Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/PsnhUpeCGr7mAoHo68ra5kW-oG8.roa
File: PsnhUpeCGr7mAoHo68ra5kW-oG8.roa (raw, json)
Hash identifier: eifIAECIw8qSIZ8nqU51gRKxBQlcLw60digyyen0/mU=
Subject key identifier: 3E:C9:E1:52:97:82:1A:BE:E6:02:81:E8:EB:CA:DA:E6:45:BE:A0:6F
Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial: 0B37
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/PsnhUpeCGr7mAoHo68ra5kW-oG8.roa
Signing time: Fri 01 Sep 2023 09:34:45 +0000
ROA not before: Fri 01 Sep 2023 09:34:45 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4781
IP address blocks: 210.63.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2871 (0xb37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Validity
Not Before: Sep 1 09:34:45 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3EC9E15297821ABEE60281E8EBCADAE645BEA06F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:62:1c:e0:9e:dd:13:63:e1:25:a7:16:60:4c:
8a:e0:56:d7:10:62:29:5c:16:cc:a5:4c:ac:59:09:
68:0c:4c:c0:23:5b:90:d5:78:d9:95:0a:37:67:37:
73:4a:93:70:89:73:d7:2b:d6:0e:f9:52:65:92:26:
0a:54:5f:e8:3a:f6:c9:ca:e1:92:37:63:df:da:6d:
a2:99:1f:02:f9:27:f3:0a:ee:e5:e3:89:a2:6d:5d:
1b:fd:51:92:16:96:91:75:af:22:5d:67:08:8c:ee:
d7:06:c1:98:72:39:3a:57:ed:fa:fd:5d:b2:92:a6:
d6:b0:70:df:0e:42:44:a2:fb:4c:0a:d8:9a:7d:2a:
82:11:47:06:30:72:16:a5:3e:9d:0f:74:9f:e2:82:
09:42:84:f6:52:7d:01:ea:b1:68:31:75:b8:22:0f:
c4:62:94:c4:6f:97:db:af:c9:d1:17:0e:50:8d:e6:
16:bf:9b:b5:a3:7d:c8:87:4b:37:8a:75:9b:a8:4a:
61:af:fa:33:39:63:09:c6:42:56:5e:85:26:03:f3:
b1:07:12:58:62:4e:63:86:6f:f7:fc:9a:99:4b:b5:
72:9a:5d:08:18:f1:2b:e4:12:77:1d:68:ba:90:1d:
b7:19:7f:b2:68:d3:de:15:c1:69:7f:91:d5:c9:81:
43:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C9:E1:52:97:82:1A:BE:E6:02:81:E8:EB:CA:DA:E6:45:BE:A0:6F
X509v3 Authority Key Identifier:
keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/PsnhUpeCGr7mAoHo68ra5kW-oG8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.100.0/24
Signature Algorithm: sha256WithRSAEncryption
05:ec:7f:67:45:58:fe:e1:a8:49:16:63:18:d1:26:59:93:a4:
bc:aa:56:ef:2f:65:e2:07:f9:99:4f:33:9e:e7:a1:9a:e7:00:
70:e8:8e:76:71:2e:48:d1:c8:22:b1:a4:41:43:89:f1:01:4a:
49:c5:19:ca:81:1f:43:cb:da:56:34:cf:6d:6f:5a:34:f8:9a:
f4:e6:f2:6f:78:04:d3:9f:07:6a:99:c2:b2:c3:bc:37:7e:67:
73:7a:4b:da:37:24:3d:d9:05:79:6a:d8:50:63:63:19:23:4a:
26:69:ea:52:4b:33:d3:f9:21:95:be:09:74:72:a8:8a:78:43:
26:60:f8:48:f0:95:d0:f0:a3:0a:7e:62:74:9f:4b:cd:1b:44:
f7:27:4f:d2:24:ec:91:ce:f1:32:6f:f8:72:24:68:82:29:3b:
f3:95:95:9e:b7:84:e3:69:b2:8e:fb:86:7d:20:dc:ec:a3:9c:
f9:c5:ea:0e:5f:fd:b5:b1:ef:90:fb:a3:0f:59:ec:4c:45:4f:
f5:be:7e:08:a6:b8:f0:13:6f:5f:2b:44:a8:6b:ac:9e:7d:bc:
5d:86:a7:c6:b4:77:1a:db:c6:36:04:f0:89:b5:f6:e3:b2:46:
9d:b6:96:72:59:00:75:b6:8a:12:f6:5f:c3:be:24:c6:e5:e3:
11:cc:21:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org