Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/R3mTwf-jeEVbSf4UmycnGPnG7PE.roa
File: R3mTwf-jeEVbSf4UmycnGPnG7PE.roa (raw, json)
Hash identifier: qfb5G/rtycNSR/9vXjE/21PXCHvFkYaKbBz+47dhVmw=
Subject key identifier: 47:79:93:C1:FF:A3:78:45:5B:49:FE:14:9B:27:27:18:F9:C6:EC:F1
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0CB8
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/R3mTwf-jeEVbSf4UmycnGPnG7PE.roa
Signing time: Fri 01 Sep 2023 09:59:37 +0000
ROA not before: Fri 01 Sep 2023 09:59:37 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38844
IP address blocks: 140.122.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3256 (0xcb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Sep 1 09:59:37 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=477993C1FFA378455B49FE149B272718F9C6ECF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bf:5f:98:54:cf:f2:38:3d:28:73:18:51:b3:
3b:68:d1:e0:37:9f:19:1a:21:04:35:a9:d0:9b:f9:
54:26:04:ba:bd:01:01:b0:d6:54:29:02:63:7b:99:
59:f3:00:ca:ac:60:5f:aa:cc:96:53:dd:06:11:ea:
91:12:b3:49:b1:6b:72:41:06:68:d0:08:0d:08:4d:
5e:ba:1c:0a:1e:bf:4f:be:30:86:15:bd:28:11:53:
ae:f9:42:30:57:50:e4:aa:fe:fa:06:43:87:40:5e:
7b:d8:ce:5b:0b:07:07:a4:c3:5a:da:b7:1b:23:70:
be:6e:ef:c2:2c:ca:58:dc:3d:fc:bc:03:92:90:07:
71:55:fa:b4:76:ee:14:5c:a0:63:7d:e8:62:90:94:
35:10:db:1a:08:6f:e6:24:bc:4b:04:d2:a7:55:a7:
89:f3:6d:8a:82:58:4d:87:af:5d:cd:d3:48:e9:42:
8a:9f:c6:17:41:bb:6b:7f:4d:75:ef:23:ad:1a:59:
ff:b1:61:62:7f:60:f1:98:49:db:ba:59:22:c7:28:
be:75:ee:4d:be:83:39:53:c8:f6:b6:84:41:df:42:
35:11:8b:0e:b9:06:5e:dd:ff:85:2a:c2:0b:be:d1:
91:6f:37:81:18:79:1a:a2:86:ee:39:85:c8:44:74:
dc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:79:93:C1:FF:A3:78:45:5B:49:FE:14:9B:27:27:18:F9:C6:EC:F1
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/R3mTwf-jeEVbSf4UmycnGPnG7PE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.122.0.0/17
Signature Algorithm: sha256WithRSAEncryption
9c:b9:0a:5a:95:9e:80:cb:19:d5:7e:5f:ee:3b:4d:37:87:8f:
df:dd:0f:4e:d0:cc:98:59:0b:0f:0e:bf:e3:45:08:2f:ff:04:
f4:7c:14:66:50:f5:94:60:62:02:d9:bc:ea:75:1c:c9:97:59:
25:dc:06:47:68:57:e8:a8:26:7b:e0:7e:95:6f:5e:e0:1b:3e:
56:38:76:84:e5:0f:14:0f:6a:59:67:92:b0:09:9e:18:db:4a:
44:36:fd:ce:4c:ce:5c:50:5b:8c:2f:4b:78:53:d5:dc:3d:ff:
00:cb:1d:d7:cd:e8:fb:1a:85:59:c3:80:41:b6:4e:4e:5e:02:
81:1b:8e:5f:e6:68:62:a1:89:59:cc:24:7c:05:2a:09:e1:90:
67:f5:bb:a6:d4:5f:3e:3b:48:61:c1:d5:b7:b8:4d:4c:6b:a8:
88:9c:71:c5:29:53:f0:29:75:85:31:f7:97:f1:54:4d:9f:cf:
61:4e:6f:64:c8:de:44:2b:a4:a6:04:03:77:d9:26:b8:4b:68:
7c:36:62:77:75:d7:55:63:05:68:0c:c7:6e:50:7b:ab:01:56:
cf:bd:d7:0d:3a:df:35:2b:b9:a6:09:05:22:e2:11:ec:7a:c3:
35:3a:67:af:7e:a8:a9:2f:05:40:f7:ec:c4:47:6d:e8:2b:3f:
95:54:b8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org