Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/GjTaMfZYVF0cLwcx8-iGHdv35xI.roa
File: GjTaMfZYVF0cLwcx8-iGHdv35xI.roa (raw, json)
Hash identifier: gD/NB9EnQ1CHAUk2hPKBK+rezbS4Qbj9qHGaqzi7Zu8=
Subject key identifier: 1A:34:DA:31:F6:58:54:5D:1C:2F:07:31:F3:E8:86:1D:DB:F7:E7:12
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0C9E
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/GjTaMfZYVF0cLwcx8-iGHdv35xI.roa
Signing time: Fri 01 Sep 2023 09:59:22 +0000
ROA not before: Fri 01 Sep 2023 09:59:22 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9916
IP address blocks: 140.129.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3230 (0xc9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Sep 1 09:59:22 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1A34DA31F658545D1C2F0731F3E8861DDBF7E712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:99:91:77:8a:31:7d:60:88:72:20:86:61:67:
50:b8:c4:30:09:c6:8a:49:8a:0f:d9:2f:f9:a0:40:
bc:94:d2:ee:f9:c1:79:3d:cf:7a:9e:0e:3a:31:cd:
1c:73:21:14:a8:4d:e8:a5:d2:37:36:7f:fb:e5:be:
97:ab:d1:d3:a6:ee:b2:75:b6:83:9c:34:5f:7b:19:
a1:81:40:1a:07:bf:f2:37:7f:aa:09:76:1c:24:5e:
f5:cd:41:e0:16:88:f5:52:25:f8:34:ab:84:fe:eb:
84:77:aa:8e:3b:e1:b6:17:27:8f:ad:62:bd:3d:40:
fc:09:a8:1c:34:60:55:79:73:48:dc:55:b3:b0:7e:
12:32:88:85:0a:fb:50:69:0b:0b:ae:ca:b9:fb:9e:
c5:a2:e0:c6:c9:0c:ad:0d:f8:24:48:84:77:43:44:
14:de:1b:a0:8a:33:d9:b8:5c:cb:34:5e:16:c0:ba:
78:d2:33:7e:07:00:fc:c2:72:08:c6:db:49:75:0a:
18:c3:6c:b5:5a:c6:e3:35:09:ce:6c:3a:85:ed:42:
af:9b:aa:62:bb:22:9b:2d:d3:58:58:58:44:b2:a5:
0e:f4:bf:48:6b:c1:c9:dc:c9:2f:e3:16:fa:e1:c5:
e8:1e:26:1e:e7:c1:2d:c2:e3:27:77:62:be:a3:4f:
55:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:34:DA:31:F6:58:54:5D:1C:2F:07:31:F3:E8:86:1D:DB:F7:E7:12
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/GjTaMfZYVF0cLwcx8-iGHdv35xI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.129.80.0/24
Signature Algorithm: sha256WithRSAEncryption
42:bd:da:70:f6:e2:53:28:38:40:c1:55:1e:82:de:e8:21:bc:
a1:20:6d:4f:c6:96:92:b3:34:98:2d:8a:15:d1:63:31:93:03:
d2:05:6b:b9:12:d3:86:75:03:03:a0:7d:74:65:de:44:90:25:
0f:bc:ad:56:ca:cd:53:11:6f:64:a4:90:b7:88:1b:23:01:ef:
7c:71:28:39:46:df:70:72:da:f8:17:39:a7:35:8c:50:ed:5f:
72:5b:bd:6f:0f:35:4c:4b:39:20:bc:a9:d7:7f:6a:be:1a:25:
1c:f4:03:20:0d:5c:05:2e:a3:06:93:2c:ff:ea:27:a4:41:3d:
ab:6f:ca:79:41:54:74:04:c7:c4:9c:6b:ca:61:eb:bc:dd:e8:
fa:eb:f1:5f:9f:0c:0e:70:dc:ba:3d:03:33:7a:4d:0c:0a:2f:
6b:c6:b4:c5:e8:8e:65:f9:6e:97:15:e3:b1:67:f2:28:0d:d7:
01:73:bc:1b:3e:26:29:23:e8:12:56:41:0f:15:c7:63:04:2b:
63:30:bf:96:50:27:b6:74:a3:35:dd:1c:d3:82:ae:9f:b6:a4:
f3:9f:3b:9d:59:64:4a:26:f1:b3:a2:08:9d:6c:86:9f:ca:5a:
28:0d:97:58:d0:2d:25:83:58:e3:8d:ef:58:d2:51:03:23:e2:
3d:86:3b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org