Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/Le_ChCY3zQgyD9id9Le2FRh_8ig.roa
File: Le_ChCY3zQgyD9id9Le2FRh_8ig.roa (raw, json)
Hash identifier: Q79wnFG7M+GD2ZEZn5yqY9qbuPLS0fdUiKHn2XDwSRM=
Subject key identifier: 2D:EF:C2:84:26:37:CD:08:32:0F:D8:9D:F4:B7:B6:15:18:7F:F2:28
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0CF4
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Le_ChCY3zQgyD9id9Le2FRh_8ig.roa
Signing time: Fri 01 Sep 2023 09:59:16 +0000
ROA not before: Fri 01 Sep 2023 09:59:16 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18185
IP address blocks: 120.117.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3316 (0xcf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 1 09:59:16 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2DEFC2842637CD08320FD89DF4B7B615187FF228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:98:9a:b8:3a:59:44:4c:1e:21:f8:1d:a2:0a:
23:e9:52:a5:9c:c4:38:17:5f:87:b8:3d:16:04:0d:
6b:47:fe:52:79:87:92:d6:58:bd:b6:bf:c8:3a:43:
90:c0:e4:35:71:e8:02:d0:87:1b:cd:cd:1c:49:64:
e5:70:3f:26:15:9f:f9:ab:6a:40:7e:dd:d6:a6:25:
a9:3e:48:71:39:b9:85:52:27:a3:e1:5c:43:00:92:
8e:3d:c3:fc:11:0a:3c:70:56:61:7f:c9:12:6f:ef:
3a:a8:8a:36:23:c0:00:19:52:4e:64:8b:fe:6d:8a:
aa:ea:f7:b9:7b:b9:26:8b:49:48:1b:0a:06:7a:9e:
68:4f:7d:00:c0:17:b7:df:38:53:ca:89:bf:f8:1d:
64:8e:d4:4f:a3:c5:22:c1:2e:f3:ce:6f:2f:a0:76:
21:fd:6f:53:e2:e2:ee:bd:00:43:af:03:90:16:a6:
20:0c:f4:e4:c1:e3:8a:96:59:b4:a3:23:75:0b:a9:
2b:e0:01:b9:f7:40:46:c9:75:2c:1f:40:69:b8:46:
d3:fd:e5:66:2c:77:cd:9a:f4:18:bd:6a:a7:d2:3d:
95:23:30:9c:dd:65:c7:5c:9d:75:ae:ee:35:5f:0f:
87:39:ef:20:dd:ff:af:4b:ee:ec:fe:1a:37:03:8d:
5c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EF:C2:84:26:37:CD:08:32:0F:D8:9D:F4:B7:B6:15:18:7F:F2:28
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/Le_ChCY3zQgyD9id9Le2FRh_8ig.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.117.4.0/24
Signature Algorithm: sha256WithRSAEncryption
08:2d:37:61:c6:f1:dd:1d:b1:99:b1:a3:8c:31:10:63:7c:49:
a1:6a:27:2d:78:4c:53:1e:18:e5:10:12:a5:d9:c2:aa:d8:99:
d8:5a:ad:b4:79:4e:26:e9:99:a0:f6:c8:7c:b3:1a:4f:86:d2:
3a:ce:7f:7b:06:31:a1:10:73:64:f0:9c:65:bb:33:bf:9b:32:
cb:67:18:e2:03:0a:c2:43:fa:20:b7:39:5e:cc:43:8a:2b:0c:
c9:15:7b:c8:45:55:02:98:c4:08:9c:ec:6f:f1:ce:bb:a3:31:
82:cf:e4:26:d1:fc:c8:58:09:f0:47:4c:a9:98:bd:87:ab:70:
09:50:21:a2:40:76:51:4c:aa:cc:84:eb:4e:71:3d:90:71:ea:
b9:03:f5:17:10:ca:db:55:85:14:ed:76:02:0f:94:bf:99:ee:
49:39:c9:92:8f:6b:35:07:2b:e3:3d:72:af:a7:dd:d2:f0:d6:
62:af:03:8a:a0:43:99:18:e2:66:eb:5c:50:97:75:41:af:af:
f2:39:8a:bd:46:f4:4f:01:7d:bd:b0:7a:7b:75:92:6b:9d:9d:
ab:48:97:ea:c0:3e:6f:91:ce:5a:65:f0:a2:0c:89:5d:0b:ca:
e5:b5:d2:75:c6:f4:76:b3:63:aa:d2:44:11:95:87:c4:0a:c5:
cc:d5:b4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org