Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/JBohKoHhqd-jPFHVK3dnAsmJ_w4.roa
File: JBohKoHhqd-jPFHVK3dnAsmJ_w4.roa (raw, json)
Hash identifier: +idbc2e9VX+HrXcFb+q5i7osXbzrbCkXq5MFpQ/FSpw=
Subject key identifier: 24:1A:21:2A:81:E1:A9:DF:A3:3C:51:D5:2B:77:67:02:C9:89:FF:0E
Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial: 0B6A
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/JBohKoHhqd-jPFHVK3dnAsmJ_w4.roa
Signing time: Fri 01 Sep 2023 09:45:57 +0000
ROA not before: Fri 01 Sep 2023 09:45:57 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18182
IP address blocks: 219.85.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2922 (0xb6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Validity
Not Before: Sep 1 09:45:57 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=241A212A81E1A9DFA33C51D52B776702C989FF0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:91:c0:8c:5f:36:09:73:4f:95:bf:6c:d9:
61:1f:85:dc:cf:f1:2b:98:0a:e6:a8:38:96:2d:52:
8b:e9:7f:be:e0:01:c6:cb:a1:b2:f7:fd:ca:1c:3e:
aa:ac:31:3f:30:9f:55:5d:de:a1:97:5e:52:96:bc:
f3:4c:88:66:6e:4a:f2:ea:78:93:56:b2:81:45:e9:
a5:74:bf:c8:d3:6a:0c:d2:9e:59:81:3b:20:bc:cc:
8c:43:56:a7:03:0d:d6:40:6d:cf:12:e1:df:f5:2c:
7e:f0:d0:30:09:3c:55:2b:6f:20:de:ff:4a:fc:75:
ca:49:3d:cd:14:ab:86:84:e4:23:8a:63:fa:57:70:
dd:18:4e:48:a2:0b:7f:c0:1b:46:ad:07:d0:44:33:
6e:64:07:fa:9c:76:3d:2a:fb:26:e6:40:de:52:4f:
e9:f6:f9:7d:4f:da:4b:91:4a:87:4a:13:3d:40:cf:
d8:17:a5:a5:66:6e:14:07:65:8f:fa:63:6a:eb:2e:
fe:f8:d0:d9:33:ba:78:4a:aa:8c:ea:97:66:12:c5:
02:69:00:9a:69:ba:20:e7:6b:33:41:8e:ed:f0:ad:
a3:14:87:d3:fa:3c:a8:ec:c1:6c:0f:0c:9d:2e:6e:
61:b9:d0:85:b5:8c:9b:e9:52:a4:fc:d5:4a:5c:05:
b9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1A:21:2A:81:E1:A9:DF:A3:3C:51:D5:2B:77:67:02:C9:89:FF:0E
X509v3 Authority Key Identifier:
keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/JBohKoHhqd-jPFHVK3dnAsmJ_w4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
08:d1:54:cc:5c:9a:d2:58:cc:e5:8d:39:b9:09:66:6f:ce:82:
e0:1e:ab:72:cd:16:28:3b:a1:d6:94:b2:bb:fe:04:13:73:59:
c9:dc:3b:5c:7b:0a:38:db:99:8d:b0:a2:59:f0:b1:6f:af:e5:
7d:6b:0e:c1:34:02:b8:ff:9f:3d:ff:b5:41:8c:a6:d8:84:16:
64:e0:39:d1:d4:b8:0b:8d:e1:13:8b:0c:59:7e:be:b9:0c:df:
c0:60:eb:e9:7a:57:0b:f1:ad:fa:55:b0:7e:f9:fe:89:d7:40:
e1:9a:46:5f:55:db:45:73:b9:0e:5d:98:7c:20:ce:07:84:7d:
7d:95:3d:0a:b2:7d:ff:d9:b1:06:e9:01:01:2c:9e:1f:7f:f9:
e0:ac:24:f8:e4:ef:81:ab:d0:98:cf:1c:aa:7c:5e:cc:6a:03:
e8:06:be:e6:b4:b9:03:3f:f2:a0:3d:82:8c:d7:0f:e0:5a:34:
7d:da:2a:b5:54:45:25:1a:70:53:7a:30:40:b6:28:f2:ba:d7:
8d:8e:fe:fa:bf:0a:b5:56:54:b2:70:55:3c:24:5d:d9:39:8b:
80:b9:64:bc:65:34:8b:07:15:7b:87:39:f5:2c:99:b1:33:f5:
33:21:49:b8:7a:99:57:7b:3f:bd:0e:f3:ae:e5:35:1b:79:1b:
bf:40:22:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org