Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/6ZisdIOSqMwXNMjw_2lzW0lGM_8.roa
File: 6ZisdIOSqMwXNMjw_2lzW0lGM_8.roa (raw, json)
Hash identifier: JqT7eInOCp8Tl1APB4stClGikx3mDnV3XI0LxoRfRiw=
Subject key identifier: E9:98:AC:74:83:92:A8:CC:17:34:C8:F0:FF:69:73:5B:49:46:33:FF
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0CFA
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/6ZisdIOSqMwXNMjw_2lzW0lGM_8.roa
Signing time: Fri 01 Sep 2023 09:59:18 +0000
ROA not before: Fri 01 Sep 2023 09:59:18 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17716
IP address blocks: 120.96.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3322 (0xcfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 1 09:59:18 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E998AC748392A8CC1734C8F0FF69735B494633FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:74:d2:24:d5:5a:a5:3f:9b:6a:8d:eb:fa:
0f:2c:36:09:21:59:da:46:3c:7e:7a:c6:63:82:77:
b0:55:0d:05:eb:b4:e0:41:c6:25:25:6b:ba:22:7d:
32:df:4a:ce:85:94:de:32:1a:ae:b3:e6:96:a6:f0:
ee:74:01:c6:e4:0c:66:94:93:f3:87:69:9e:0e:3b:
db:57:f3:db:e7:ec:d5:48:18:4d:54:d9:93:c2:8c:
82:71:54:73:91:da:9c:28:d2:a9:04:95:4f:81:a3:
7c:b8:6c:e0:db:7e:ed:7b:9d:50:80:c8:6e:8e:ec:
d2:d9:d7:80:b0:04:02:fe:f4:05:c7:77:6c:24:27:
ad:cc:1c:d3:72:f7:77:6d:f9:e4:d8:db:96:15:f9:
56:cd:a9:b3:79:82:83:86:99:5c:5b:65:dc:7c:aa:
0d:c6:d4:66:95:88:e6:d2:4d:e8:50:30:ec:57:1d:
d1:c2:54:4e:c6:70:fd:5a:fd:d4:26:c2:ea:d4:ca:
38:cb:f9:e9:fc:1a:5a:82:87:9f:1f:f1:da:40:3d:
06:5c:d6:8b:84:f6:ca:12:1e:3d:81:00:a3:96:a0:
08:fa:a5:b6:1d:ad:92:13:f5:c7:6a:bc:cf:87:19:
5a:78:a8:b6:e2:c0:64:17:24:80:d6:a8:18:ef:ea:
aa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:98:AC:74:83:92:A8:CC:17:34:C8:F0:FF:69:73:5B:49:46:33:FF
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/6ZisdIOSqMwXNMjw_2lzW0lGM_8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.96.240.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:41:a5:a9:0b:15:38:f0:c8:f4:0b:8b:86:74:02:39:46:2e:
5b:7c:cd:df:fc:59:88:2b:77:2e:50:c0:48:bc:98:46:be:c2:
c7:66:5b:6e:ae:bd:eb:17:f4:12:9a:69:c7:a2:43:e2:ad:6f:
8f:55:d3:ca:c9:1e:00:0e:2d:0b:c1:6b:97:36:c0:a0:18:2e:
32:44:8b:30:dd:d0:85:1a:60:3a:83:17:4e:d6:ec:4b:80:00:
f9:da:8d:a9:a6:62:77:60:ff:c8:32:ef:95:ed:14:bd:28:6e:
16:ea:ab:5c:d3:2a:db:b2:e9:ab:8a:d4:73:2a:c5:a3:b3:e8:
0f:e9:56:3b:b4:6f:59:74:6a:ab:76:64:5c:b5:00:79:96:41:
4e:2c:4b:0b:35:91:34:e7:39:cf:2e:31:a5:1d:40:e2:7f:5d:
d4:23:0c:24:70:a6:f8:ff:3e:9e:db:8a:73:d2:f0:b1:ea:21:
6d:8b:bb:17:78:64:3c:3e:de:ed:c9:75:c2:cb:e7:9e:7a:ae:
d4:7d:5b:d4:6f:91:a0:96:c9:d1:58:50:e2:f9:39:c0:4a:b6:
39:31:dd:81:ec:51:35:4b:e7:5c:ec:d3:2f:39:de:42:c7:73:
70:7c:d2:5a:95:07:f6:bb:86:f0:1d:d4:0a:9b:32:b1:f1:89:
b1:7a:98:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org