Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/4AwRNCo9JRcMdnOi_VbPGdlauKQ.roa
File: 4AwRNCo9JRcMdnOi_VbPGdlauKQ.roa (raw, json)
Hash identifier: NR1ljlFVKnqim5GYoLh7ITt94UznXSEoQ2xLKbYk0wM=
Subject key identifier: E0:0C:11:34:2A:3D:25:17:0C:76:73:A2:FD:56:CF:19:D9:5A:B8:A4
Certificate issuer: /CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26
Certificate serial: 0B30
Authority key identifier: 6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/4AwRNCo9JRcMdnOi_VbPGdlauKQ.roa
Signing time: Fri 01 Sep 2023 09:20:17 +0000
ROA not before: Fri 01 Sep 2023 09:20:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18179
IP address blocks: 211.78.240.0/20 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2864 (0xb30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26
Validity
Not Before: Sep 1 09:20:17 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E00C11342A3D25170C7673A2FD56CF19D95AB8A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:41:32:48:5b:10:0a:55:1b:60:d0:75:e6:30:
0c:ac:49:92:91:a6:50:3a:a9:6d:a0:89:25:f9:6c:
af:ed:bb:92:17:f0:63:8d:2e:d7:45:44:4d:2e:37:
2d:ea:e6:ef:00:f6:90:d3:ab:e6:3e:04:b7:df:e9:
70:35:25:12:12:f9:59:84:55:1f:36:1b:a0:09:b0:
c9:ab:9d:4b:b6:40:92:5b:49:71:ef:e0:29:d5:fe:
dc:8b:8a:b0:14:d1:55:ba:1a:fe:e6:70:d0:ed:ca:
96:ac:03:20:4c:d8:09:3a:f0:da:d7:56:39:2b:e3:
76:33:2a:a1:7d:50:b9:b6:52:f8:72:2e:34:48:31:
f4:62:b3:c8:29:3f:41:bf:47:02:21:3f:f9:3f:f5:
f6:a3:eb:80:b0:ff:4f:93:69:9e:0e:9e:d0:a1:48:
db:3f:f9:ae:15:fd:15:54:57:84:57:71:77:ba:e5:
09:89:de:ee:bd:51:66:b5:05:7e:2b:ae:50:55:3d:
ea:4c:3d:2a:3f:4e:6f:6a:2d:e1:29:59:2c:da:28:
4a:1c:4d:ad:d1:60:38:0e:75:5b:19:f7:a9:ac:8a:
e3:41:2f:91:31:71:4a:69:a2:2b:63:15:31:11:92:
86:50:d2:76:f0:ee:f1:f8:5d:e5:fd:79:aa:be:b0:
e1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0C:11:34:2A:3D:25:17:0C:76:73:A2:FD:56:CF:19:D9:5A:B8:A4
X509v3 Authority Key Identifier:
keyid:6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/4AwRNCo9JRcMdnOi_VbPGdlauKQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.78.240.0/20
Signature Algorithm: sha256WithRSAEncryption
1e:fd:b8:7d:6c:96:6d:7c:d3:de:8b:52:77:36:cd:ed:9a:f5:
92:3a:fc:98:38:18:f1:a4:aa:b2:52:ad:ec:95:0e:3c:44:0f:
5e:17:6b:8f:5b:28:2a:b0:02:e4:a6:a3:2c:e9:2f:15:a1:7a:
49:cc:f3:87:bd:11:d7:dc:cf:b5:d2:ae:39:1e:9c:e0:9c:90:
f0:3a:9e:ac:8b:7b:5a:61:ef:c7:31:0d:e7:30:e6:0d:cf:57:
85:4c:45:9c:76:24:80:3b:e3:e6:85:2c:1a:d5:b0:27:1d:0c:
37:fe:04:e1:5b:bc:d4:78:21:88:c0:ca:4a:f2:b4:98:4b:62:
84:f6:a8:79:7d:a6:4b:25:7c:88:02:87:5b:4e:3d:42:84:d7:
ef:51:3d:0c:cd:36:5e:52:04:88:92:f7:9e:80:6a:eb:df:b4:
f3:02:d6:41:84:ac:81:e9:1c:48:a6:88:8f:c3:43:e3:7b:3d:
11:11:ba:67:b3:69:cf:1b:b6:87:be:71:e5:8e:75:78:7e:8b:
5d:b3:25:19:d1:78:45:37:0d:36:2a:45:12:29:96:c3:24:e5:
b0:01:e2:a5:4c:e8:54:cd:c4:af:04:99:54:8b:03:74:38:d8:
dd:2f:a7:5f:e9:54:bd:6d:71:3e:5d:19:be:ca:20:95:0a:1f:
ed:13:74:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org