Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/KTdmhAoZSSh6G5GPWM0pOiBPi6g.roa
File: KTdmhAoZSSh6G5GPWM0pOiBPi6g.roa (raw, json)
Hash identifier: KGlsf4iD5tARL7dyqjyfV5+MuB4b0lQeYmt6OvcMwD0=
Subject key identifier: 29:37:66:84:0A:19:49:28:7A:1B:91:8F:58:CD:29:3A:20:4F:8B:A8
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0D11
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/KTdmhAoZSSh6G5GPWM0pOiBPi6g.roa
Signing time: Fri 01 Sep 2023 09:59:32 +0000
ROA not before: Fri 01 Sep 2023 09:59:32 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 1659
IP address blocks: 120.96.0.0/11 maxlen: 11
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3345 (0xd11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 1 09:59:32 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=293766840A1949287A1B918F58CD293A204F8BA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:69:79:9a:53:01:9b:37:2a:d8:fa:78:74:86:
d2:23:25:50:5a:25:cb:48:bc:96:e5:bf:a0:07:5e:
95:be:24:13:ac:a0:2f:a4:4c:7b:e4:2a:c5:ea:f9:
88:6c:5b:96:40:0b:ef:37:c0:a4:86:2b:3e:19:e6:
7d:ec:b8:cc:48:fb:80:80:af:14:2b:39:5c:af:ad:
6b:7a:dd:45:01:95:5a:e4:4f:45:1d:70:fd:64:fd:
9c:93:3e:e1:47:7b:59:53:72:14:80:32:58:d5:58:
68:0d:2e:79:21:15:f7:f6:c5:e2:65:70:8e:16:36:
0e:6f:72:ba:a6:de:3b:0b:f7:a7:9b:4e:14:b6:a4:
90:b8:a4:ab:13:0a:a2:f0:f3:c4:bf:ef:55:44:cf:
d0:d6:60:af:48:f5:5a:1b:ae:50:0a:28:d7:31:2d:
75:42:5d:f9:db:79:f1:fa:82:8c:bd:d2:2d:3a:6e:
73:47:de:ac:38:5f:da:ee:c3:06:17:91:c7:e6:11:
4e:3d:dc:4c:4f:7b:b8:46:6e:00:6d:a7:dc:a3:0b:
d9:5a:5f:78:cc:cd:a8:18:43:4c:92:d2:20:f8:dc:
36:0a:f7:e9:70:f9:30:c4:35:b1:2c:4f:fc:65:50:
ef:ce:9e:5f:f6:7d:64:24:fb:73:32:69:0c:9b:c1:
a2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:37:66:84:0A:19:49:28:7A:1B:91:8F:58:CD:29:3A:20:4F:8B:A8
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/KTdmhAoZSSh6G5GPWM0pOiBPi6g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.96.0.0/11
Signature Algorithm: sha256WithRSAEncryption
52:50:d1:74:5a:91:14:8e:bf:a0:e1:dd:86:c3:10:88:75:20:
42:d8:b0:fa:98:b1:33:be:47:a3:1a:de:3f:ea:e5:7b:65:28:
c6:fc:86:4d:c1:2e:5e:76:ca:ac:31:88:1a:79:7b:5f:21:9b:
36:50:94:3a:d2:68:69:ef:5e:91:53:e4:1e:6f:7b:7c:c6:d5:
65:47:ec:ab:7f:81:f5:3c:c5:db:ee:65:94:ca:53:e5:72:0c:
cd:a1:92:1e:f4:14:5c:7f:9d:e3:c2:bc:b3:f0:be:77:44:68:
b6:bf:05:54:49:d8:78:4d:de:8b:c4:bd:1b:90:aa:7a:a3:a9:
2e:08:52:a4:37:dd:f1:39:e4:ec:d6:e6:c2:1f:60:fa:69:bc:
33:e8:92:c1:b1:12:98:77:b5:e6:59:1d:c4:ae:fb:50:22:66:
7e:d3:f9:19:9f:2b:54:a3:b5:06:fa:9a:47:3f:16:df:0c:58:
a8:4e:21:ac:12:10:09:7e:a6:ec:c2:50:67:22:4b:f4:11:d8:
ee:fe:82:7d:5e:26:43:06:2e:ef:d2:be:04:b7:1d:c0:c8:d1:
dd:56:0a:a9:97:03:44:6f:64:e8:7e:39:f9:30:c0:81:b1:71:
2c:9b:49:80:06:47:75:62:ef:f6:53:56:f2:c2:6f:36:ef:71:
b8:82:91:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org