee:82:14:34:cb:42:4f:
e9:3f:59:d9:e9:ec:be:0c:eb:21:ca:ff:a0:88:03:
8c:30:4e:05:41:f0:01:66:6f:b7:b3:58:6e:81:15:
a2:74:74:82:3f:d9:eb:05:10:08:7f:6c:d6:8a:c4:
6f:55:a4:15:cd:45:ff:da:7f:69:7e:bf:30:c7:eb:
e9:b1:c9:9e:76:b8:69:21:53:83:4b:0f:ee:6a:b7:
c6:12:e4:09:d2:e1:dd:27:ce:26:7e:28:76:61:8a:
d1:3c:78:16:cb:37:8b:00:12:3a:06:28:db:84:46:
37:15:6c:d0:25:5d:6d:c6:52:f6:f7:d5:99:bc:da:
81:f2:01:6d:b7:c8:93:b5:30:a6:53:c1:c6:87:cd:
92:bf:66:a6:28:49:92:0b:97:8d:94:a2:db:0d:16:
22:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:16:94:4D:7B:A3:0A:B5:69:CA:A8:90:56:C8:66:7E:DB:AA:A0:97
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/uxaUTXujCrVpyqiQVshmftuqoJc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.96.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:a8:18:4e:d0:50:79:b8:87:14:7c:86:4b:e9:6b:03:0e:51:
46:fa:ff:d3:bd:0f:a1:d3:7d:8a:fc:0e:32:04:0a:aa:53:ec:
e5:d8:da:a2:84:e1:64:35:06:c5:8e:fa:40:25:6e:31:11:cc:
c2:6a:4e:c3:cf:55:da:a5:9e:b4:08:9d:a4:c4:4f:9b:7c:7b:
8d:13:a8:00:b0:85:f3:19:9d:15:cf:54:51:39:33:fa:81:c6:
86:a2:09:0c:20:c8:04:d5:74:07:bb:9f:6f:23:2b:85:0d:ed:
f2:2f:0f:c8:e4:12:2b:18:43:18:e3:ac:27:45:11:51:15:75:
3d:f9:b5:6f:f9:9a:71:c7:7b:72:d5:f7:7c:35:37:c5:1c:76:
e2:ec:34:3c:48:ad:0b:6c:3b:f3:22:7f:44:f6:33:a9:3b:a8:
e1:38:51:c9:fd:69:08:cc:d0:52:76:fa:7a:97:9f:c3:66:fc:
b1:47:25:3c:43:ec:48:90:bd:83:38:09:1a:78:ed:18:28:36:
41:7a:9f:22:d7:1f:58:0d:10:fa:41:f0:84:ae:ec:3e:26:1e:
60:50:6a:6f:e4:25:41:b5:14:23:22:0b:cb:ad:66:7e:0e:4f:
8b:15:b8:b3:33:30:06:d1:b9:da:47:de:4e:00:0a:6b:8c:db:
80:c5:31:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org