Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PIINET/Z134V77ziNX1USE4fc_7iQfFMSI.roa
File: Z134V77ziNX1USE4fc_7iQfFMSI.roa (raw, json)
Hash identifier: HFH8Z0vsMLN3TsazKTXPhuff9E6NaSEpNUIqJPeh9AQ=
Subject key identifier: 67:5D:F8:57:BE:F3:88:D5:F5:51:21:38:7D:CF:FB:89:07:C5:31:22
Certificate issuer: /CN=69797BDE8D0581FA299D8E1420ED2957C4208A07
Certificate serial: 0B12
Authority key identifier: 69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/Z134V77ziNX1USE4fc_7iQfFMSI.roa
Signing time: Fri 01 Sep 2023 09:35:53 +0000
ROA not before: Fri 01 Sep 2023 09:35:53 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17710
IP address blocks: 150.107.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2834 (0xb12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69797BDE8D0581FA299D8E1420ED2957C4208A07
Validity
Not Before: Sep 1 09:35:53 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=675DF857BEF388D5F55121387DCFFB8907C53122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:14:a9:d9:c5:94:cb:78:be:70:26:1b:f3:bd:
00:50:7f:fc:f1:68:a0:4e:ce:62:22:ef:81:04:36:
11:cd:c3:66:9c:f0:61:b3:c6:53:b1:d1:84:80:c1:
09:fa:78:98:c1:00:c5:2c:fb:20:0a:a8:3f:e7:45:
31:34:fb:05:a6:a2:e8:d1:18:3c:f7:ab:08:ac:3f:
6e:2a:ad:36:4e:99:69:ef:1f:48:60:aa:0c:f9:d6:
7a:44:d3:db:95:3f:8f:d9:e1:88:1e:7f:14:9d:91:
67:3d:b3:91:a5:44:6e:50:ea:bb:c6:68:1c:ef:97:
36:65:c0:7e:00:fd:0e:cf:25:c0:d6:0d:2b:4f:36:
2d:03:04:8a:a0:12:37:bd:0d:5d:03:2f:dc:78:b8:
20:11:66:88:69:c6:ec:00:0d:de:6d:c6:1d:6c:2c:
41:d5:79:91:68:b2:d9:47:7a:81:cc:59:48:46:6a:
78:ca:8a:5a:83:da:5e:4b:1b:68:89:f0:69:80:fc:
4d:b5:1a:47:00:c4:b5:bf:12:c4:ea:68:97:de:8f:
9b:6e:2d:61:45:80:ab:bd:0d:bf:e4:e3:42:a9:33:
c1:58:80:3e:a0:41:5d:4d:c5:10:3a:81:ba:1a:32:
46:4a:d7:4f:c5:ec:f7:72:96:a7:2a:41:f9:fb:02:
1e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5D:F8:57:BE:F3:88:D5:F5:51:21:38:7D:CF:FB:89:07:C5:31:22
X509v3 Authority Key Identifier:
keyid:69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/Z134V77ziNX1USE4fc_7iQfFMSI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.107.64.0/22
Signature Algorithm: sha256WithRSAEncryption
86:04:bb:fa:61:e3:3a:de:7e:a1:e6:00:58:a8:b1:17:c3:9b:
fa:0a:96:88:44:67:d0:3b:81:71:71:08:97:e9:0e:0e:ec:c2:
b1:4f:8e:3a:36:68:3e:b5:81:15:15:bd:5d:7d:6b:33:57:ce:
11:c8:0f:aa:76:28:af:ae:64:8d:8a:5d:55:e9:d2:e2:9e:94:
85:09:a2:37:13:08:b6:43:ba:30:5a:c2:6a:38:e9:41:40:20:
86:e6:0d:fc:95:d5:8c:58:ab:d6:c3:85:49:a9:c1:3a:4f:57:
5e:f1:6d:cd:60:ce:ad:8f:20:36:78:1e:e9:40:32:58:1f:7b:
30:b4:ef:ce:4d:e8:0e:a7:57:cf:8f:7f:8c:cd:7a:2b:a9:1a:
6c:c4:bb:dd:a1:7c:c0:a6:77:37:0a:0d:a4:4d:dc:86:0b:46:
b0:ef:f2:1a:15:bd:b4:eb:5e:b6:2a:10:85:a0:ac:ec:7b:61:
05:09:87:e9:1e:24:f3:aa:6f:d5:de:aa:63:15:b4:a0:70:08:
79:0a:87:16:ad:9b:71:19:11:58:e1:9f:d1:d5:be:d4:44:c8:
ba:1a:c2:53:24:75:07:1a:1e:4a:64:6a:4a:52:b8:38:5d:cb:
8b:67:9a:92:bf:e2:15:1f:2d:b5:d7:6d:c2:e7:a1:08:f8:b8:
d0:28:86:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org