Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/8-RSoZ_YXsEhSRiVKg25CtoYiIY.roa
File: 8-RSoZ_YXsEhSRiVKg25CtoYiIY.roa (raw, json)
Hash identifier: KgbEYi2C72e0zw8eQR0XTfi1LXA97kW2S03qtCSBE7I=
Subject key identifier: F3:E4:52:A1:9F:D8:5E:C1:21:49:18:95:2A:0D:B9:0A:DA:18:88:86
Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial: 0B34
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/8-RSoZ_YXsEhSRiVKg25CtoYiIY.roa
Signing time: Fri 01 Sep 2023 09:34:44 +0000
ROA not before: Fri 01 Sep 2023 09:34:44 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17420
IP address blocks: 211.73.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2868 (0xb34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Validity
Not Before: Sep 1 09:34:44 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F3E452A19FD85EC1214918952A0DB90ADA188886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:ca:be:b5:72:61:ae:92:0d:1b:4c:82:b9:
dc:81:77:78:ce:5c:8d:37:6d:d5:8b:d5:d2:42:86:
0a:91:7c:86:9d:04:cb:b3:50:ac:f9:33:d3:5e:79:
7f:fb:56:33:be:02:36:c7:f2:0f:c9:af:e9:88:17:
df:e3:5e:87:e8:dd:3f:d8:73:a1:4e:d0:18:10:43:
12:3c:f7:0f:2c:34:be:ca:77:7e:d3:30:43:ae:ba:
29:db:75:74:f4:27:80:3b:12:b6:9b:e1:8b:81:2b:
8d:ee:7e:c7:16:e1:9b:c9:7a:a6:ed:7a:fe:15:63:
e0:1d:3a:5d:9b:1d:f4:10:bb:dc:05:4e:11:b6:7b:
46:30:fc:1a:29:86:d3:22:28:3d:3a:1b:6d:77:cf:
ea:2e:71:84:63:66:a1:7e:75:68:e3:0f:13:56:68:
57:59:63:f9:75:23:84:87:8d:ac:bb:c2:a8:a7:18:
0e:aa:88:a1:d5:b6:da:c3:29:e5:9b:69:b5:3a:db:
91:4e:11:68:b4:ef:12:30:8e:ae:63:dc:ac:93:97:
b2:55:8a:8a:6b:51:99:5c:ed:40:0f:47:52:54:5e:
96:da:2d:6f:77:8a:22:34:1b:c9:86:22:c0:31:bf:
72:52:32:e0:4f:e6:5b:d9:c0:c5:76:df:4d:12:e4:
bc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E4:52:A1:9F:D8:5E:C1:21:49:18:95:2A:0D:B9:0A:DA:18:88:86
X509v3 Authority Key Identifier:
keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/8-RSoZ_YXsEhSRiVKg25CtoYiIY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.73.224.0/19
Signature Algorithm: sha256WithRSAEncryption
24:2e:8d:14:59:e7:c2:e3:fc:f0:e3:ba:f3:4b:a8:37:52:1a:
4b:23:d3:22:4a:ff:59:17:ee:96:3b:0b:7d:db:f3:ef:eb:7d:
a9:5c:36:4f:60:9a:37:28:2d:39:79:1f:5e:92:65:05:1a:b1:
60:b6:40:0b:be:fb:78:3c:e5:8e:e6:19:9a:7d:9f:14:69:6f:
9e:cc:bc:57:6e:95:01:75:cb:1b:a6:87:b5:b8:34:d9:fa:e7:
fb:9d:39:7c:81:3d:a0:fe:03:e2:a4:fc:6c:cb:69:71:1b:81:
01:7f:b5:53:65:b5:7f:e5:cb:cd:95:ce:fc:e5:8b:dc:60:5d:
60:b2:c0:e4:7e:71:40:9c:6d:03:75:77:77:5d:77:10:1a:20:
f1:f4:2d:b4:b0:14:ab:ce:a7:84:d4:15:22:b6:04:e2:32:2e:
0b:97:20:8b:d9:f9:0c:00:98:b3:c8:cb:d0:69:9d:1e:b2:2b:
3f:2f:07:d9:68:5f:da:d8:c1:77:32:e3:25:a9:8b:30:8c:5d:
36:93:67:b4:ef:2e:67:3f:06:53:7b:6e:76:63:b0:ef:66:df:
aa:96:2d:5b:28:cd:c9:62:0e:0d:f7:e2:1a:95:d9:d0:48:19:
51:cb:f0:15:51:55:2b:6c:b2:78:dc:24:3d:da:27:24:4e:74:
95:6a:ea:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org