Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/OZGT-seRqR5Iz7VnNBrAKMBVfUk.roa
File: OZGT-seRqR5Iz7VnNBrAKMBVfUk.roa (raw, json)
Hash identifier: 4ADhL/rn+sld1SJfdgJc9kFvYA2Jk7Kv577Xtlitvx4=
Subject key identifier: 39:91:93:FA:C7:91:A9:1E:48:CF:B5:67:34:1A:C0:28:C0:55:7D:49
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0D19
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/OZGT-seRqR5Iz7VnNBrAKMBVfUk.roa
Signing time: Fri 01 Sep 2023 09:59:36 +0000
ROA not before: Fri 01 Sep 2023 09:59:36 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 1659
IP address blocks: 163.13.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3353 (0xd19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 1 09:59:36 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=399193FAC791A91E48CFB567341AC028C0557D49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:55:b9:ba:f7:54:65:ce:4d:cf:1d:cd:40:8b:
c2:dc:e8:12:95:3b:c9:6e:f4:0c:e6:ce:e5:ae:15:
62:db:10:f0:b0:3d:96:8c:cf:af:f2:df:0b:b2:a4:
99:7b:93:ab:a1:83:e6:df:6f:1f:e6:a2:00:c8:66:
1e:24:9a:48:79:ab:11:3f:fe:21:16:31:5f:c3:0f:
89:49:e4:a1:6a:36:c6:79:58:fe:42:b6:7a:25:64:
a6:1e:60:f3:8c:9e:3e:dc:fa:1e:84:f5:ad:e6:b7:
6c:46:99:85:a9:4e:c2:9e:4c:0e:60:ca:95:21:20:
6b:50:e6:9b:e2:bf:70:1a:cc:8d:4a:fd:26:e2:5c:
6f:7b:20:1b:3a:8e:d0:10:90:6b:d9:9e:f6:09:d9:
1e:55:16:cf:e2:27:e6:ae:45:63:66:52:f0:81:3d:
7c:4a:21:6d:38:20:fa:09:ef:5b:e3:ee:9b:d6:18:
c4:bd:ca:1f:00:af:17:2c:a8:aa:c8:07:ae:1a:d2:
9c:7a:6d:7b:c8:b2:a9:39:a7:0a:3c:b6:b9:15:47:
7f:06:96:a0:fe:db:a9:23:ca:ed:84:29:4b:5b:25:
c9:a1:cb:59:18:27:9c:88:26:81:8f:7a:48:da:ba:
11:cf:32:cf:ff:af:91:cf:02:e2:1a:a3:d7:16:90:
8d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:91:93:FA:C7:91:A9:1E:48:CF:B5:67:34:1A:C0:28:C0:55:7D:49
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/OZGT-seRqR5Iz7VnNBrAKMBVfUk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.13.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3e:6c:b6:84:83:0c:57:31:e2:7a:46:d5:8e:2e:0c:6d:92:a4:
92:b6:17:db:f6:56:93:5c:44:11:7b:0e:d6:5b:2d:ec:21:71:
8c:1b:28:fe:5a:49:f2:4b:48:99:0a:9f:37:29:ae:a6:46:d6:
85:4d:38:95:d3:ef:0c:e3:7a:e1:6f:99:57:d2:fa:fa:e6:d9:
d2:57:78:2b:0a:2a:10:c1:da:16:95:b1:fd:27:21:94:35:9a:
40:d4:e2:7a:96:e6:c5:50:83:df:51:dd:fb:cc:e7:85:ab:5c:
1c:bc:ee:a3:e8:db:64:fe:f1:4f:b5:1c:76:ca:4d:d3:9a:97:
d3:fd:f8:51:23:02:de:97:e7:73:3c:41:c8:0a:d3:0c:e2:89:
09:ff:a6:41:bb:90:45:5b:ff:f4:ec:46:bd:d9:df:06:8e:c9:
22:b9:43:66:dc:f5:ba:c1:4a:f8:4d:e0:fb:aa:cb:8b:12:f6:
0c:09:ab:a3:5a:21:fc:cd:f7:f5:03:ea:98:4a:d0:09:69:d9:
b4:24:8a:e0:10:ff:1c:07:ca:85:f2:aa:f1:c0:ad:7f:22:6c:
2d:60:0b:63:b9:16:9d:d4:2a:89:1c:04:93:92:26:7c:e9:43:
70:c5:51:1c:c9:e9:ea:51:af:fd:f1:ce:b6:e5:06:41:4a:a1:
4b:d6:2b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org