Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NARL/1e9AxoJJys3BmhHoKqBu_jyfhNg.roa
File: 1e9AxoJJys3BmhHoKqBu_jyfhNg.roa (raw, json)
Hash identifier: SfaGxErSsnz1F2/3IjoiIdIjr+Ce1ZwiejIe8Hle1L8=
Subject key identifier: D5:EF:40:C6:82:49:CA:CD:C1:9A:11:E8:2A:A0:6E:FE:3C:9F:84:D8
Certificate issuer: /CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
Certificate serial: 0B3F
Authority key identifier: 45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/1e9AxoJJys3BmhHoKqBu_jyfhNg.roa
Signing time: Fri 01 Sep 2023 09:21:35 +0000
ROA not before: Fri 01 Sep 2023 09:21:35 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7539
IP address blocks: 203.145.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2879 (0xb3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
Validity
Not Before: Sep 1 09:21:35 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D5EF40C68249CACDC19A11E82AA06EFE3C9F84D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:0b:66:ab:04:f4:24:8b:62:62:bb:2e:c5:
7f:66:dc:89:bd:fd:ed:5c:45:d8:a8:15:7d:26:32:
df:bb:ea:46:02:02:d7:02:79:1b:54:35:52:06:3a:
25:bd:62:d3:80:e9:16:64:57:17:c9:3b:35:07:b1:
f9:5e:c4:22:ab:1f:d2:4d:2c:20:27:b3:47:ae:d7:
18:71:f2:c6:c4:c9:0b:a0:30:dc:52:e0:0e:d3:3f:
81:01:86:33:6d:02:90:eb:c4:c8:3d:a4:cd:36:f6:
6a:6e:c3:8c:12:1c:e5:ba:d4:f1:c9:08:01:40:0b:
26:b5:d4:e2:ef:09:e7:29:aa:48:d8:c7:74:f7:89:
54:ec:dc:d3:5f:d3:1d:4a:ea:92:da:16:91:8f:7c:
54:61:af:15:8a:c8:a5:03:2c:de:3e:2e:85:60:94:
74:f3:85:ef:9d:4c:8e:8c:21:f5:fe:73:da:6f:e2:
a3:7c:bc:70:28:02:a0:04:78:d7:05:ce:c7:b2:10:
bc:15:29:74:b0:f1:ef:09:fc:22:cd:7a:a3:f1:27:
de:d0:20:6e:65:7e:f2:db:05:1b:53:db:e8:47:36:
90:e1:f0:05:f4:c1:75:c4:f2:6c:76:c6:b2:a2:cd:
68:5b:cc:8e:b8:29:36:f6:69:5c:99:ad:c2:81:39:
80:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EF:40:C6:82:49:CA:CD:C1:9A:11:E8:2A:A0:6E:FE:3C:9F:84:D8
X509v3 Authority Key Identifier:
keyid:45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/1e9AxoJJys3BmhHoKqBu_jyfhNg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.145.208.0/20
Signature Algorithm: sha256WithRSAEncryption
22:1a:1d:65:e0:7c:0d:95:93:5e:5e:2c:42:da:2d:16:21:59:
fb:8d:af:35:a7:e8:c4:ac:ae:06:b3:cb:9d:89:a3:d0:54:04:
4e:64:10:13:64:6a:ca:bb:d9:51:75:a4:b2:d3:08:47:e8:4e:
be:99:33:92:89:6a:de:8d:46:d1:97:12:53:9f:83:87:f0:d5:
89:80:94:1c:28:9d:b5:97:9f:9c:a1:6e:39:78:b4:35:53:da:
c8:50:36:c2:e7:82:cd:92:51:53:58:c1:7b:44:34:45:e3:7e:
5b:c1:ba:7b:0b:a6:ac:29:c3:d4:e5:a7:1f:f3:95:ad:00:f8:
4d:5d:55:44:56:75:92:01:cc:27:f6:1f:ba:ef:cc:23:7c:b2:
86:89:f1:16:1e:6f:a5:ee:6a:88:2c:94:ff:c9:0c:e2:b3:ca:
4d:ed:c2:35:02:1f:5f:76:9f:58:20:29:c5:fd:80:ed:fc:39:
53:31:bd:fb:76:22:7d:92:cb:68:8c:65:10:f1:8e:c0:00:f6:
bb:6b:e8:cd:38:75:37:bf:e0:12:72:06:f4:42:77:e3:4d:c9:
be:58:4d:3f:01:fa:6a:a8:a9:7a:3b:ec:eb:2d:63:52:00:a2:
1b:95:56:5e:6b:4e:7c:f0:bb:1f:25:7d:c0:58:a1:a8:d4:e8:
98:45:19:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:21 2024 by rpki-client on console-fra.rpki-client.org