Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/Fq5JwgQ7AWcCFCtk-61iyHSWmSk.roa
File: Fq5JwgQ7AWcCFCtk-61iyHSWmSk.roa (raw, json)
Hash identifier: Jm3kfyxzQqcqwVVoh906FFrnaMLy0LO1rQ/6vVeuTB0=
Subject key identifier: 16:AE:49:C2:04:3B:01:67:02:14:2B:64:FB:AD:62:C8:74:96:99:29
Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Certificate serial: 0B89
Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/Fq5JwgQ7AWcCFCtk-61iyHSWmSk.roa
Signing time: Fri 01 Sep 2023 08:54:47 +0000
ROA not before: Fri 01 Sep 2023 08:54:47 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4782
IP address blocks: 124.199.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2953 (0xb89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Validity
Not Before: Sep 1 08:54:47 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=16AE49C2043B016702142B64FBAD62C874969929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8a:8a:e3:37:c9:eb:77:3c:9c:64:6a:1f:3e:
63:04:f2:83:84:c7:24:c8:c8:ad:0a:29:fc:c5:21:
f8:eb:15:82:e4:ad:ec:45:d3:63:a5:f7:1d:0b:d3:
d2:12:60:2a:1a:aa:28:1b:ab:05:5b:a3:db:a8:46:
2b:0d:3a:17:bc:36:4d:19:a4:63:7b:1f:9c:88:0f:
07:a3:8a:d8:55:53:ce:07:28:6f:62:db:fd:7c:50:
30:f1:9e:74:b5:7e:5c:12:22:88:0f:a8:5f:19:f8:
f6:e0:d4:29:8c:05:f7:6a:3b:87:9d:9f:23:87:66:
7d:b9:62:19:f1:73:40:a3:ef:67:74:69:89:56:18:
90:e2:bc:81:7f:ed:8b:46:fe:2c:ff:ec:bc:d6:dd:
68:56:90:e3:74:36:1f:d3:eb:0d:9b:c6:77:ae:e4:
dd:38:db:8a:a3:7f:dd:60:a3:ca:a1:97:ea:2a:7b:
2b:56:66:1f:cf:4a:03:5c:3b:42:09:23:96:38:06:
42:d5:b6:1a:b4:26:2c:5a:9c:27:4d:c5:ce:2f:a7:
6c:6d:c2:1f:e2:cd:8a:4c:c4:00:b4:81:88:32:15:
a7:e8:64:b4:5e:6c:f9:c9:e4:a8:fe:a7:8f:f3:0d:
14:fc:85:53:c8:bc:72:7f:78:e3:36:ed:f1:aa:de:
bc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AE:49:C2:04:3B:01:67:02:14:2B:64:FB:AD:62:C8:74:96:99:29
X509v3 Authority Key Identifier:
keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/Fq5JwgQ7AWcCFCtk-61iyHSWmSk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.199.96.0/20
Signature Algorithm: sha256WithRSAEncryption
64:b0:28:c7:04:a7:7e:d4:50:12:82:58:d7:a2:3a:34:a8:a0:
a3:82:81:93:98:b9:8e:06:70:53:16:39:5e:ff:6f:63:c4:d0:
49:e2:2a:b4:55:5b:92:eb:f2:e6:01:21:aa:8e:0f:79:d4:e5:
f1:e1:bb:5b:d4:75:74:fe:7f:96:cb:fe:ce:64:a0:29:c1:e9:
bb:40:22:80:7d:8a:92:96:a5:f1:f1:3e:66:f3:02:72:19:1d:
2b:f3:57:48:67:ef:8a:fd:6f:91:9e:38:c5:40:96:fd:36:fa:
da:55:87:36:2e:0c:13:f2:e8:38:e1:bb:8b:89:50:50:37:63:
aa:cb:3d:0b:b2:22:a4:3c:fa:87:0e:2c:37:05:23:3c:dd:36:
a6:fb:45:e9:8e:a5:e9:41:56:a8:3f:09:2b:a6:61:cd:8b:b8:
40:dd:76:18:a5:5d:be:6b:56:43:76:fc:97:52:0b:6b:90:48:
7f:97:01:31:28:e8:bd:a6:bf:86:b8:85:a1:dc:1f:01:63:2f:
ed:fe:d0:75:df:a5:14:7c:55:18:d3:78:24:f9:8f:aa:2f:c8:
1f:a8:03:0e:d9:62:c0:63:96:7f:f5:68:68:ee:a3:37:f1:03:
d1:aa:28:6c:bb:81:a1:79:65:ab:12:71:30:21:02:c4:26:c6:
cf:29:95:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org