Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/8-yvkdyhq2tbuxRk8roVS2RfunQ.roa
File: 8-yvkdyhq2tbuxRk8roVS2RfunQ.roa (raw, json)
Hash identifier: 6nKHRoFaI8TxqGVokwKWwv6jA8cg3//F8pRwGekbTUM=
Subject key identifier: F3:EC:AF:91:DC:A1:AB:6B:5B:BB:14:64:F2:BA:15:4B:64:5F:BA:74
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0D6D
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/8-yvkdyhq2tbuxRk8roVS2RfunQ.roa
Signing time: Wed 15 May 2024 05:49:25 +0000
ROA not before: Wed 15 May 2024 05:49:25 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 1659
IP address blocks: 134.208.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3437 (0xd6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: May 15 05:49:25 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F3ECAF91DCA1AB6B5BBB1464F2BA154B645FBA74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:15:95:0d:f6:bb:ae:4f:a2:72:8c:5f:7d:
c8:c5:0f:96:b9:a3:29:4e:34:c6:b1:d8:24:26:ed:
d7:ea:78:e6:57:09:c3:59:e2:c2:3d:6f:88:7a:0f:
1f:9e:81:33:e9:c2:c8:d4:f5:31:f0:92:bf:70:b1:
6a:35:83:11:7c:21:ab:61:23:c7:3d:98:13:5e:3a:
11:34:ca:a7:61:c6:47:c3:f9:67:0a:8f:f7:54:b8:
92:68:33:f4:62:ed:34:de:68:4f:45:74:1a:15:78:
cf:a4:65:98:a6:f8:ee:80:3e:af:b7:9b:fa:c3:31:
af:57:5f:ef:e3:c5:44:e0:eb:55:8f:99:01:7d:5e:
d8:2f:f1:d8:6c:94:ce:c8:68:f1:4a:87:c5:f9:96:
29:78:f2:a2:d4:78:c5:a9:e1:ca:ec:77:8b:fa:bb:
3f:64:15:5a:e6:97:4a:3f:6c:ae:15:14:99:0b:c2:
66:2d:fc:7a:fd:f1:7a:e6:6b:f9:bc:2d:f6:c5:58:
c0:4e:03:fa:f3:9b:3b:ef:7e:c4:64:12:c4:2f:d2:
0d:c9:45:e3:89:86:84:eb:ae:f6:11:ed:55:88:c4:
68:ba:aa:79:d8:31:9a:e5:b2:41:b5:41:b6:1b:e6:
fe:0c:eb:ff:89:15:c8:ee:7d:4b:21:06:29:ac:19:
7c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EC:AF:91:DC:A1:AB:6B:5B:BB:14:64:F2:BA:15:4B:64:5F:BA:74
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/8-yvkdyhq2tbuxRk8roVS2RfunQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
134.208.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6b:0f:a1:fb:ad:a1:53:be:8e:db:8d:ff:66:d2:53:db:e2:4f:
2a:f6:b8:0d:47:59:bf:8c:7c:21:03:4c:e4:e7:4a:bd:9f:68:
73:b5:83:c8:09:fc:62:61:fc:87:a1:26:e1:bb:3b:50:e0:05:
02:7f:ce:63:26:74:00:aa:46:9f:5e:7f:52:5c:11:64:50:ec:
74:0c:7b:d2:91:4f:44:47:14:3e:79:87:3c:48:c9:8e:df:cc:
1d:ed:16:60:5c:9f:38:65:6f:99:14:1f:09:51:6f:11:a2:d2:
25:1e:39:bb:3d:11:08:f1:16:64:84:30:e6:7c:76:e5:33:84:
42:33:52:eb:fc:c5:ba:58:19:83:e3:3a:3b:c1:ff:c9:36:b3:
7f:da:5a:dc:60:9f:3c:de:f5:29:d3:34:b5:4c:ce:94:cb:ee:
87:8a:27:cf:17:5b:61:23:5f:09:b4:34:84:a3:19:7a:c8:f5:
2b:53:6b:ad:15:c4:28:e4:f5:a5:db:5d:2a:09:64:ad:82:6f:
4d:d3:5f:40:bd:bf:64:d6:f3:f7:7a:10:5e:74:2c:7b:36:ff:
29:ff:c3:e7:eb:16:3e:ff:44:03:1b:12:71:01:3d:06:0c:de:
ea:99:aa:0b:b9:c1:f9:12:41:d0:00:6d:7b:2a:bc:7c:f2:82:
95:17:d3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org