Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/Y1SmXUHUSohiPQt9khgpeqYi8oE.roa
File: Y1SmXUHUSohiPQt9khgpeqYi8oE.roa (raw, json)
Hash identifier: cUQ5sSwtnzSjjm2jOZ5MAfb14CYovm/nYQx2DBIXBhM=
Subject key identifier: 63:54:A6:5D:41:D4:4A:88:62:3D:0B:7D:92:18:29:7A:A6:22:F2:81
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0CC5
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/Y1SmXUHUSohiPQt9khgpeqYi8oE.roa
Signing time: Fri 01 Sep 2023 09:39:44 +0000
ROA not before: Fri 01 Sep 2023 09:39:44 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38843
IP address blocks: 223.27.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3269 (0xcc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Sep 1 09:39:44 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6354A65D41D44A88623D0B7D9218297AA622F281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0b:43:34:af:bb:41:33:34:5c:17:42:cf:19:
f7:6b:c8:88:25:b4:0a:24:96:50:3c:01:53:cb:56:
fa:3f:96:3d:3c:29:e5:8e:5f:1b:3d:1c:e5:c2:0a:
3e:d1:97:18:f3:6d:69:1b:47:2b:1f:e6:3f:f7:a7:
0b:d8:04:29:20:df:0d:57:9c:40:de:bd:fc:9e:cf:
66:10:2f:3e:b2:4c:89:44:b0:5d:2b:4e:83:1b:64:
8b:8a:7d:a1:dc:0e:18:ef:61:c1:7e:ef:d9:95:1f:
79:0f:cb:10:75:9b:c1:4e:07:00:ef:b3:48:fc:f4:
75:5b:ec:45:29:26:b5:47:c5:94:29:6a:2d:b1:e6:
51:c0:de:ab:b8:79:a4:6d:b5:3e:13:0b:e9:48:2a:
f6:35:40:ca:1a:99:e2:c7:c9:a8:57:84:f9:ba:c1:
ec:f6:54:7a:3b:cb:9f:65:1f:99:37:e1:e5:4c:78:
80:9c:87:e6:78:6e:c4:dd:9d:91:65:9b:f3:1c:f9:
a6:1d:c5:69:20:e7:ba:51:66:13:d8:74:9d:d9:cf:
4c:24:d5:ac:d7:ad:8d:de:b9:64:46:55:c5:56:cc:
e3:21:8f:cf:b2:00:9e:a0:59:b3:d8:10:90:9f:62:
7f:52:b4:f6:db:da:a8:7d:a8:5f:5b:26:f0:a2:22:
d4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:54:A6:5D:41:D4:4A:88:62:3D:0B:7D:92:18:29:7A:A6:22:F2:81
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/Y1SmXUHUSohiPQt9khgpeqYi8oE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.55.0/24
Signature Algorithm: sha256WithRSAEncryption
82:fe:45:7b:38:d1:ba:ad:ef:41:e3:3f:fe:0e:a9:4b:f5:70:
08:54:b8:8b:de:70:7b:f0:25:87:15:6f:54:20:ba:dc:77:2c:
12:63:cc:84:98:62:20:af:68:5d:13:33:62:ca:5c:af:3b:c7:
1e:99:3f:98:90:ae:92:3d:cd:c9:f4:35:dd:c6:d0:20:49:68:
08:fe:16:90:d2:a9:b0:b4:15:0a:0c:ce:8d:5a:34:60:11:f7:
5a:2e:ee:16:7d:e2:80:a4:b9:c7:7c:c0:29:6c:86:a4:f9:fd:
e4:0e:b3:78:62:5e:39:6e:af:2d:91:70:50:fa:af:f8:58:3d:
79:f8:70:40:78:89:36:53:66:74:d8:e5:15:33:e4:6e:51:c4:
c7:73:81:82:d5:1c:1c:53:cb:d4:bd:7a:bf:43:d8:a2:02:7f:
05:26:29:0c:60:47:1a:0f:fe:f4:f9:06:de:3a:81:4e:3b:b8:
29:bd:1d:6c:9b:4f:1d:be:98:e9:19:73:5a:13:61:d1:e0:57:
90:dc:f9:f6:fb:2c:92:5d:47:45:35:9e:91:13:62:c3:f6:f4:
5a:e6:cb:b1:a4:49:39:f3:8c:24:58:0a:dc:7e:ad:54:e9:36:
9b:69:a4:d2:4a:9e:0a:b7:b0:05:af:ac:70:6c:c8:c7:56:38:
80:fa:ef:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org