Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/WXQYNKmzi0jVa7aDH3A4DFtneyw.roa
File: WXQYNKmzi0jVa7aDH3A4DFtneyw.roa (raw, json)
Hash identifier: j/djxvrvc9HZi/XRxJ1hY+0E8AVuOFuJztNthjwhcMA=
Subject key identifier: 59:74:18:34:A9:B3:8B:48:D5:6B:B6:83:1F:70:38:0C:5B:67:7B:2C
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0CA6
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/WXQYNKmzi0jVa7aDH3A4DFtneyw.roa
Signing time: Fri 01 Sep 2023 09:59:27 +0000
ROA not before: Fri 01 Sep 2023 09:59:27 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9916
IP address blocks: 140.113.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3238 (0xca6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Sep 1 09:59:27 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=59741834A9B38B48D56BB6831F70380C5B677B2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3d:7f:d5:8f:7b:5d:07:78:ec:78:ad:a9:86:
65:f0:6d:24:6f:21:25:26:4d:9f:f1:24:84:5f:6a:
f7:11:4d:88:0f:33:f4:78:ac:70:a1:36:59:e2:a2:
c3:57:21:73:8e:7f:3d:8a:14:61:70:14:2f:91:a1:
b1:01:0b:e1:9d:eb:67:d1:4c:0a:df:87:10:d7:04:
49:88:6d:58:49:be:6b:73:01:b1:b8:b2:44:d6:6f:
3f:9e:ca:c0:b1:c4:72:38:f8:53:ae:ab:03:fd:bb:
93:ad:9c:7f:3f:2a:39:81:d0:5f:3c:9f:83:8d:a7:
11:00:6b:1c:13:f2:cd:4d:4d:f8:ba:53:23:ec:2a:
a0:8d:a3:22:b8:0c:09:4b:4f:5c:0b:ae:fb:c5:09:
4a:29:a1:cf:a0:47:25:52:a0:a4:db:22:76:29:e3:
f3:4c:2b:22:f5:74:7b:93:f1:39:86:85:f2:6f:84:
59:18:0a:a7:b3:48:bd:dc:44:f6:80:6f:30:d1:e4:
68:ea:7a:45:04:ec:4b:63:0e:35:dc:39:5f:ac:a9:
b8:ed:26:fa:c1:53:21:ab:f4:bc:ad:70:26:ac:de:
af:51:6b:e5:3f:38:e9:85:bd:f1:87:2a:f1:2e:62:
db:f6:10:1b:3c:7a:86:6e:62:6b:de:e3:23:e6:a0:
ca:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:74:18:34:A9:B3:8B:48:D5:6B:B6:83:1F:70:38:0C:5B:67:7B:2C
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/WXQYNKmzi0jVa7aDH3A4DFtneyw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.113.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1d:a5:b8:9b:5f:52:a5:a1:8d:05:33:bf:18:27:19:49:5e:23:
c3:34:ba:e1:21:b4:12:3c:b8:d5:b3:dc:54:c5:b2:47:5d:40:
dc:b8:83:f1:fd:41:2a:5f:87:9a:8b:13:89:4f:94:34:08:52:
59:df:05:51:6d:75:3a:9e:a1:ce:21:d8:f8:32:bd:a6:3a:af:
c4:52:06:67:06:2a:4d:ce:dd:12:f4:47:05:24:82:1f:b2:bc:
f9:94:02:c0:7f:eb:5d:ea:df:b6:68:9c:62:ef:cc:67:7a:91:
2a:34:b9:8e:1c:5b:8e:58:4b:b2:4e:2a:87:74:27:3c:03:cc:
63:73:5c:d8:96:2a:1a:30:d0:b0:48:57:25:d5:05:a6:79:fd:
a1:f2:25:04:a4:25:8d:96:c3:20:9b:f4:1f:c2:98:5f:f7:eb:
8d:21:93:61:bf:d3:45:a6:5f:79:b7:6f:6e:46:9d:a2:29:9a:
98:7c:54:5d:04:95:21:a5:de:b3:d4:11:81:35:54:8e:6b:c6:
51:54:40:8a:be:cd:6d:b4:79:33:a4:74:f2:fc:d3:91:76:c0:
66:59:f7:2e:bc:52:0a:f2:ec:77:ae:7d:26:a6:0d:df:a5:12:
ed:95:bc:0c:ce:e0:62:b5:87:af:10:b6:b7:7a:55:65:48:e7:
52:64:c5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org