Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/n7GZW0WS3ohBl7k7i1Yuf29FiZk.roa
File: n7GZW0WS3ohBl7k7i1Yuf29FiZk.roa (raw, json)
Hash identifier: AW9Mz4J0K9coCDignZBxVDdLqBRpI1gxqPGyWJiiP+o=
Subject key identifier: 9F:B1:99:5B:45:92:DE:88:41:97:B9:3B:8B:56:2E:7F:6F:45:89:99
Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial: 0B3A
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/n7GZW0WS3ohBl7k7i1Yuf29FiZk.roa
Signing time: Fri 01 Sep 2023 09:34:45 +0000
ROA not before: Fri 01 Sep 2023 09:34:45 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4781
IP address blocks: 210.63.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2874 (0xb3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Validity
Not Before: Sep 1 09:34:45 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9FB1995B4592DE884197B93B8B562E7F6F458999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0c:40:3a:19:4b:b4:d1:ef:be:0d:ab:13:f6:
c5:08:9b:f4:58:49:8d:ce:24:6d:d1:4a:26:09:1c:
d0:f9:d6:f2:22:fd:f1:bc:99:3f:76:23:89:e0:74:
e8:a7:f7:cb:6d:55:fa:ff:3a:ea:b8:6e:df:e4:d1:
89:c6:80:28:ef:43:0b:09:cf:58:fd:25:d2:5f:fb:
cb:6a:99:88:1d:d9:0c:1e:16:5b:73:c6:84:f5:34:
8e:b8:6a:50:99:7a:01:e8:42:8a:d4:5c:fd:75:8b:
8d:0d:6c:25:94:cc:cb:71:92:c2:9a:2b:22:a4:8a:
00:27:4d:c9:ea:4b:22:59:76:9d:c9:2a:b6:1e:37:
a1:ae:33:ee:ea:91:dd:44:d5:31:8c:66:e2:a1:6b:
eb:6c:8b:b0:cc:45:9b:9e:16:bd:f3:c0:bd:a3:bc:
24:52:a3:b2:72:92:c1:f0:be:4f:b9:b2:65:83:26:
5e:1d:91:ee:25:dc:f0:c0:a4:04:e5:aa:08:54:07:
80:57:0e:9a:52:0c:0d:08:94:01:23:20:9d:41:d5:
4e:08:60:12:b4:fa:47:8a:c4:21:4e:3c:c4:55:37:
3f:99:77:f7:eb:f6:a0:d4:ef:0d:96:79:23:b0:a2:
9a:f0:d0:8c:ef:71:1e:6f:12:ce:c7:f3:f0:a9:6c:
db:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B1:99:5B:45:92:DE:88:41:97:B9:3B:8B:56:2E:7F:6F:45:89:99
X509v3 Authority Key Identifier:
keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/n7GZW0WS3ohBl7k7i1Yuf29FiZk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.102.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:b1:a1:6c:f9:13:f3:74:1d:a0:ec:2c:d6:1e:18:2c:af:a7:
18:66:cd:98:3d:01:92:d9:74:94:59:20:b5:d0:4a:c4:89:30:
97:c4:b8:d5:37:82:05:77:33:9d:c8:97:43:c6:8c:44:2c:24:
9f:5b:da:d0:3a:d7:1e:c7:21:2f:b0:e1:cd:ac:07:c6:10:25:
30:5e:f6:ec:ab:38:3e:93:b3:16:c1:41:f9:a2:e6:f0:02:be:
a7:20:92:14:33:f1:df:59:5c:ae:64:32:6b:7b:d3:9a:82:64:
e6:ec:1d:7d:02:1d:26:7f:4c:1b:64:96:84:a4:c7:d6:c9:c2:
46:10:b6:c3:cb:0d:3b:3c:39:54:83:4e:50:78:7d:db:19:93:
90:5e:1b:65:b3:cb:95:07:27:40:af:3c:b4:3c:b6:85:48:a1:
a3:2d:dc:0e:5a:ba:06:f0:86:30:99:2a:83:f5:0d:5d:95:42:
33:45:9e:f9:e1:db:79:88:61:9a:50:ad:b3:09:2f:97:b7:de:
83:7b:f5:91:ce:ea:a1:9f:74:19:e7:21:25:7e:2d:58:6d:01:
6d:7b:0d:b1:21:de:f1:cb:b4:2d:81:76:c4:eb:8c:9b:16:b8:
49:d9:72:2f:21:03:b9:c3:15:24:77:88:f6:00:eb:d0:3e:8a:
a1:49:d9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org