Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYSNET/-7KDIpOJ2OPZGn9hk2Jp0eRKwKw.roa
File: -7KDIpOJ2OPZGn9hk2Jp0eRKwKw.roa (raw, json)
Hash identifier: g/v9SltUm9H5XZ/kL/8hx0W2EL0D+iwi0BUsUwTjAeE=
Subject key identifier: FB:B2:83:22:93:89:D8:E3:D9:1A:7F:61:93:62:69:D1:E4:4A:C0:AC
Certificate issuer: /CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC
Certificate serial: 0B5C
Authority key identifier: 96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/-7KDIpOJ2OPZGn9hk2Jp0eRKwKw.roa
Signing time: Fri 01 Sep 2023 09:48:57 +0000
ROA not before: Fri 01 Sep 2023 09:48:57 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4783
IP address blocks: 210.67.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2908 (0xb5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC
Validity
Not Before: Sep 1 09:48:57 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FBB283229389D8E3D91A7F61936269D1E44AC0AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:84:42:2a:4b:72:09:4e:bc:0e:23:10:7a:
93:e6:0c:ea:5c:78:76:ab:3f:89:f7:70:06:39:b0:
08:f9:1c:21:8f:37:22:85:9a:16:ab:ba:73:e2:f3:
3c:be:cb:5b:01:55:68:09:4b:18:ef:94:54:e5:0a:
69:d3:58:c3:56:d8:f8:74:74:f6:05:c2:60:05:39:
63:5c:e1:fe:45:c0:69:c6:5d:44:ec:e9:96:c3:61:
dd:08:2c:1e:b6:a9:91:b3:3e:0e:78:7c:c4:ea:17:
2d:79:f7:d5:38:11:e2:2a:38:fb:28:bd:98:29:a6:
33:27:76:08:ea:f6:fe:b2:6f:87:19:9f:6f:d8:95:
2a:08:d7:ae:88:12:4c:ae:f6:a7:54:29:d9:c7:c2:
b1:65:d7:bc:28:52:da:ed:4b:3b:06:da:55:6e:87:
e0:83:72:8a:c7:7f:7b:c2:28:35:10:37:aa:4c:9b:
0d:b4:24:cd:13:40:61:30:5f:92:44:bd:ea:31:8b:
7b:66:1e:c1:e8:ee:45:97:68:89:14:bf:a8:20:d5:
e8:a8:b8:e5:bd:cc:40:9f:5e:1d:bf:49:8d:e4:56:
81:a2:e8:7b:9f:52:19:fc:d0:ba:a9:d0:5e:05:4d:
e7:cb:3a:95:73:04:38:9f:07:cb:af:53:22:97:08:
e1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B2:83:22:93:89:D8:E3:D9:1A:7F:61:93:62:69:D1:E4:4A:C0:AC
X509v3 Authority Key Identifier:
keyid:96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/-7KDIpOJ2OPZGn9hk2Jp0eRKwKw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.67.112.0/20
Signature Algorithm: sha256WithRSAEncryption
15:95:1b:6d:8f:f0:82:66:bc:b3:8d:75:64:dd:43:2a:c9:4a:
3f:1e:40:55:1b:4e:05:55:a7:b1:2e:5b:c0:0a:1d:13:2a:bb:
8f:c0:29:00:2d:f7:2e:bd:e6:c5:88:f5:fe:d0:ed:db:fe:f6:
e2:c8:6c:8a:6f:8a:cf:85:9f:93:71:0e:1b:8f:95:08:7f:4b:
24:97:e4:52:cf:12:6e:ae:d4:ff:f5:1b:1f:08:b4:e8:c1:75:
81:71:09:01:a2:bd:f6:35:cd:36:cd:04:0d:0e:2e:71:aa:96:
77:7a:f2:73:37:43:59:51:31:3d:32:2b:94:68:db:7d:73:64:
3d:5e:31:55:75:13:cf:7d:d5:a9:e6:6c:fe:db:83:5e:3b:fa:
e5:11:4e:c2:26:47:ca:13:42:0d:48:7f:af:ed:c9:ea:00:e7:
0d:bb:b1:4b:32:b8:04:94:41:a2:8f:ab:0f:cb:d6:2e:dd:77:
ef:05:06:7c:67:18:21:05:dc:f9:e7:67:b0:a7:95:a7:00:59:
0e:59:5c:1c:bb:d2:e0:c7:35:cc:9d:4e:7c:b2:9e:03:e6:f5:
bf:2b:61:53:bb:98:83:0c:73:cb:e8:dd:7a:0a:76:37:10:4a:
e7:c8:11:2c:c8:e3:93:d4:32:0c:30:a0:b5:4a:71:26:74:21:
fe:02:2f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org