Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/Gv57ynwl93_n8gy0HaQD9hiOKj0.roa
File: Gv57ynwl93_n8gy0HaQD9hiOKj0.roa (raw, json)
Hash identifier: QkH9VY0RNmnDgtclKYrdjN/woh/sZFf0HqVijoz/SrQ=
Subject key identifier: 1A:FE:7B:CA:7C:25:F7:7F:E7:F2:0C:B4:1D:A4:03:F6:18:8E:2A:3D
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0CAA
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Gv57ynwl93_n8gy0HaQD9hiOKj0.roa
Signing time: Fri 01 Sep 2023 09:59:29 +0000
ROA not before: Fri 01 Sep 2023 09:59:29 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 1659
IP address blocks: 140.138.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3242 (0xcaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Sep 1 09:59:29 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1AFE7BCA7C25F77FE7F20CB41DA403F6188E2A3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ad:dc:91:61:9e:2d:de:b7:ac:0c:99:d0:6e:
db:e0:17:f6:a2:a6:d7:22:de:fe:3e:4e:cc:5e:f8:
1f:92:7d:03:c1:7a:95:e0:a0:04:0e:89:e9:85:4a:
0a:87:cf:b9:7a:86:d1:b0:67:37:90:b3:e3:d0:4f:
d1:3e:02:99:e2:45:4d:c3:3d:fd:c6:88:ff:c2:d3:
b7:f3:ac:5c:10:4f:e0:aa:00:16:56:fd:af:6a:1d:
4a:b9:34:10:59:04:11:6e:11:46:e1:12:3d:60:6d:
f6:21:64:2e:30:bc:39:0c:0f:b1:d4:46:d8:e7:44:
d9:89:c2:60:67:86:39:29:c3:2f:59:92:53:8a:a4:
50:06:c4:e0:50:b7:e2:56:2b:31:9f:7d:4d:9a:33:
04:66:1c:11:d1:18:f1:70:04:09:c3:0f:24:a4:30:
ad:73:0b:15:03:29:56:d7:b9:0b:0e:a5:04:6f:31:
2e:6f:92:3c:f7:42:44:66:47:b0:9b:c6:e8:36:ed:
33:1d:cf:d6:d4:0a:1f:fe:6d:ce:da:dd:48:20:9c:
e9:86:51:09:8f:0d:5d:db:df:38:0a:9a:66:d2:29:
9b:f0:a8:b5:f5:0f:d0:0f:be:93:77:5d:3b:10:b8:
d4:f3:71:8d:cf:8a:61:6b:af:f6:18:e3:d9:31:dc:
f9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FE:7B:CA:7C:25:F7:7F:E7:F2:0C:B4:1D:A4:03:F6:18:8E:2A:3D
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Gv57ynwl93_n8gy0HaQD9hiOKj0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.138.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:2c:ce:fb:44:ad:b5:6f:de:de:5d:90:b3:3c:88:12:2b:71:
e8:39:37:6c:3b:a5:15:d9:a7:44:56:59:ed:2a:aa:e4:01:ae:
7b:d0:e0:05:e4:07:e2:1b:be:00:d2:41:80:6b:4a:11:f3:22:
48:43:1f:53:a5:ea:a8:ec:6f:34:3d:1e:77:6c:74:f2:3c:1a:
69:2a:78:43:7e:78:20:92:a0:0b:2f:61:74:e6:c6:a4:74:b6:
43:b8:aa:9c:79:38:4c:af:a7:58:74:5b:12:fc:d9:93:1c:28:
c5:ad:56:11:2d:97:a0:6e:c6:35:cb:f8:5c:65:53:59:25:cf:
39:02:5e:6b:18:09:97:ef:94:5c:7b:d8:b0:9e:85:46:f4:bd:
89:d7:67:06:51:a2:10:cd:90:50:13:f9:64:d5:a7:ec:c5:8d:
89:34:e9:b9:6d:17:a9:72:cd:47:ef:d6:31:f3:b9:59:86:7f:
5f:3c:72:9e:47:ce:86:2e:b4:9d:81:56:cc:2f:83:9f:2f:a6:
ab:9a:40:43:19:31:d2:d6:71:e4:41:aa:59:a2:ee:5f:44:10:
5a:cc:48:9e:c4:7e:93:fe:d7:6b:ff:5b:e0:f0:79:88:5e:40:
7f:f4:a9:b7:aa:15:de:35:dc:14:27:de:e9:e5:82:c3:0d:50:
a1:ff:19:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org