Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/hQDrI07vhbxDabIbWMYdbGk4eVI.roa
File: hQDrI07vhbxDabIbWMYdbGk4eVI.roa (raw, json)
Hash identifier: m/tYnpZncBVxVjW5oTZfWMVD245avJq93JGqoTPBsfs=
Subject key identifier: 85:00:EB:23:4E:EF:85:BC:43:69:B2:1B:58:C6:1D:6C:69:38:79:52
Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial: 0BF6
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/hQDrI07vhbxDabIbWMYdbGk4eVI.roa
Signing time: Fri 22 Dec 2023 07:48:59 +0000
ROA not before: Fri 22 Dec 2023 07:48:59 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24157
IP address blocks: 1.200.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3062 (0xbf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Validity
Not Before: Dec 22 07:48:59 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8500EB234EEF85BC4369B21B58C61D6C69387952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:d9:89:f9:28:79:6f:ce:5e:3b:f5:00:b9:
c7:5e:20:d6:3d:0a:11:da:59:7a:ac:7d:10:d7:d2:
bb:a3:37:4f:89:2c:f5:db:e3:8b:13:7b:52:68:b8:
d6:81:a2:68:48:73:e8:27:84:ae:f2:72:f3:1f:35:
cc:9a:f1:c3:ca:b7:51:94:87:2c:9d:02:c5:8b:4d:
8f:81:61:10:c6:f2:d2:f5:0b:be:01:ba:0b:8e:4a:
48:88:24:bf:1a:5c:a2:89:10:55:72:62:94:4f:fc:
26:6e:82:df:d4:4a:24:a9:99:f5:f7:1d:10:ab:b2:
72:e6:d5:e3:03:35:54:c6:00:e7:6f:3b:c7:6e:79:
53:28:cf:cf:37:ca:77:b8:2b:7d:43:2d:0e:e3:e8:
74:79:06:8f:e8:bf:ef:dc:be:be:1c:b6:26:51:d4:
8e:a2:90:b2:80:0b:6e:0c:65:98:63:71:aa:b2:52:
ca:7a:2a:82:1e:ec:21:88:71:d7:b5:3b:30:90:aa:
b2:74:cf:01:aa:d4:ce:38:3f:98:14:02:ee:2d:2d:
fd:66:ae:76:4c:c0:47:90:04:b3:8f:3e:68:52:75:
d2:8c:01:f5:bc:cf:c6:86:a2:b8:22:17:bf:db:b5:
fe:16:1e:d2:24:57:9f:58:06:dc:20:8c:eb:50:0b:
a2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:00:EB:23:4E:EF:85:BC:43:69:B2:1B:58:C6:1D:6C:69:38:79:52
X509v3 Authority Key Identifier:
keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/hQDrI07vhbxDabIbWMYdbGk4eVI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
1.200.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:b0:41:64:99:23:6b:d9:73:4b:f0:5a:38:1d:36:63:5c:d0:
8a:bc:16:c5:63:6f:3e:b5:98:e5:4c:3e:ce:1f:ad:bd:d8:a3:
bd:9d:99:91:3d:6b:5d:73:0f:4f:17:6d:2b:07:eb:cb:ac:5f:
4f:3c:96:3a:3e:45:fd:64:6b:92:07:91:32:7b:5d:a7:e9:a8:
3e:2e:40:4b:2b:70:bc:df:78:a4:89:20:ff:c5:c9:43:55:5f:
c8:fe:e5:f7:4d:0b:f4:a6:ee:86:4c:db:0a:fa:dc:a7:ef:32:
5a:ef:5c:b7:23:2c:95:4f:92:27:7f:1d:6b:00:d9:d0:45:13:
f6:d4:33:a6:45:ab:bb:50:c7:59:82:9e:0d:93:46:44:a1:05:
d7:85:b3:b6:7f:12:ac:a1:ca:86:b7:ea:ce:40:0c:87:e4:68:
2a:6e:6d:4c:7a:54:7a:c7:7c:6d:3d:72:c5:2f:f0:6f:7a:1d:
fa:0f:8a:e2:7c:5c:b2:ea:c8:8e:2f:d6:26:a7:ea:f0:fe:b4:
7c:46:3f:f2:23:56:4b:cb:9e:f8:c0:27:83:41:d7:64:0a:1a:
2c:c7:98:c2:99:ac:02:05:3a:71:c2:b3:ea:eb:f6:2e:62:77:
ea:9f:16:54:f7:49:51:9d:47:ec:08:65:91:04:56:4b:ce:94:
68:b1:8b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org