Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/U1y9R73-Mo2lbKOrdSRKb09_cFA.roa
File: U1y9R73-Mo2lbKOrdSRKb09_cFA.roa (raw, json)
Hash identifier: 95in9WcuBgPOJnDWqMP/WMYMWVNDRk8Tz017IwH8va4=
Subject key identifier: 53:5C:BD:47:BD:FE:32:8D:A5:6C:A3:AB:75:24:4A:6F:4F:7F:70:50
Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial: 0B99
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/U1y9R73-Mo2lbKOrdSRKb09_cFA.roa
Signing time: Fri 01 Sep 2023 09:49:27 +0000
ROA not before: Fri 01 Sep 2023 09:49:27 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131584
IP address blocks: 111.125.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2969 (0xb99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Validity
Not Before: Sep 1 09:49:27 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=535CBD47BDFE328DA56CA3AB75244A6F4F7F7050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:2a:98:9e:0a:19:4f:45:8f:92:4d:54:1b:
23:f1:3d:cc:05:7e:cf:a2:35:be:ed:9c:3f:b4:78:
bc:c8:89:10:15:c9:4e:f4:94:5f:6c:a7:af:04:a0:
62:a8:82:59:94:86:20:c0:9d:61:92:b6:71:1b:cd:
58:53:f9:c2:11:7f:2b:e1:9c:14:9d:c7:44:3e:e3:
9b:36:04:d4:b5:bd:b8:b4:3b:c7:3f:66:3d:f2:f5:
36:0c:aa:b2:de:46:48:d0:5d:ac:9e:40:c8:eb:ad:
7c:aa:0c:34:6f:17:2f:06:cb:6a:19:16:7e:89:75:
da:2e:8b:39:b4:65:37:9c:06:d3:83:0e:b0:b9:4e:
39:c9:19:a1:07:9a:57:4b:0d:ee:1b:64:31:a3:0d:
94:e6:77:bb:4f:32:dc:e8:8c:78:b1:c7:9a:1b:20:
4d:0e:7b:02:6f:f3:b5:a6:d9:52:f2:8a:c4:4d:c0:
68:42:09:7d:fb:5b:7a:e0:11:8f:64:9a:96:d4:ba:
87:df:6a:7e:64:94:a7:6c:8d:84:19:6b:09:12:aa:
db:3f:db:67:27:a8:ae:7c:55:73:f7:78:36:10:42:
27:ed:3c:9f:11:58:78:84:33:21:95:4e:af:ab:c0:
fc:77:ce:3a:39:32:eb:d1:73:6b:a2:6b:b8:d7:b0:
d5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5C:BD:47:BD:FE:32:8D:A5:6C:A3:AB:75:24:4A:6F:4F:7F:70:50
X509v3 Authority Key Identifier:
keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/U1y9R73-Mo2lbKOrdSRKb09_cFA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
111.125.128.0/21
Signature Algorithm: sha256WithRSAEncryption
31:a9:3f:c7:a3:68:94:cd:58:34:6a:a2:70:db:cc:e1:f5:ef:
42:57:a1:58:2b:d2:8a:74:87:e3:8e:62:c1:a5:ca:c4:45:c3:
b9:94:3e:6e:fb:c5:79:8a:f3:2b:4d:d3:c5:19:25:ce:27:c4:
44:c9:b3:d6:4c:cf:99:43:a2:c2:99:5f:fb:c9:ba:52:89:9f:
29:8e:0b:8b:dd:49:1a:ef:1b:a4:50:e4:b0:89:bd:a3:29:96:
23:64:75:1f:b9:13:f1:d1:3e:42:fb:f5:1b:ef:f2:08:71:75:
af:7d:ab:b7:a2:cd:00:ad:25:c4:87:46:6c:4b:e7:c7:a0:4d:
79:b4:6e:5c:74:e3:b4:b1:bd:e8:0e:cb:3d:b6:2b:db:28:cc:
1f:67:e6:cb:4e:f6:54:ba:36:66:e7:25:a5:e1:13:78:ad:2d:
6d:4d:f0:d0:3a:8e:a9:19:ee:61:5e:6c:00:55:34:89:06:b9:
15:65:4c:2a:c0:3e:23:02:1c:35:7f:f2:24:bb:33:8c:f6:6d:
45:cd:9f:86:82:74:93:9a:6d:30:b7:fa:ce:9b:54:50:bc:fc:
42:07:4c:c7:2f:e2:03:b4:55:05:36:32:0e:88:d8:86:a3:86:
68:26:36:16:d6:0b:f1:2e:d8:1c:5c:74:3f:69:02:8f:82:68:
db:f1:a2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org