Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/Y_N-zbY_OBlYe3d3vG-Ue9s_0VE.roa
File: Y_N-zbY_OBlYe3d3vG-Ue9s_0VE.roa (raw, json)
Hash identifier: BtjhMJRA7jncX6aaoE44WRsz0D2FZqX6EaOo3YMlmfc=
Subject key identifier: 63:F3:7E:CD:B6:3F:38:19:58:7B:77:77:BC:6F:94:7B:DB:3F:D1:51
Certificate issuer: /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Certificate serial: 580D
Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/Y_N-zbY_OBlYe3d3vG-Ue9s_0VE.roa
Signing time: Fri 01 Sep 2023 09:33:49 +0000
ROA not before: Fri 01 Sep 2023 09:33:49 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38851
IP address blocks: 43.227.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22541 (0x580d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Validity
Not Before: Sep 1 09:33:49 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=63F37ECDB63F3819587B7777BC6F947BDB3FD151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:47:49:64:f5:f4:16:09:d6:a7:6c:9c:8b:22:
e1:ca:29:0e:f5:09:4d:13:2a:6b:28:12:8d:ba:93:
1f:00:43:04:af:27:6b:77:2a:e6:5a:4c:94:35:02:
20:2b:07:58:13:08:2e:8b:00:f5:98:41:10:48:88:
41:f6:d9:83:04:00:bb:2b:87:e1:43:52:bb:d5:63:
a2:1d:b4:45:41:95:41:6b:96:6b:ec:90:dc:92:d5:
74:2d:b3:b4:87:f9:a7:15:eb:02:f4:94:9d:1b:81:
5f:1a:ad:04:56:b5:b4:e9:33:c3:2d:a7:9d:c7:53:
aa:e6:ab:8e:8b:28:24:f5:14:61:48:a7:b7:3d:0c:
e3:a6:dc:fd:b1:63:b4:77:51:62:81:d5:06:e8:de:
05:5f:43:7b:7b:b9:8f:85:92:f9:4b:8c:4f:44:b5:
c7:c3:e1:70:e1:8f:05:bd:75:e4:76:8d:cd:45:67:
63:04:d2:89:76:39:1c:b9:ac:2a:b1:8b:c8:da:03:
71:17:e4:11:a1:ba:09:a0:63:06:b9:d8:ec:8d:f2:
c9:68:58:23:f5:b5:0e:ae:f2:7d:6c:bf:57:db:52:
2b:62:3c:26:0b:c0:da:e4:ab:4b:26:1e:f1:65:8b:
e2:16:db:42:25:41:6f:e2:30:62:31:14:c0:35:5d:
6b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F3:7E:CD:B6:3F:38:19:58:7B:77:77:BC:6F:94:7B:DB:3F:D1:51
X509v3 Authority Key Identifier:
keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/Y_N-zbY_OBlYe3d3vG-Ue9s_0VE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.227.24.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:16:36:8c:57:fb:56:fd:88:4d:9c:0a:6e:7d:6c:d8:32:00:
0b:a1:3c:ad:98:67:69:91:97:16:04:3e:74:d3:94:b7:d5:ce:
36:dd:77:26:47:cd:80:4a:24:1a:5c:e7:58:ab:d6:f5:93:3e:
79:5e:36:db:0f:23:e0:3f:bd:05:89:63:48:73:80:96:12:f0:
06:1f:40:45:e0:8d:28:ac:90:b8:3a:f1:7e:d7:af:30:d0:03:
0f:a9:c9:eb:3f:82:e0:f9:a5:45:07:19:21:9f:42:ed:e7:eb:
a7:87:7e:e7:e7:5d:7c:6c:c8:98:21:40:dd:bb:99:1f:ea:c7:
d8:7b:d1:94:aa:21:f8:f5:5e:45:df:ce:8a:e8:91:46:2e:26:
6a:6a:f8:f8:fa:f0:04:c6:6d:05:1f:68:c0:0f:74:5c:8a:42:
92:07:3f:e7:20:14:42:2c:46:0f:9a:1e:6e:f7:f6:79:b6:7b:
c3:03:22:26:1e:e6:a1:4c:7c:ed:0d:ca:20:8f:5b:c6:0e:de:
6b:d9:9c:96:c8:5c:4e:f7:c7:08:2f:73:6a:2a:6f:7e:07:07:
d6:a4:f7:4e:a2:9e:da:84:aa:b8:5d:89:41:6a:82:88:7d:d1:
65:8d:4e:a2:f3:68:92:2e:d8:c2:6b:cb:1b:1f:dc:2f:f7:c1:
3c:08:ed:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org