Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/2ZYWp8pp_ODi27QiUZEHkEgxIHU.roa
File: 2ZYWp8pp_ODi27QiUZEHkEgxIHU.roa (raw, json)
Hash identifier: 4WZWcfQIVXx2b09uICdtqfQILTVgfSww6ErQbPgo/SY=
Subject key identifier: D9:96:16:A7:CA:69:FC:E0:E2:DB:B4:22:51:91:07:90:48:31:20:75
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0CF9
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/2ZYWp8pp_ODi27QiUZEHkEgxIHU.roa
Signing time: Fri 01 Sep 2023 09:59:18 +0000
ROA not before: Fri 01 Sep 2023 09:59:18 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 1659
IP address blocks: 210.70.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3321 (0xcf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 1 09:59:18 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D99616A7CA69FCE0E2DBB4225191079048312075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:a0:c4:39:f7:82:96:f8:27:2e:2f:54:67:
b0:de:d3:1e:bc:c5:d0:df:21:0b:06:f1:22:9d:68:
d0:1b:26:e8:d3:a8:c7:5f:db:d4:c5:81:ba:f0:87:
95:ce:82:76:8d:a1:be:3d:c9:87:96:2e:2a:57:3e:
bb:69:20:ca:77:b8:a0:2b:c2:6f:fe:71:9a:8d:7b:
d8:1d:f1:84:bc:b6:22:83:08:9c:a5:33:7e:72:93:
b0:28:59:69:c4:31:16:ce:a6:a2:26:46:3c:82:2b:
93:27:1b:c2:1e:77:2f:59:87:66:4e:39:5f:b0:59:
ae:38:8c:c1:64:21:b5:86:44:86:72:f6:03:14:57:
5e:9e:41:c6:ee:bb:23:ba:b4:9b:34:65:90:66:16:
2d:90:35:31:f2:dc:f7:11:cd:b0:33:4c:60:7c:1f:
89:0a:fa:21:2c:a5:bd:c5:81:f8:0c:09:ad:2e:3f:
10:f1:ec:ab:a6:52:f3:1b:43:6c:07:69:30:66:0a:
45:ec:29:85:1f:0e:f0:c4:fe:1b:c7:8b:79:65:5b:
2d:6a:44:9a:70:93:2a:d0:57:1a:a5:22:84:37:26:
be:5d:c5:b1:80:6a:b6:ee:1d:f9:b4:b0:d4:7e:b7:
5f:04:4c:52:98:61:de:ff:46:e2:f3:4d:5b:6a:58:
8b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:96:16:A7:CA:69:FC:E0:E2:DB:B4:22:51:91:07:90:48:31:20:75
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/2ZYWp8pp_ODi27QiUZEHkEgxIHU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.70.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ac:73:c1:48:41:6c:30:8b:ff:c4:ea:af:2e:13:b2:83:e8:82:
96:a4:29:09:3f:0b:32:4d:f5:00:ed:3d:36:40:8e:64:84:47:
9e:b7:fd:c0:81:8b:d7:56:7d:73:62:7d:1f:a0:77:15:69:3d:
5d:26:ac:4f:59:ba:7a:2b:ba:e5:f6:17:50:a2:51:fc:63:e5:
11:ee:ec:45:59:8f:f2:56:86:09:f3:6f:3f:78:e7:bf:81:c5:
19:ef:b6:99:71:ae:6b:39:60:d5:9b:91:03:ba:5f:c5:64:b7:
c7:f0:34:26:a5:38:52:e5:4f:2e:75:cd:26:21:de:a8:a9:9c:
53:af:50:e7:9f:b9:8e:fe:c9:5f:4f:c7:a8:79:12:c3:9e:85:
f8:51:39:4d:09:5f:4b:41:48:e4:24:45:32:21:8a:4a:06:63:
44:de:1d:67:75:4e:e8:14:b2:5a:22:24:60:77:20:10:32:ab:
b9:70:7b:d3:37:7f:43:00:9b:62:58:84:a3:1d:09:c6:9d:b4:
ae:35:98:b0:73:af:99:52:fd:c8:4d:a4:19:4a:e2:0f:e5:c3:
87:93:0f:9c:d2:2a:35:e4:0f:d6:7a:32:ee:65:a8:9e:da:5e:
ee:e0:36:94:74:89:31:ee:34:06:4e:a1:74:41:4f:07:2f:22:
20:90:ad:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org