Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/AeekmbV9qi9qpWJ6Ij2SjUQFI2c.roa
File: AeekmbV9qi9qpWJ6Ij2SjUQFI2c.roa (raw, json)
Hash identifier: xf6N7HFmQTpU+Edik24uvFKklgnyUTUTaXXG1M8taZ4=
Subject key identifier: 01:E7:A4:99:B5:7D:AA:2F:6A:A5:62:7A:22:3D:92:8D:44:05:23:67
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0CA2
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/AeekmbV9qi9qpWJ6Ij2SjUQFI2c.roa
Signing time: Fri 01 Sep 2023 09:59:25 +0000
ROA not before: Fri 01 Sep 2023 09:59:25 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9916
IP address blocks: 192.83.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3234 (0xca2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Sep 1 09:59:25 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=01E7A499B57DAA2F6AA5627A223D928D44052367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2d:e0:43:15:dd:d5:c6:ec:99:e3:e0:12:ec:
99:ed:13:6b:48:7f:05:ba:8a:af:66:48:08:75:02:
a2:46:39:ed:cd:b7:ed:ef:af:24:31:84:f5:ea:60:
5e:3e:a0:02:fe:e3:9b:4d:bd:2c:43:81:48:80:27:
05:49:7d:94:4f:af:7d:5c:60:e9:65:17:ad:ca:8d:
eb:06:77:fb:af:57:46:61:89:5d:74:9f:b3:97:55:
c0:b1:11:45:8d:01:f1:c7:7a:b0:72:b2:22:d8:8a:
4a:34:50:3a:68:51:f0:4f:d0:69:7d:dc:2d:1c:f8:
cb:0d:7f:28:75:13:6c:b7:0a:be:c6:c0:8b:be:84:
ac:88:a8:d5:96:88:f3:82:d4:c6:41:46:e9:21:ff:
23:99:88:7c:f8:42:9d:22:70:fb:7b:0d:d8:54:e9:
cc:e4:8d:0c:a8:6c:f0:a9:06:e3:99:3a:a9:34:0c:
d3:51:c1:cf:46:81:45:1b:2e:e0:fe:95:83:c2:b4:
4a:d4:ca:d9:0d:5c:da:34:0b:ad:f3:8d:da:48:06:
3e:c7:17:e9:d0:1f:ba:26:19:af:7f:81:de:8f:73:
3c:32:cd:95:f7:ae:ce:c3:88:59:96:a4:bf:e0:6f:
9e:7a:76:c8:99:43:40:22:01:3c:93:7b:13:8c:b6:
e9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E7:A4:99:B5:7D:AA:2F:6A:A5:62:7A:22:3D:92:8D:44:05:23:67
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/AeekmbV9qi9qpWJ6Ij2SjUQFI2c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.83.180.0/24
Signature Algorithm: sha256WithRSAEncryption
98:8e:00:72:c9:e1:1c:d3:d8:e7:e1:67:af:0f:d7:bd:7f:0e:
e8:33:07:c3:3f:5d:cf:df:39:80:eb:b0:da:79:1b:5b:5e:8a:
16:15:a1:f6:30:0e:9f:43:6a:28:c6:e8:90:c6:10:6f:3e:a0:
9a:c8:8a:89:1b:b8:cc:a4:58:72:d9:6b:e2:7e:ed:e2:5a:d5:
d7:bb:25:f0:7e:0a:80:dd:8a:24:3a:43:dd:62:f8:ef:9b:06:
bb:d9:a9:ff:94:78:25:73:ce:72:19:a6:80:4b:1e:55:12:54:
44:1a:80:40:e5:5d:80:1c:3e:5c:28:91:f8:6d:2c:eb:95:2e:
1a:04:69:81:c4:32:c0:0e:7f:0c:9b:35:85:e8:1f:ec:75:e4:
5b:79:cc:30:da:91:03:20:65:1d:01:e3:92:49:3f:8d:af:10:
98:86:96:57:6b:fb:cd:ec:bd:ee:93:fc:be:7b:8d:e5:4a:e5:
14:d8:d8:69:68:7e:df:31:b7:a4:13:dc:62:60:90:90:56:7f:
da:e4:2c:0e:d5:8e:bd:ab:bf:96:e8:3b:91:d7:8e:21:59:4d:
de:2a:b1:af:6a:a2:23:a3:5f:8e:89:76:7c:e9:1a:da:74:2c:
50:2c:6f:20:ed:ab:24:62:20:40:db:dd:2b:18:7c:ce:c3:eb:
b7:ed:02:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org