Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/JTGfJv_-H6LE72rWNJmp_pmlpWQ.roa
File: JTGfJv_-H6LE72rWNJmp_pmlpWQ.roa (raw, json)
Hash identifier: bJb195jNBiKtHbus9jdATxekiekomT1JQxf9X/z3g6U=
Subject key identifier: 25:31:9F:26:FF:FE:1F:A2:C4:EF:6A:D6:34:99:A9:FE:99:A5:A5:64
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0D01
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/JTGfJv_-H6LE72rWNJmp_pmlpWQ.roa
Signing time: Fri 01 Sep 2023 09:59:22 +0000
ROA not before: Fri 01 Sep 2023 09:59:22 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18185
IP address blocks: 120.117.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3329 (0xd01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 1 09:59:22 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=25319F26FFFE1FA2C4EF6AD63499A9FE99A5A564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bd:0b:61:b8:54:d4:03:30:10:d0:dd:5c:c6:
e8:73:d8:cb:bd:e3:19:7c:d5:e2:9e:0e:f2:9e:97:
77:2b:e5:f9:c6:fd:47:75:aa:b0:91:a9:30:bf:1a:
42:7f:d9:5a:81:cb:28:aa:61:f9:80:d7:d6:9b:1c:
a3:27:05:68:f8:02:9c:4a:e7:f6:dd:ca:df:0a:ba:
59:e3:c3:cc:a4:f4:7c:1a:0c:01:e3:72:29:c0:59:
ca:c3:6b:4d:be:4c:7e:34:37:56:79:53:e5:6e:af:
a0:8e:24:32:cc:8f:82:2b:fc:cf:f2:01:9d:09:a7:
06:c9:46:f2:a2:cc:dd:cf:fe:0b:d6:eb:8c:4c:f3:
5a:ab:ab:fe:f1:95:dd:49:5a:83:a1:ba:21:eb:48:
5d:38:d7:2e:e9:0e:39:7d:8f:46:e3:c5:e0:ed:ab:
29:5c:2c:c8:ec:0b:f2:ff:58:9c:25:e1:9d:85:58:
0a:20:c1:5b:1f:07:1a:3d:dc:1b:c3:c4:0a:0e:d5:
cb:0a:d9:d6:98:2c:0b:c2:67:c8:2c:3d:68:f8:df:
59:0e:7e:1d:4c:c0:b6:3d:26:13:15:21:2f:1a:fa:
3d:ab:0b:73:f4:81:1e:73:93:41:0f:3b:39:db:1e:
0e:df:7f:52:df:b5:7e:eb:23:fb:4c:ce:04:41:8d:
5b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:31:9F:26:FF:FE:1F:A2:C4:EF:6A:D6:34:99:A9:FE:99:A5:A5:64
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/JTGfJv_-H6LE72rWNJmp_pmlpWQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.117.1.0/24
Signature Algorithm: sha256WithRSAEncryption
15:9a:e3:a5:ec:98:8e:62:45:47:b2:ef:99:ad:73:7b:28:63:
8b:d3:11:09:f0:33:82:70:06:dc:73:18:cf:8a:c6:a7:d8:19:
19:84:d5:6d:a6:10:a7:8f:89:02:fb:b0:f3:b6:72:a0:a0:6d:
b3:37:5a:7c:db:7b:7a:5d:84:4b:b8:1a:b6:7e:37:c5:aa:b3:
9b:76:44:60:18:bb:6b:a7:53:f3:54:27:48:ef:61:2c:dc:0f:
34:12:21:2b:72:57:bb:60:49:6a:41:ee:58:0c:f7:ed:50:1f:
39:9a:ea:ac:10:64:70:09:c5:8d:20:64:8d:f6:94:d5:48:b7:
0c:eb:f9:0a:cc:0f:cd:46:2e:fd:99:25:85:92:8d:f1:d3:d6:
24:22:59:a4:54:44:3e:54:62:b6:06:b6:92:c7:7a:ec:e7:f1:
85:ec:00:19:93:c2:f2:f2:80:0a:ed:d0:04:3f:7c:2d:d1:a1:
ba:09:ad:e4:ed:2c:0d:a6:0b:1f:f7:ad:83:0e:56:50:33:50:
5d:ee:0b:15:1a:70:d5:5c:ab:26:5a:27:fe:15:7e:ed:c5:93:
b7:ab:f1:0d:c1:f6:c7:46:aa:c4:72:fa:00:18:f5:c8:9e:80:
7d:e3:ac:4e:59:1c:d1:4b:cc:07:65:31:5b:f9:f8:17:6f:fd:
46:b3:de:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org