Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/wleo0Iwm55zdu81cirLOUHnOg78.roa
File: wleo0Iwm55zdu81cirLOUHnOg78.roa (raw, json)
Hash identifier: Ash1rKQrYhAu4RWJzVolHOAbpH91Y4WehBixWCNU/s0=
Subject key identifier: C2:57:A8:D0:8C:26:E7:9C:DD:BB:CD:5C:8A:B2:CE:50:79:CE:83:BF
Certificate issuer: /CN=43FF5C92CC4950A457A7327D168FBC465B218322
Certificate serial: 0B2E
Authority key identifier: 43:FF:5C:92:CC:49:50:A4:57:A7:32:7D:16:8F:BC:46:5B:21:83:22
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/wleo0Iwm55zdu81cirLOUHnOg78.roa
Signing time: Fri 01 Sep 2023 08:56:07 +0000
ROA not before: Fri 01 Sep 2023 08:56:07 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4782
IP address blocks: 203.65.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2862 (0xb2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43FF5C92CC4950A457A7327D168FBC465B218322
Validity
Not Before: Sep 1 08:56:07 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C257A8D08C26E79CDDBBCD5C8AB2CE5079CE83BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c4:8c:52:79:86:39:98:11:f2:8b:39:5d:f4:
f2:12:22:bf:3e:bc:78:b7:18:39:6b:6b:eb:c7:34:
c5:a0:cc:10:81:cc:56:08:82:78:ce:d0:5a:52:08:
52:61:25:3a:68:48:06:f9:06:96:2f:4f:12:66:0f:
3a:44:07:73:cc:4a:e4:24:3d:a4:19:ce:aa:00:26:
de:37:39:92:3f:8c:26:24:54:23:aa:c4:57:42:b0:
64:14:ee:e5:79:c4:51:f5:be:85:b8:b4:66:e2:e7:
98:f6:7c:f6:4e:f0:c9:f9:ee:54:a9:f2:4d:af:05:
85:47:69:bc:52:51:27:9a:a5:d7:8e:56:64:47:6f:
19:d4:59:0d:ac:a2:35:43:45:8d:56:a7:28:7d:6f:
30:e7:6a:5f:5f:e7:da:8f:e5:c8:f4:c2:2c:07:b9:
b5:49:0d:08:13:56:2e:b5:fd:d3:67:f0:b2:8f:bd:
52:53:48:e6:4e:9e:a7:91:35:1e:39:4d:66:81:e2:
a7:d2:28:5f:c3:5d:f7:99:f4:d3:5b:13:fe:ad:9f:
02:76:30:8e:bd:3a:59:d5:66:4a:bf:c1:1a:62:77:
01:b0:9e:88:f9:2f:a5:d2:02:9d:a2:49:c8:ee:e6:
ed:d8:20:a3:3a:a8:7e:ae:83:aa:11:2f:31:04:47:
5b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:57:A8:D0:8C:26:E7:9C:DD:BB:CD:5C:8A:B2:CE:50:79:CE:83:BF
X509v3 Authority Key Identifier:
keyid:43:FF:5C:92:CC:49:50:A4:57:A7:32:7D:16:8F:BC:46:5B:21:83:22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/wleo0Iwm55zdu81cirLOUHnOg78.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.65.128.0/19
Signature Algorithm: sha256WithRSAEncryption
82:fa:4c:af:74:a9:c9:d8:5e:16:08:0f:ed:59:18:76:99:f6:
23:23:fe:83:26:9e:cf:4c:ed:da:5d:a9:a4:f5:b3:54:9f:ed:
d7:87:5f:14:5e:6a:58:e4:b5:26:2c:09:e1:b6:f9:4e:19:4e:
5b:d5:20:1c:5f:12:e7:da:0b:70:64:b8:d7:cf:45:f9:31:ce:
97:1e:0e:c9:22:31:7c:b5:ed:be:eb:3a:11:b9:b7:f9:39:fa:
55:49:ff:d4:4a:fe:33:8a:c5:83:d0:28:d9:3f:d6:dd:d3:ea:
c2:e4:a3:fa:ae:96:64:15:4d:50:43:12:d3:28:df:3e:e5:5e:
7f:e0:57:cd:67:04:e0:b1:17:43:39:e2:02:49:f1:51:fc:5d:
9a:85:8b:bf:fd:ec:27:b7:b7:10:8f:ce:c3:4e:46:b2:58:23:
02:da:93:f7:47:36:36:d1:12:7b:ff:e8:ff:db:94:64:45:c4:
48:04:df:bc:f1:9b:67:34:e1:83:d4:d8:88:ad:97:99:77:7f:
8f:b7:50:ca:26:25:71:db:27:52:c2:28:45:4f:33:c6:98:6e:
75:f5:01:2a:8a:8e:4b:d3:73:b1:c5:7b:4b:82:bf:a4:84:dd:
ea:78:d8:be:81:52:fb:1d:b2:aa:b9:d4:e6:df:57:be:0d:78:
e8:f9:60:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org