Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/Ino7OsFMPgdLCjO2S9S4RpDGr7I.roa
File: Ino7OsFMPgdLCjO2S9S4RpDGr7I.roa (raw, json)
Hash identifier: uSfTmoJbaTNaWqXh4yTcswKEyowPWyG3clUC+qeESiU=
Subject key identifier: 22:7A:3B:3A:C1:4C:3E:07:4B:0A:33:B6:4B:D4:B8:46:90:C6:AF:B2
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0CC3
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/Ino7OsFMPgdLCjO2S9S4RpDGr7I.roa
Signing time: Fri 01 Sep 2023 09:39:43 +0000
ROA not before: Fri 01 Sep 2023 09:39:43 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38843
IP address blocks: 223.27.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3267 (0xcc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Sep 1 09:39:43 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=227A3B3AC14C3E074B0A33B64BD4B84690C6AFB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8a:ff:e8:de:bc:64:bc:a4:a8:b9:ef:d3:c9:
bc:59:9c:c8:60:ed:bd:de:21:44:10:76:c6:54:e6:
aa:6a:a7:ec:7b:21:40:6e:db:23:16:89:80:df:f2:
24:28:26:d7:0b:39:86:11:4e:a3:b8:90:f2:e2:c0:
3c:c8:e1:c8:60:84:a1:38:af:43:6e:39:ca:2d:09:
a1:ea:0c:39:42:f7:b6:11:b1:18:3e:b9:b0:58:d5:
ef:f6:af:54:d8:1f:b6:a8:6c:57:10:24:36:91:b8:
32:c5:e5:eb:53:96:98:bc:b8:2a:cd:88:c9:33:61:
d4:23:73:f8:24:f6:0b:62:64:ff:c6:de:a7:19:71:
3c:2e:48:c0:43:76:95:46:f9:da:29:b6:1f:32:a6:
51:e3:e2:80:70:da:aa:45:80:e6:21:60:54:be:32:
18:6a:2d:8c:d6:17:81:81:2f:85:d9:82:df:05:ea:
b5:06:f1:d5:64:b6:d5:38:3c:9c:1c:a7:a3:88:ba:
a7:87:7b:ce:b5:a3:e7:ca:d0:d0:73:6f:eb:d9:01:
1a:62:4c:d7:b4:d7:c5:7f:6f:35:d9:31:4c:96:78:
94:5d:1b:86:f2:13:62:46:ce:64:8c:ea:d1:28:e3:
bc:7c:80:cb:ce:3e:46:0c:56:cc:20:a8:21:55:56:
af:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7A:3B:3A:C1:4C:3E:07:4B:0A:33:B6:4B:D4:B8:46:90:C6:AF:B2
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/Ino7OsFMPgdLCjO2S9S4RpDGr7I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.49.0/24
Signature Algorithm: sha256WithRSAEncryption
10:00:ca:95:f9:a6:95:a0:15:5f:d4:be:35:3e:34:f7:0a:bc:
b0:f9:8e:de:e7:4a:1b:d5:7f:d8:27:78:47:85:e7:95:35:d6:
86:d3:a1:bb:b1:cf:ed:ba:8d:ff:07:e2:62:b7:7e:a6:7e:1a:
eb:3b:66:2e:8e:75:23:ac:6f:a0:73:99:f5:1f:70:e7:8b:6a:
2c:bd:0e:48:2b:03:9c:e0:89:62:55:25:af:10:b8:05:73:b4:
63:47:ae:16:ec:fc:a5:3a:2d:ad:c2:04:b2:be:94:47:8e:7f:
13:6a:ef:d8:df:a0:d0:10:77:00:58:d4:ef:d5:95:be:99:aa:
6b:55:90:94:3e:08:03:be:e4:7d:ad:de:28:b4:40:05:2b:fa:
24:c9:d4:be:ed:d8:44:f4:f0:1f:88:47:23:0b:71:a1:6f:ca:
a2:3e:98:a1:1f:a1:bc:2d:b9:99:b3:5a:ee:56:68:cf:8b:ac:
9a:52:ad:6c:a8:02:57:e5:ae:e8:35:39:ea:b6:db:13:54:de:
85:96:fa:f5:d3:f1:56:6d:0f:55:d6:6a:17:97:cb:01:25:8c:
c5:ba:43:f1:ef:4f:87:3c:b7:a2:d8:b8:4b:72:56:af:85:f6:
6e:d6:74:2c:ce:d2:3e:8c:3a:e2:e5:8b:9e:7e:77:ef:8e:21:
6f:91:1e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org