Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/xV188o1mFmS__RHYSbmloWHM5qc.roa
File: xV188o1mFmS__RHYSbmloWHM5qc.roa (raw, json)
Hash identifier: wWzR5H6XFyulfblbOpOV0ZSMOIlNR6D6yoauJxh+4ko=
Subject key identifier: C5:5D:7C:F2:8D:66:16:64:BF:FD:11:D8:49:B9:A5:A1:61:CC:E6:A7
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0DFC
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/xV188o1mFmS__RHYSbmloWHM5qc.roa
Signing time: Mon 15 Jan 2024 21:43:33 +0000
ROA not before: Mon 15 Jan 2024 21:43:33 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 60.244.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3580 (0xdfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:43:33 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C55D7CF28D661664BFFD11D849B9A5A161CCE6A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:a9:f9:48:4f:bf:b0:6c:23:dd:dc:53:2b:
5e:5c:e6:75:0f:95:5a:83:c1:eb:fa:6d:b3:a9:15:
09:4a:6d:b3:ee:ba:99:5d:e5:00:86:73:c7:10:ed:
6f:d7:da:ef:22:c5:da:1e:ff:0f:4f:93:db:58:56:
f2:83:f7:e3:59:f7:e9:03:9e:40:c9:2d:6d:50:e2:
57:3c:00:2a:69:ca:d7:58:3b:bf:2b:7c:1c:e7:6f:
5e:a6:16:15:79:6d:2f:2a:38:68:9b:d9:4d:6f:66:
52:cd:75:ad:d5:3c:69:5f:77:e5:f1:4d:09:f6:ae:
9c:b1:ec:46:83:b0:16:dc:7e:01:89:1f:92:9f:82:
51:49:27:cd:e7:4d:76:f0:bf:72:d8:34:94:9d:5c:
e6:f1:bb:a7:aa:f0:ce:48:53:61:01:2c:ef:06:f7:
1a:f7:10:64:2d:87:a2:e0:1c:c4:25:d2:32:3f:a0:
37:61:f6:c2:da:94:0a:b8:71:a4:c5:20:fb:e1:24:
4f:61:f4:17:ae:2d:6c:11:27:75:79:9f:d3:6a:f2:
90:60:f8:4e:c9:be:b3:49:4f:8f:f1:ac:e4:d9:f9:
a1:1b:16:0c:a4:93:ad:ff:e1:a3:34:5b:34:6e:fb:
34:ce:54:43:30:62:d1:98:ea:bc:7d:7f:b2:79:9f:
a7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5D:7C:F2:8D:66:16:64:BF:FD:11:D8:49:B9:A5:A1:61:CC:E6:A7
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/xV188o1mFmS__RHYSbmloWHM5qc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.244.128.0/17
Signature Algorithm: sha256WithRSAEncryption
86:2b:c7:58:50:da:b3:c9:c5:fc:c5:30:40:f1:6d:11:56:1a:
7b:bb:09:31:b4:2d:9d:04:86:ba:f1:2f:85:db:16:66:c2:a7:
ef:bd:fa:66:51:66:2c:72:67:3f:ab:87:fd:9b:36:79:7b:32:
b3:8d:f7:7e:a3:dd:54:89:b3:7a:12:04:08:31:90:2c:e6:56:
23:28:19:7e:e0:85:cf:db:8f:94:b1:35:35:c8:dd:0d:80:52:
2d:61:9b:f7:1f:7d:ef:f2:5a:f6:90:14:1e:b7:36:ec:c8:8b:
22:b5:b9:fc:07:4f:8a:ac:f3:8e:57:e9:b6:2c:1f:26:8b:d8:
cc:ae:ed:93:6b:b1:eb:7b:51:0b:1b:f5:7c:9d:9c:0f:0a:e1:
01:fc:45:bd:e7:f5:7a:86:28:ae:9b:39:76:b7:35:41:c5:21:
ce:bb:ea:56:67:c9:eb:82:97:f7:0b:3f:ca:0a:9a:02:aa:c2:
3f:f9:47:8e:a8:55:bd:ba:dc:55:ed:f2:49:f3:f3:74:da:b2:
49:39:ee:e9:82:af:ab:a7:0c:2a:bd:a6:08:ba:62:bf:0e:20:
7b:21:1d:35:8b:e0:a1:a0:d4:60:05:0a:01:df:8f:d7:2b:7d:
fb:62:98:6a:bb:94:ec:b1:71:b9:a6:4f:c1:9a:98:3a:23:ca:
a6:1e:68:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org