Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/yWZO2AwQALbcIy77MoCsiRVrNnU.roa
File: yWZO2AwQALbcIy77MoCsiRVrNnU.roa (raw, json)
Hash identifier: rveaSx+3C9vn+1KMi02VtdyLkO95KgRwyN5uGknv/1o=
Subject key identifier: C9:66:4E:D8:0C:10:00:B6:DC:23:2E:FB:32:80:AC:89:15:6B:36:75
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0CC9
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/yWZO2AwQALbcIy77MoCsiRVrNnU.roa
Signing time: Fri 01 Sep 2023 09:39:46 +0000
ROA not before: Fri 01 Sep 2023 09:39:46 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38843
IP address blocks: 223.27.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3273 (0xcc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Sep 1 09:39:46 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C9664ED80C1000B6DC232EFB3280AC89156B3675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:90:31:c1:56:2d:62:c1:ef:e6:77:55:5b:d4:
89:81:c6:11:a3:3c:a2:79:90:38:f5:73:3a:c3:89:
97:41:14:38:cf:3f:a7:c2:9e:cf:52:9c:49:36:2c:
28:b1:03:71:f3:f8:0a:b7:9e:7a:91:98:dd:28:1b:
e8:41:ec:d4:e8:6c:6a:b9:c7:c0:b7:f2:fb:80:2d:
b9:99:b8:2d:73:87:ec:24:32:6b:8f:97:b8:6e:b4:
a4:1a:8d:ed:4b:c4:76:bf:a9:e2:a9:fd:f4:80:93:
97:34:a0:e9:36:44:e4:a3:6f:f9:0c:bf:ea:e4:36:
53:83:b1:32:59:b9:14:e9:dd:bf:52:7a:3d:90:cc:
cc:f3:43:55:89:bf:3a:da:9f:af:30:07:b8:33:75:
a3:6d:95:12:bc:61:86:70:f7:f0:3e:fa:e5:ef:86:
a2:39:e5:8c:85:6f:10:1d:e7:c0:98:3b:5e:ab:bb:
21:2d:43:52:b2:ef:6b:18:9c:5a:7b:68:7c:e4:7b:
4b:79:d7:60:ad:d1:0b:40:34:35:c3:14:50:8c:40:
65:96:07:6e:54:c3:de:13:8e:5f:16:a1:f6:21:1a:
38:bf:c7:82:be:2c:60:e1:93:e3:75:8d:c6:8c:bb:
17:30:02:76:e6:ab:ed:62:f0:b6:7a:cd:5f:57:5b:
f4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:66:4E:D8:0C:10:00:B6:DC:23:2E:FB:32:80:AC:89:15:6B:36:75
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/yWZO2AwQALbcIy77MoCsiRVrNnU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.38.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:05:fb:6f:05:ee:57:ca:83:ca:16:27:97:46:03:6e:c7:1c:
cc:89:a1:4f:ec:02:c6:36:a1:63:d5:d5:81:33:a2:ec:53:67:
5a:60:e1:73:46:9d:f4:5f:4e:17:ec:d6:35:37:c1:5e:f6:a6:
67:0a:b5:55:41:6c:0e:f7:0a:9d:1e:c8:62:e6:bc:fb:ce:10:
93:b1:5a:7b:9b:95:5f:c7:7f:7a:47:53:70:13:93:1b:4a:e5:
24:94:6a:71:7b:a2:ae:ac:15:dc:24:08:78:9f:60:65:f1:c6:
0b:ca:34:3f:6f:86:2b:7f:21:6a:0b:17:f4:b7:b3:2b:09:6f:
74:04:c1:d2:e4:3c:cd:42:d9:90:9d:9c:87:5e:78:2f:bb:b6:
b2:93:51:a0:45:b2:f5:70:f2:37:85:15:d7:92:a6:2a:18:1a:
a8:83:ed:8e:1c:e8:18:f0:d4:03:64:42:6e:63:e5:0e:0c:03:
f8:43:a9:ee:a1:48:ce:15:55:4e:40:2c:01:f9:83:7d:5f:b4:
55:aa:d0:ff:e1:87:dc:b7:f7:04:3f:fd:d0:0d:64:a6:11:e2:
c0:65:02:6c:9f:89:29:0f:1b:8d:de:01:a3:9d:7e:d9:ad:c4:
23:db:39:ce:0f:27:62:d8:ef:52:0f:48:8f:95:96:c6:72:77:
41:80:f3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org