Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/AJlCm0HzLTIQDFp_6j21nPps1n0.roa
File: AJlCm0HzLTIQDFp_6j21nPps1n0.roa (raw, json)
Hash identifier: LVfLVNZtYdLiymRyO6KEJsk+lviuMNRS5JnX9t+kuDs=
Subject key identifier: 00:99:42:9B:41:F3:2D:32:10:0C:5A:7F:EA:3D:B5:9C:FA:6C:D6:7D
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0D15
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/AJlCm0HzLTIQDFp_6j21nPps1n0.roa
Signing time: Fri 01 Sep 2023 09:59:34 +0000
ROA not before: Fri 01 Sep 2023 09:59:34 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 1659
IP address blocks: 163.24.0.0/14 maxlen: 14
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3349 (0xd15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 1 09:59:34 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0099429B41F32D32100C5A7FEA3DB59CFA6CD67D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2a:4e:c1:28:a7:42:ac:e5:02:2c:cf:5f:19:
c7:d1:f9:06:d2:70:df:0d:58:64:42:4c:06:a3:82:
a1:1b:7b:9b:4b:f6:2c:7d:4e:d0:ee:57:40:00:fd:
7e:f3:a8:48:b6:35:7d:f7:94:e7:89:3a:fe:40:dc:
d7:43:66:80:5c:59:26:01:fe:5e:21:12:87:ca:93:
47:e0:a2:01:47:b6:f8:92:8f:26:b6:95:07:70:8e:
d6:b3:42:75:7c:59:e4:10:05:8a:12:b5:ce:50:8a:
bc:d2:03:25:3c:7c:4c:7b:5e:1a:70:0c:4d:5b:cb:
40:2f:ac:26:18:31:12:83:8c:67:56:c7:65:93:6f:
ea:81:a0:33:f9:e5:e7:13:e8:c4:5c:4f:2b:c5:f8:
59:a1:63:bf:a9:e0:73:7a:8c:f6:99:97:5e:9b:47:
16:47:8b:03:d3:f5:96:dc:68:b5:c0:41:81:85:03:
63:c1:83:cd:c1:2a:7d:ff:49:f4:c6:88:6d:56:8c:
41:a1:7d:ab:c4:29:72:68:9a:c5:aa:dd:af:68:27:
54:ad:3d:84:0d:82:cd:c6:b7:79:cf:27:d0:65:5b:
b0:c7:87:df:eb:f5:17:65:ab:ef:58:e8:e9:12:67:
77:fc:06:45:3b:fb:fe:11:78:a1:e5:c2:22:d2:45:
47:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:99:42:9B:41:F3:2D:32:10:0C:5A:7F:EA:3D:B5:9C:FA:6C:D6:7D
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/AJlCm0HzLTIQDFp_6j21nPps1n0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.24.0.0/14
Signature Algorithm: sha256WithRSAEncryption
4f:c7:a8:55:82:f6:df:f9:74:50:f8:a9:14:ac:d6:23:72:e4:
6c:6d:bb:ac:b2:27:6b:37:d3:d8:d5:d5:43:da:c7:9a:e2:3d:
e7:df:7b:ac:a8:df:69:ce:d4:16:ce:7c:6e:76:3d:c1:d5:53:
9b:73:ed:e8:4d:33:3e:ff:d8:d2:d8:f9:b5:07:52:b5:a1:f4:
b4:3a:b0:f3:a1:6b:53:62:a9:06:ea:9c:7d:7f:89:f9:b1:61:
c0:04:de:e9:f8:90:f9:21:9d:8a:8e:b3:73:12:fd:81:a6:57:
10:db:22:f1:cf:ee:d0:e0:4e:62:b6:6a:1b:f8:c2:3f:c6:5e:
a2:ad:a5:7b:c2:05:19:ff:fe:99:a8:39:e5:36:73:d5:4f:7a:
df:c6:ab:4f:c5:74:18:a0:27:1e:a1:20:9d:dc:1c:77:cd:7e:
4d:41:04:49:73:27:46:38:6f:e2:53:5a:b3:33:af:10:0c:1e:
38:14:30:a3:dd:0e:2b:9b:47:40:6d:34:44:19:09:24:a6:bb:
bc:80:60:08:88:b9:5e:9b:89:40:94:02:e0:0e:ed:9e:b1:f0:
35:a3:77:f8:a1:d6:11:8d:98:69:af:e5:fe:1a:fc:22:a7:6e:
c9:7c:1d:e1:ff:fe:eb:fb:0e:cd:25:af:11:b8:41:79:32:db:
37:d2:0a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org