Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/X2y9Ws_3FArLWdnP-u4zZPL8BbQ.roa
File: X2y9Ws_3FArLWdnP-u4zZPL8BbQ.roa (raw, json)
Hash identifier: LtSi7LxUPZehm/9OwOdHc5u9jsZB2yNC4tYGB3aOg88=
Subject key identifier: 5F:6C:BD:5A:CF:F7:14:0A:CB:59:D9:CF:FA:EE:33:64:F2:FC:05:B4
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0D1C
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/X2y9Ws_3FArLWdnP-u4zZPL8BbQ.roa
Signing time: Fri 01 Sep 2023 09:59:38 +0000
ROA not before: Fri 01 Sep 2023 09:59:38 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131150
IP address blocks: 163.32.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3356 (0xd1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 1 09:59:38 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5F6CBD5ACFF7140ACB59D9CFFAEE3364F2FC05B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:c3:f7:ee:77:a6:0a:9d:15:e7:74:93:12:
3b:5a:a3:0c:77:de:6e:20:7b:46:f1:df:94:75:03:
be:1b:79:35:28:7e:6d:9f:d4:37:50:a1:ba:dc:a0:
54:ae:de:ab:18:2d:bb:e3:22:2b:32:67:d8:a1:3d:
b0:26:b3:09:72:71:45:4e:71:15:07:b4:07:e7:54:
ad:d0:30:e5:b9:fa:1a:7f:e3:df:a2:d9:2b:8a:6f:
aa:95:fa:2c:60:e8:33:ea:eb:36:ee:36:b7:89:46:
d0:02:29:8a:3a:3e:b5:2b:22:b1:86:b7:7d:8d:c8:
ae:29:d9:73:23:17:46:29:58:fd:cb:21:ba:84:98:
da:81:db:e0:87:b3:1f:8d:2d:24:8e:fc:1f:1a:da:
3d:a5:27:14:2a:62:44:44:14:f8:d2:a4:b0:33:58:
6c:79:ee:48:18:f7:f3:2e:6a:91:df:95:3f:60:2e:
a5:8c:5e:72:63:4a:d8:c1:33:d3:ba:a7:ec:ba:cc:
52:bd:13:6d:60:96:eb:f0:a6:8e:3e:0f:d9:46:d2:
37:d8:5a:65:b3:36:46:d5:79:81:91:b9:9d:4c:2e:
48:96:62:a8:fd:e5:75:bf:09:72:a9:32:73:12:cf:
80:93:26:40:6b:62:79:af:ff:ee:bb:04:6d:48:08:
7e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6C:BD:5A:CF:F7:14:0A:CB:59:D9:CF:FA:EE:33:64:F2:FC:05:B4
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/X2y9Ws_3FArLWdnP-u4zZPL8BbQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.32.240.0/22
Signature Algorithm: sha256WithRSAEncryption
83:f3:5a:16:72:a9:5c:82:f0:b0:90:ad:9f:2b:0a:fb:2e:cb:
ed:7b:63:1b:a4:fa:43:1c:81:10:2d:7e:88:f2:37:60:a0:2c:
9b:35:49:a4:cc:5f:5d:68:66:9c:d8:d1:14:dc:72:b8:a5:3b:
66:e6:ee:06:d6:e0:fa:50:1a:5a:7a:a5:8a:69:76:25:3e:18:
94:80:d8:7b:ba:d8:5a:47:2a:42:f5:77:fd:c1:44:b1:dd:d0:
13:5a:9b:ed:30:af:96:0b:1a:aa:1a:ed:e0:86:0c:b7:35:f7:
1f:c0:68:02:7f:6e:44:d9:81:5c:f2:f6:13:80:be:4b:32:bc:
a2:26:40:b8:3b:74:cf:9b:06:1c:29:e8:12:f1:ca:f6:1a:24:
6a:c4:10:ff:4b:ab:d7:ab:e9:8f:ce:3c:ee:c0:b1:59:0f:db:
cb:75:59:d8:70:01:92:9f:7f:88:45:ad:7f:fd:37:e1:bd:f4:
99:71:be:6a:39:ba:2f:09:47:69:49:a2:57:0d:21:f8:5a:a3:
7e:d1:d1:18:06:74:7e:3b:ef:75:74:57:0c:7d:2b:d0:21:17:
b7:3f:ee:c9:53:0f:0f:d3:74:36:59:b0:0f:3e:90:40:cc:fe:
9e:77:37:b3:0d:de:1a:dc:d1:ce:4e:f9:ee:4f:79:85:5f:8b:
7d:b5:8b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org