Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/mXgHq40CYwOA1W67Zz96hjbG1MA.roa
File: mXgHq40CYwOA1W67Zz96hjbG1MA.roa (raw, json)
Hash identifier: 0YCn5ZKuV0elSXYatY+SDLTai6ePcFYlaG+iaIFS6yU=
Subject key identifier: 99:78:07:AB:8D:02:63:03:80:D5:6E:BB:67:3F:7A:86:36:C6:D4:C0
Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial: 0B33
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/mXgHq40CYwOA1W67Zz96hjbG1MA.roa
Signing time: Fri 01 Sep 2023 09:34:44 +0000
ROA not before: Fri 01 Sep 2023 09:34:44 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17420
IP address blocks: 210.241.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2867 (0xb33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Validity
Not Before: Sep 1 09:34:44 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=997807AB8D02630380D56EBB673F7A8636C6D4C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:18:d9:19:b5:eb:0a:d4:86:bd:4a:23:f8:85:
0e:ab:a1:0d:df:31:da:7a:69:d2:2a:6e:a4:ac:55:
bb:c8:4e:38:c1:8c:56:54:f2:58:c4:17:3e:11:5f:
82:90:c1:2a:9a:8e:6e:7f:2d:fd:ac:ca:1b:cb:77:
f2:9a:0d:d5:81:91:82:ef:fa:b7:9f:81:24:d3:2b:
77:a4:c3:05:97:fb:15:f4:06:d5:33:3d:d9:09:14:
c2:83:9a:17:7c:72:ed:fe:d0:db:7b:fd:ff:64:a9:
3e:64:82:fe:7d:1c:8c:f0:32:cf:d5:47:46:b7:84:
30:7c:b7:cf:4f:1d:57:7a:61:72:fd:5c:ad:ab:b0:
f9:16:ee:e6:3c:fb:93:13:8b:bd:22:ea:10:65:c4:
e5:e5:4e:af:1f:8e:ae:86:f1:96:a6:b5:4d:c8:2f:
b6:5e:d6:f5:cf:95:fb:0c:be:52:e7:80:82:96:fe:
05:4d:03:cd:8e:a8:0c:4b:23:c0:58:46:f0:18:62:
1c:87:87:f3:d8:16:46:50:2f:9f:10:4f:fb:16:a7:
91:2c:1e:04:51:d3:40:7e:02:65:55:ce:1c:3d:02:
14:ee:13:56:d9:aa:04:d2:cf:be:2c:41:81:a9:e3:
1e:22:4b:45:d9:cb:08:75:f8:f8:aa:c0:5d:b8:8a:
f6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:78:07:AB:8D:02:63:03:80:D5:6E:BB:67:3F:7A:86:36:C6:D4:C0
X509v3 Authority Key Identifier:
keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/mXgHq40CYwOA1W67Zz96hjbG1MA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.241.128.0/19
Signature Algorithm: sha256WithRSAEncryption
a6:46:c5:84:f8:00:a2:da:ad:3f:54:a6:aa:03:ab:71:14:89:
82:62:b5:66:0c:1b:60:15:bd:51:f0:84:81:df:ed:60:c6:7b:
da:7b:a4:ac:ff:bb:57:c5:2f:71:7b:6b:96:59:b5:eb:d4:8a:
cd:1c:1d:0f:8c:9c:f0:a1:c6:98:e2:02:28:5a:6f:36:86:4a:
51:68:0a:a3:5d:35:7b:ab:6f:e5:36:c7:e7:5b:8b:8f:0b:99:
41:67:fe:8f:e3:af:73:68:38:64:b6:38:3d:16:b0:a8:3d:15:
73:15:86:a3:cf:d3:cd:ba:59:f9:ca:53:54:9a:11:c8:4d:5c:
38:a8:72:97:3b:d6:a4:2c:0e:1b:e9:7b:ad:0b:6d:98:f8:aa:
a9:c8:ac:9d:72:c4:40:72:2f:97:62:2d:48:ab:1f:bc:b6:ff:
ae:3d:d9:2e:58:a2:e1:de:a1:cf:c7:28:71:db:4a:83:7e:39:
2f:23:68:55:40:d3:d0:be:71:96:52:52:dc:90:b6:45:54:6f:
77:d0:6c:cc:db:2f:fb:7c:5c:20:35:eb:59:1b:54:4d:f4:7f:
98:b9:fd:74:ee:81:01:d1:74:e9:d7:14:44:f1:1e:ea:7e:c2:
98:39:b5:00:0d:7a:9b:52:d8:44:cd:f3:fd:da:6a:94:ab:75:
d5:ce:de:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org