Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/8vPftNaQZXdrmw-oWBLtVDJy1vc.roa
File: 8vPftNaQZXdrmw-oWBLtVDJy1vc.roa (raw, json)
Hash identifier: lSTquo34ii8hJmBNtFzo+CyEKTClDDpmfBQhg7tDT0s=
Subject key identifier: F2:F3:DF:B4:D6:90:65:77:6B:9B:0F:A8:58:12:ED:54:32:72:D6:F7
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0CB1
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/8vPftNaQZXdrmw-oWBLtVDJy1vc.roa
Signing time: Fri 01 Sep 2023 09:59:33 +0000
ROA not before: Fri 01 Sep 2023 09:59:33 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9916
IP address blocks: 192.83.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3249 (0xcb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Sep 1 09:59:33 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F2F3DFB4D69065776B9B0FA85812ED543272D6F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:65:e8:23:b9:5e:67:66:93:df:bf:3c:1c:56:
c3:fb:40:9e:85:14:05:c7:d3:b1:ef:7f:95:24:a1:
93:fe:e0:bb:75:cb:b5:3d:51:d0:9f:d3:d9:60:c2:
22:8f:44:85:7c:15:18:4b:f1:79:ed:6f:6b:d0:71:
20:7e:d6:cb:fc:10:b5:02:14:b6:01:d4:0f:eb:45:
ca:01:a1:86:5f:91:03:de:92:02:6a:c0:df:f9:91:
55:4d:f4:72:7e:a0:cf:82:fa:0d:7e:7a:a0:af:99:
08:af:64:33:54:63:28:b9:90:91:0c:e6:92:db:d9:
fa:04:27:98:5a:ba:2f:de:ff:50:f5:ab:eb:cc:85:
60:cd:3e:86:02:8a:49:40:27:6d:cb:d6:96:10:08:
59:4b:a6:fb:3f:2b:ce:4b:f0:01:79:73:f4:2a:6e:
c2:fe:b4:d1:a4:7e:04:e0:de:1d:45:cc:45:99:0e:
aa:07:ce:07:e4:ea:da:a5:ea:6c:ae:09:14:e4:39:
10:d7:70:2d:54:06:fd:ad:e2:98:c2:4d:f7:05:4a:
97:b3:e3:05:4e:90:86:97:11:c7:21:9a:cc:10:85:
9b:06:65:e8:2b:9a:65:96:9a:4f:ed:51:da:51:4b:
2d:ba:9d:26:57:9c:f8:08:ab:ae:e3:99:b0:51:03:
ff:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F3:DF:B4:D6:90:65:77:6B:9B:0F:A8:58:12:ED:54:32:72:D6:F7
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/8vPftNaQZXdrmw-oWBLtVDJy1vc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.83.179.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:28:1c:9a:4c:99:3c:30:21:ac:09:67:a9:4c:0f:af:0e:e9:
9e:63:c6:6e:32:ba:36:05:de:3a:de:3c:f9:32:d1:3a:28:51:
83:1a:aa:a1:2b:58:23:e6:ee:6b:48:e4:53:67:0e:eb:74:9c:
4b:7a:ac:1b:b6:ad:82:10:f6:72:66:d0:53:18:9f:d4:1a:bb:
b4:da:88:7e:38:92:82:9c:13:71:71:ca:fb:d0:22:10:4b:81:
84:33:b8:e9:f4:62:d8:70:bb:7a:76:15:38:6d:1d:54:53:03:
fb:f3:77:8b:54:89:12:b1:d5:fd:36:85:0d:d1:c3:01:fa:29:
93:a3:be:2e:5a:91:3a:06:2e:1b:01:1c:75:56:65:53:78:fe:
aa:f8:5a:61:cb:d0:0f:38:ff:a2:93:a0:81:4b:ca:fe:c9:78:
ee:d0:b7:a5:ca:b1:09:0d:6a:f4:aa:2b:34:ba:b8:31:a8:26:
f8:c9:ba:53:29:2e:e5:53:49:17:8b:a0:6f:40:a1:b6:a7:8d:
d7:c7:5b:4f:f1:05:de:89:41:36:d6:5e:14:53:94:30:20:e9:
ed:78:e5:9b:7a:d8:b3:e0:20:5f:17:81:5f:85:91:0f:c4:8b:
d9:ca:0d:23:8b:8d:af:43:0b:cf:d3:ca:2a:13:a5:d2:10:7e:
96:f9:cd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org