Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/Bo-L_zOX1AgazADM2Vf0oTf31lk.roa
File: Bo-L_zOX1AgazADM2Vf0oTf31lk.roa (raw, json)
Hash identifier: AbVdcaXbEaIC5N9M/7FDh+/GAnUYyEpbvBFIhwD2TiU=
Subject key identifier: 06:8F:8B:FF:33:97:D4:08:1A:CC:00:CC:D9:57:F4:A1:37:F7:D6:59
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0C9D
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Bo-L_zOX1AgazADM2Vf0oTf31lk.roa
Signing time: Fri 01 Sep 2023 09:59:20 +0000
ROA not before: Fri 01 Sep 2023 09:59:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38845
IP address blocks: 140.136.0.0/16 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3229 (0xc9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Sep 1 09:59:20 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=068F8BFF3397D4081ACC00CCD957F4A137F7D659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:03:99:9d:d6:9f:a0:54:e0:e6:0e:21:02:9d:
d4:a9:74:10:10:52:5b:0a:de:85:a9:5a:ab:49:87:
2c:11:fb:aa:46:4d:f4:5e:b3:5b:05:bf:a1:1c:2c:
89:ec:8f:8a:9d:8c:8b:47:70:01:7a:d7:2e:7e:7f:
28:21:e0:33:8d:7c:83:31:9c:de:79:fc:0a:16:a6:
9f:f4:ab:f9:e6:94:4b:68:63:f2:f2:71:bb:9d:0f:
56:1a:61:4a:66:c5:35:0d:67:7f:96:20:f7:b5:7b:
15:69:51:6b:a9:83:d5:46:44:a0:1b:59:9a:5e:7e:
cd:a1:19:74:74:af:89:f9:cf:bf:64:ab:60:83:68:
21:1b:ea:56:41:41:3b:84:07:2e:34:ca:5b:0d:f0:
a1:20:a2:be:92:6b:38:41:a0:29:b4:ea:c1:69:71:
ab:95:00:c7:63:b7:84:04:72:38:d6:a8:1a:66:5c:
e5:e5:9d:95:54:70:31:18:75:77:8e:c0:30:a7:01:
e1:cc:32:ea:f1:4e:6c:dc:0a:01:e6:5a:3d:15:85:
f9:82:18:7b:69:02:ee:35:5f:dc:32:1e:b0:5b:d2:
1e:73:ae:b5:74:c7:de:87:7d:bc:d2:83:1d:d9:48:
1f:45:90:36:47:2b:d6:26:36:76:db:6b:52:f6:7d:
98:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8F:8B:FF:33:97:D4:08:1A:CC:00:CC:D9:57:F4:A1:37:F7:D6:59
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Bo-L_zOX1AgazADM2Vf0oTf31lk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.136.0.0/16
Signature Algorithm: sha256WithRSAEncryption
03:9e:2f:90:6d:3a:7b:66:49:f7:36:b0:ac:b3:84:45:34:f2:
90:8f:fe:65:76:24:71:c8:0d:48:6c:6d:a4:a4:2c:5c:fd:7e:
e0:e8:f5:1c:89:b0:35:b8:f1:94:78:9a:27:13:8e:af:14:7d:
0d:8d:92:97:3f:83:e3:c2:81:1f:65:f2:a6:eb:47:1d:27:34:
80:6a:fa:7b:f7:64:7c:47:ee:ad:ae:5d:54:1d:33:64:fe:4c:
12:6a:30:70:b8:41:eb:0c:db:75:5a:24:80:80:dd:c0:fc:3c:
b1:a7:61:72:d5:4f:42:5f:17:03:e4:6d:ac:47:59:25:cf:37:
fe:a8:21:25:21:f4:4b:e7:c7:90:2e:9f:9f:99:f4:bf:97:1e:
b3:2e:28:08:49:fe:82:02:a4:30:1b:ca:3a:3f:2f:43:ec:a9:
89:5d:a1:a6:8b:c0:4f:6c:89:3d:d9:34:dc:ef:2e:1f:97:da:
c4:8b:ac:a2:1e:9e:a0:e4:8b:ad:85:e7:b3:09:a6:3c:bd:c4:
1a:28:9f:97:1f:30:04:75:0a:bc:f5:8a:09:bf:c2:85:aa:4d:
49:25:e6:7d:32:e5:8d:37:44:ba:75:6a:74:01:d2:24:14:27:
1a:0b:b3:61:de:90:39:97:e9:e6:b1:8b:67:ab:e0:5d:af:74:
5d:da:b5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org