Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/P4viI8ctbWkG2MnRNXwexSvQ-yw.roa
File: P4viI8ctbWkG2MnRNXwexSvQ-yw.roa (raw, json)
Hash identifier: xgXPTjDDNBdtvXaSI7aamLqflev9Ypzeu96JU1YqX7w=
Subject key identifier: 3F:8B:E2:23:C7:2D:6D:69:06:D8:C9:D1:35:7C:1E:C5:2B:D0:FB:2C
Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial: 0BB7
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/P4viI8ctbWkG2MnRNXwexSvQ-yw.roa
Signing time: Fri 01 Sep 2023 09:45:00 +0000
ROA not before: Fri 01 Sep 2023 09:45:00 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18419
IP address blocks: 124.109.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2999 (0xbb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Validity
Not Before: Sep 1 09:45:00 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3F8BE223C72D6D6906D8C9D1357C1EC52BD0FB2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:58:a9:23:94:44:9b:7e:ad:c4:19:91:ec:dc:
ca:14:e5:97:eb:f4:8c:5b:af:a9:4c:02:69:0b:71:
55:5e:d1:3b:27:52:64:f8:6e:ec:ee:15:22:6d:11:
9f:61:ac:c2:fe:53:31:39:b9:7b:2b:ae:68:03:e9:
2c:63:75:9e:d6:82:1e:24:db:66:35:df:25:ad:10:
74:c3:33:ba:a1:d4:2d:3d:b8:96:fc:c7:bd:63:99:
5a:63:63:0c:f9:4c:de:63:a0:6f:26:9e:fa:20:f1:
b2:3d:2d:72:8f:31:05:ee:dd:12:1f:3b:97:f7:6c:
ab:89:ee:c0:b9:51:1a:3b:66:90:cc:7f:07:e4:29:
1a:cf:e5:b8:bf:a8:81:25:13:64:35:41:91:1c:29:
c1:e7:5c:57:2a:57:52:af:3c:9b:9f:e8:cd:ae:3d:
5e:4b:f0:1c:6e:47:63:1d:0e:6b:18:23:61:c7:70:
5e:4d:e9:74:f3:8f:b4:94:d7:9f:e7:00:14:06:4a:
41:6d:1c:8a:8c:08:e7:82:ff:00:23:fd:bd:d0:a2:
b5:f9:33:09:66:a6:1e:6c:31:b3:f0:4e:5f:09:9a:
0f:5c:44:30:bf:bd:3c:56:81:5f:37:03:a9:37:cc:
27:84:e0:ca:95:3e:1e:33:cc:cf:d0:a4:60:3b:81:
42:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8B:E2:23:C7:2D:6D:69:06:D8:C9:D1:35:7C:1E:C5:2B:D0:FB:2C
X509v3 Authority Key Identifier:
keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/P4viI8ctbWkG2MnRNXwexSvQ-yw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.109.112.0/20
Signature Algorithm: sha256WithRSAEncryption
b3:56:47:37:bd:e5:10:20:43:b0:42:e2:06:4d:fd:55:01:df:
b6:fa:f0:6b:a8:10:48:14:cc:2e:f7:60:48:f9:e3:9d:4e:a4:
c5:13:ec:3a:dc:b9:01:a7:1d:ab:fa:72:7b:52:eb:80:d4:12:
10:55:c7:b5:2f:b6:a4:f8:a1:fd:d8:23:19:a7:8a:62:fd:a0:
7b:6a:49:81:e8:66:4e:d7:56:42:e2:d8:81:23:22:fd:4a:92:
40:21:65:4e:99:a6:d5:38:48:cf:29:a4:25:5e:f0:b3:59:6a:
39:29:d3:1e:07:f9:0b:47:5a:77:52:ec:cf:bb:92:90:99:8d:
78:d7:10:47:52:4d:f6:06:38:3a:d5:64:9b:d4:06:20:fa:46:
0d:38:a7:b8:44:29:f4:56:c2:9a:d8:50:28:c4:3a:96:9b:19:
73:e4:78:ed:39:0b:02:f0:83:0d:7c:1e:20:42:15:23:3f:2c:
f7:0a:45:6b:16:91:8d:61:00:89:cd:40:5b:ac:16:55:b5:5b:
47:76:92:13:dc:3c:38:85:c3:05:c6:f6:e9:77:08:ad:9a:90:
2a:26:c3:f1:d4:f6:22:e1:40:5b:08:19:e5:f3:68:cb:d1:71:
e5:ee:72:2a:9f:68:77:0b:a8:b9:bf:42:28:c8:75:b5:b7:a8:
49:7c:df:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org