Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/xamI7voun6vBip1eWX0qdQh4LPY.roa
File: xamI7voun6vBip1eWX0qdQh4LPY.roa (raw, json)
Hash identifier: ai+r4MoV4CYrSJa6L0Dki+NViuGrVMLnvcJaBx+Lwz0=
Subject key identifier: C5:A9:88:EE:FA:2E:9F:AB:C1:8A:9D:5E:59:7D:2A:75:08:78:2C:F6
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0D86
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/xamI7voun6vBip1eWX0qdQh4LPY.roa
Signing time: Mon 15 Jan 2024 21:29:08 +0000
ROA not before: Mon 15 Jan 2024 21:29:08 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 210.203.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3462 (0xd86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:29:08 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C5A988EEFA2E9FABC18A9D5E597D2A7508782CF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:26:00:32:d3:07:65:02:30:55:2e:da:87:65:
17:0f:39:0e:c0:69:ae:55:04:15:67:07:8d:f5:d1:
55:c3:eb:d4:27:04:a8:77:2d:46:95:65:e3:b2:8c:
e7:df:bc:85:c2:71:ef:28:23:3f:0d:40:14:bc:3b:
66:52:11:39:a6:f5:07:5d:0d:2d:43:95:33:98:e3:
eb:49:db:da:86:16:d4:8a:04:72:c7:8c:8d:88:91:
5a:76:1e:bb:99:dc:1a:ec:ce:87:df:0a:fb:8c:47:
2d:c0:3b:13:35:9d:84:c5:48:66:b6:f7:d1:c5:f3:
be:22:03:6a:02:0b:b8:bb:9d:7e:2f:21:f5:9e:80:
8f:e6:88:1e:0d:cc:98:23:32:6c:0f:b9:69:52:3a:
93:92:01:a4:6b:1b:6b:d6:29:ac:42:cb:7a:c1:9d:
4a:d8:70:ba:d7:e3:a4:31:05:9c:f7:8e:e1:a4:12:
a3:de:20:b5:7c:19:3d:cc:19:63:25:46:ff:dc:74:
31:4a:29:ab:a1:ca:f9:d2:17:ed:32:65:36:f9:e8:
09:d8:37:92:1a:eb:83:cc:24:e7:d8:05:d6:1b:ca:
d9:0b:d0:7c:7b:7f:e3:88:d7:5d:50:e3:ce:d5:94:
24:63:c9:f5:d6:71:88:92:c4:39:cf:4d:96:da:57:
d0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A9:88:EE:FA:2E:9F:AB:C1:8A:9D:5E:59:7D:2A:75:08:78:2C:F6
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/xamI7voun6vBip1eWX0qdQh4LPY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.203.48.0/20
Signature Algorithm: sha256WithRSAEncryption
b9:a5:0e:e8:8e:0c:09:13:3f:94:4f:83:df:f7:44:2e:f3:00:
e3:42:97:80:8d:d5:7b:c7:f6:c9:75:25:42:66:d6:2d:ad:12:
2b:0f:dc:1b:fb:de:e6:aa:c7:70:ca:b5:39:ba:53:ea:29:cc:
b6:8d:95:de:ee:63:c1:c3:76:5d:8f:0a:db:37:3e:a5:3a:ba:
9f:49:3d:60:c0:ec:21:4c:52:f6:c0:d1:af:c1:a7:7f:85:97:
95:25:6f:46:d7:e9:81:8b:a8:75:07:74:9d:3a:21:ab:69:ee:
be:21:4c:cd:e0:91:0b:51:dd:1a:08:bb:29:22:54:fd:59:7f:
f0:dd:0c:ea:36:7a:9d:29:31:2d:5d:cc:4a:a2:59:1e:a9:60:
e0:ce:86:71:6a:ee:00:9a:f9:42:2a:a6:4a:6c:19:9a:e7:cc:
88:1e:1f:e4:5e:3a:9c:eb:77:f2:25:90:a2:50:0f:2f:90:de:
15:53:ec:69:8f:ee:88:e4:4c:29:c3:74:10:00:4e:ba:4a:e4:
7b:a1:63:55:22:a7:b6:dd:03:24:f0:22:ff:87:b3:23:9d:4f:
7f:27:b2:48:c5:ce:a3:5f:6d:bb:b0:43:1c:d1:68:48:a8:0b:
05:b1:38:3d:10:c5:a4:a0:d8:40:16:26:49:0e:be:cb:a6:94:
92:b2:21:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org