Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/GsYqNsq2gVt_pC8ISLuhCyW7AUU.roa
File: GsYqNsq2gVt_pC8ISLuhCyW7AUU.roa (raw, json)
Hash identifier: 7pLV9NylgeYiuMFvQaHC7SPsY/si8UXW1v5YBYvky3k=
Subject key identifier: 1A:C6:2A:36:CA:B6:81:5B:7F:A4:2F:08:48:BB:A1:0B:25:BB:01:45
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0CA0
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/GsYqNsq2gVt_pC8ISLuhCyW7AUU.roa
Signing time: Fri 01 Sep 2023 09:59:24 +0000
ROA not before: Fri 01 Sep 2023 09:59:24 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18047
IP address blocks: 140.114.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3232 (0xca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Sep 1 09:59:24 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1AC62A36CAB6815B7FA42F0848BBA10B25BB0145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:96:67:a4:c0:db:1b:de:b4:9e:0f:db:77:
00:31:55:b8:23:c0:8b:45:a7:ea:91:c1:c7:61:28:
c7:72:13:c3:55:09:62:16:d6:54:99:98:8d:a4:d3:
89:ab:1e:c9:7e:98:5d:cb:1a:09:15:e0:eb:85:55:
1a:ab:41:bb:98:8c:15:85:84:3b:82:2c:63:b4:52:
e0:52:65:29:ef:5c:b3:37:85:e4:3c:71:bf:6d:87:
87:0e:d2:63:d2:6a:47:d6:9e:9f:61:03:ce:20:9a:
52:8d:55:28:a8:47:69:ca:9b:7b:0f:2b:67:3e:8b:
e0:74:4f:ac:61:d2:3c:77:85:75:47:f5:13:1f:e7:
27:40:e3:ed:d1:d3:83:9b:35:cd:9a:89:5d:c4:32:
ff:de:fa:34:76:a5:3e:dd:88:e2:80:9b:59:6b:05:
65:ae:1c:ff:c4:c7:50:9a:44:56:52:b7:b6:26:13:
4a:42:10:66:26:4c:4b:11:c4:0f:60:90:49:cd:52:
e6:61:af:d2:9b:13:66:18:40:d7:3a:15:21:2e:9e:
ef:43:85:2d:46:79:7f:b5:6b:3c:11:14:c1:61:05:
bd:c9:90:43:fb:67:1e:bb:9e:d2:81:d1:40:f4:9a:
4e:c0:ed:d9:46:00:91:98:79:c7:75:6a:1c:8b:b8:
f4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C6:2A:36:CA:B6:81:5B:7F:A4:2F:08:48:BB:A1:0B:25:BB:01:45
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/GsYqNsq2gVt_pC8ISLuhCyW7AUU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.114.0.0/16
Signature Algorithm: sha256WithRSAEncryption
15:47:8b:83:c1:1c:21:f4:a5:1a:2d:f8:4f:16:59:8f:64:bb:
0e:95:e1:f2:e4:11:94:ca:4d:4c:64:ac:83:72:4f:55:88:ce:
de:f7:40:d9:d9:44:18:ab:17:c5:78:54:1d:61:f6:c6:31:34:
35:d0:fa:62:25:c2:8f:a4:cd:e0:5d:cf:01:1b:af:5b:11:47:
9b:7d:6d:84:f1:77:83:e8:fc:ca:f9:2d:7e:f9:b9:7c:4d:64:
b1:e8:55:95:34:a4:01:17:1b:c3:09:1b:45:9e:43:98:2a:f0:
f8:94:d2:e2:b1:f3:3c:b5:d4:be:6b:74:fb:09:d8:e2:4f:5f:
6b:a7:cf:8e:6a:3d:22:62:52:a8:4b:79:b3:96:5f:c6:bc:8e:
54:35:fc:83:30:26:ba:2c:ef:30:0a:79:5f:4b:97:5f:29:c7:
45:22:cd:69:96:c8:c2:d4:e7:00:6f:19:5e:99:aa:89:e7:14:
c2:dd:ef:8d:9b:c0:3b:73:e6:5e:21:de:25:ea:58:2d:74:4a:
83:88:d3:0e:2c:6a:4b:d0:aa:8a:9b:c2:4e:61:cf:f0:6a:86:
2c:24:c7:a8:d6:c1:5b:0f:88:81:c4:3a:1b:4c:77:0e:66:f1:
2c:f4:ec:a9:95:c4:26:69:67:fd:a1:f0:7c:05:96:80:9e:70:
1c:c6:97:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org