Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/VsNa8HQZGXPHKuuUWDoGXWuHSAg.roa
File: VsNa8HQZGXPHKuuUWDoGXWuHSAg.roa (raw, json)
Hash identifier: JKLUC399GqxG6Warro1WOTICU1Yre5zF47e9QfM2Yas=
Subject key identifier: 56:C3:5A:F0:74:19:19:73:C7:2A:EB:94:58:3A:06:5D:6B:87:48:08
Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial: 0BB4
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/VsNa8HQZGXPHKuuUWDoGXWuHSAg.roa
Signing time: Fri 01 Sep 2023 09:45:00 +0000
ROA not before: Fri 01 Sep 2023 09:45:00 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4780
IP address blocks: 180.214.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2996 (0xbb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Validity
Not Before: Sep 1 09:45:00 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=56C35AF074191973C72AEB94583A065D6B874808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ca:73:40:08:ec:4d:83:96:fd:15:5d:4d:8a:
9c:2c:3f:8d:4a:90:22:17:b3:43:d4:eb:3d:8e:ba:
6a:26:40:ef:d5:be:f4:40:ac:c5:a6:da:21:63:58:
4b:ce:0d:59:94:d2:58:fd:26:05:9f:16:91:d4:9f:
e0:f8:cb:c9:58:ce:95:c7:f9:71:1f:07:db:4d:e7:
e6:59:60:4b:1c:c6:ea:73:ab:aa:47:b0:73:67:8a:
e7:28:6a:49:d5:51:f4:21:e2:fc:72:2d:e2:e0:b6:
2f:c6:2e:46:b0:e3:19:bc:da:61:df:c7:6b:5f:9a:
8d:9a:91:f2:f5:ce:65:79:dc:3f:3d:cf:48:9b:3c:
94:77:2b:24:77:33:b6:fb:3e:7d:7d:24:24:36:e7:
f5:a4:80:ac:71:93:a7:cd:a1:8b:cc:aa:81:d0:15:
de:4a:f0:e9:ac:d2:5f:55:df:a5:94:a1:4d:9b:3e:
b8:f9:77:d6:e0:06:67:8b:b1:2b:a1:f5:58:5f:97:
84:5b:d0:bf:72:0c:bc:32:ae:c7:64:e5:d1:3d:20:
38:e4:9d:8b:ee:ce:ae:7c:f8:3e:a5:80:9f:a3:da:
64:f0:bf:88:b1:fc:ef:18:ba:56:a8:aa:38:c6:57:
28:98:c6:d8:cc:de:56:f7:14:c2:d9:9c:db:fe:29:
b7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C3:5A:F0:74:19:19:73:C7:2A:EB:94:58:3A:06:5D:6B:87:48:08
X509v3 Authority Key Identifier:
keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/VsNa8HQZGXPHKuuUWDoGXWuHSAg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.214.176.0/20
Signature Algorithm: sha256WithRSAEncryption
a7:2b:ba:61:ca:9d:e5:8f:2c:41:3d:5f:d6:76:4c:39:7c:31:
c2:a1:2e:c5:8c:16:ef:ca:71:52:5a:2c:22:c3:6d:ca:fa:69:
58:98:e4:76:6b:ca:83:4b:55:a7:cf:1f:7a:47:6d:29:e5:6d:
70:b2:10:5c:59:49:b8:d6:f2:a2:0e:de:e8:6d:19:54:04:43:
35:c1:24:d3:51:cd:af:71:c5:b4:a3:25:58:78:c4:86:1e:17:
59:5d:18:c4:cb:1e:46:9c:54:5b:db:33:f9:13:92:c4:f8:c9:
7f:b8:ac:81:90:dc:d4:31:ce:22:99:b0:80:18:d3:73:ed:38:
a9:d1:20:41:ef:9f:97:a7:d0:af:c3:b9:39:bb:0e:98:cd:f6:
9c:b6:c6:b1:01:eb:13:de:0a:ac:fe:51:71:17:90:b1:16:9a:
36:a3:cf:8b:16:a0:3f:fd:84:c1:88:55:24:a7:b9:77:a8:de:
e6:a8:8a:42:1d:e7:56:4b:eb:12:1b:b4:cd:9f:e3:05:27:17:
c6:be:fa:4a:ed:54:16:2a:db:5e:af:ee:52:d0:ca:0f:f0:7c:
bf:68:bc:91:72:06:38:25:3e:a9:17:05:ba:b7:3d:e1:3e:e9:
9f:e9:63:64:98:7d:0b:00:0d:93:cb:08:9e:3f:9e:4c:d9:34:
1a:79:40:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org