Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCHC/fG9UicWrGqGWggWAdQzp3RhZwpE.roa
File: fG9UicWrGqGWggWAdQzp3RhZwpE.roa (raw, json)
Hash identifier: t3gHOxY5WRTTZ4Il9KX/stb5CVKx2GWeUl+P4FGv4nk=
Subject key identifier: 7C:6F:54:89:C5:AB:1A:A1:96:82:05:80:75:0C:E9:DD:18:59:C2:91
Certificate issuer: /CN=ED38685FF3EA1F46685DE5F57C6A4B8104481891
Certificate serial: 0B3B
Authority key identifier: ED:38:68:5F:F3:EA:1F:46:68:5D:E5:F5:7C:6A:4B:81:04:48:18:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCHC/fG9UicWrGqGWggWAdQzp3RhZwpE.roa
Signing time: Fri 01 Sep 2023 09:23:56 +0000
ROA not before: Fri 01 Sep 2023 09:23:56 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7539
IP address blocks: 211.79.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2875 (0xb3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED38685FF3EA1F46685DE5F57C6A4B8104481891
Validity
Not Before: Sep 1 09:23:56 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7C6F5489C5AB1AA196820580750CE9DD1859C291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0e:a1:0e:3f:02:58:57:82:80:b2:c3:d4:65:
52:43:db:46:e1:b0:f4:ae:d3:5c:3a:99:d9:4a:9f:
32:0e:48:50:0e:8f:4c:3f:7e:06:8e:52:d7:81:5f:
c0:fc:4a:b2:16:df:c9:3e:9e:71:b5:39:71:12:25:
98:13:ea:58:fa:f8:a9:9a:29:62:9a:a8:f4:67:63:
6b:91:ed:13:fd:f3:cd:65:77:b0:0c:d5:0d:c3:72:
7e:88:79:45:1a:e5:80:70:4d:dc:97:d7:e7:11:c7:
0f:14:1b:b4:cd:71:40:76:93:ea:dd:59:c1:9f:dc:
3e:59:49:1f:e5:01:33:db:fc:16:f0:73:c3:90:c4:
56:fa:a8:f2:c2:57:07:98:1a:80:f5:e8:43:57:ff:
24:ce:6a:27:eb:10:9c:a5:db:eb:e6:6d:26:64:91:
03:27:b1:c4:20:cc:95:99:fe:e0:3a:96:aa:a3:c6:
eb:fa:ab:29:04:e1:de:d1:55:c2:7f:40:66:c9:c6:
19:f0:3d:3c:6a:69:b2:6f:cd:36:ee:83:55:ff:ef:
5d:35:b6:91:84:c7:77:ad:2b:22:6a:cf:59:e0:08:
9b:4c:7e:8b:67:01:66:88:70:d2:fb:12:2a:10:86:
0a:30:c0:3e:d7:8a:96:d0:0b:38:9e:aa:0b:4d:02:
77:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6F:54:89:C5:AB:1A:A1:96:82:05:80:75:0C:E9:DD:18:59:C2:91
X509v3 Authority Key Identifier:
keyid:ED:38:68:5F:F3:EA:1F:46:68:5D:E5:F5:7C:6A:4B:81:04:48:18:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCHC/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCHC/fG9UicWrGqGWggWAdQzp3RhZwpE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.79.48.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:f1:a7:03:3b:03:b4:80:f9:af:b8:8b:9c:06:9f:07:ac:e2:
b0:1a:19:9a:0a:fb:96:52:7b:e2:01:68:9d:4b:4d:80:50:42:
d8:19:9c:2e:3a:62:36:03:4f:70:31:f9:1b:6c:56:30:5e:1a:
e7:9b:fa:e4:6c:68:88:68:89:cb:18:c0:9f:51:f6:e1:58:7f:
ea:0d:68:3d:b5:90:f2:87:ed:40:d2:62:27:21:cf:b2:ad:8e:
02:63:90:22:c0:d0:7b:90:aa:64:76:e0:07:3d:9f:8a:aa:89:
36:78:57:08:57:bb:f1:ce:f4:b8:a6:a6:33:06:3b:3e:c3:7f:
2d:c4:18:b0:22:e5:69:52:c3:4d:26:09:c2:c2:1f:b9:ae:09:
63:02:34:ec:ed:c6:99:5f:32:de:49:16:04:9c:b2:59:a5:d3:
75:ab:0f:eb:cc:3d:3b:a7:a9:11:11:49:d4:65:94:d1:aa:a0:
a6:a6:87:80:67:f0:67:a9:93:2b:b2:a3:7d:45:8b:c4:c7:35:
7a:d1:c7:b9:86:2a:70:be:0c:30:2d:5f:c2:52:26:54:27:66:
27:2b:bd:e8:e7:2b:c9:e1:18:c8:87:3f:85:62:fc:30:14:db:
0a:ee:cc:00:1e:bc:5d:61:49:26:4b:db:e4:3b:00:61:54:41:
37:08:97:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org