Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/bnTPk-zsjSXmAOpoEei5XMafV-Y.roa
File: bnTPk-zsjSXmAOpoEei5XMafV-Y.roa (raw, json)
Hash identifier: iaN2L7GNR4vZnks4Yyn3/4fHAV1T4id/pzPT+U/P83Q=
Subject key identifier: 6E:74:CF:93:EC:EC:8D:25:E6:00:EA:68:11:E8:B9:5C:C6:9F:57:E6
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0D03
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/bnTPk-zsjSXmAOpoEei5XMafV-Y.roa
Signing time: Fri 01 Sep 2023 09:59:23 +0000
ROA not before: Fri 01 Sep 2023 09:59:23 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 1659
IP address blocks: 203.71.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3331 (0xd03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 1 09:59:23 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6E74CF93ECEC8D25E600EA6811E8B95CC69F57E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:57:73:a3:8d:f6:17:7f:6e:1e:e5:e2:91:c8:
2a:ba:74:60:44:ef:b4:20:1c:15:12:27:54:7d:7e:
ba:b5:d1:e2:e3:c9:f7:24:20:0f:bd:ed:50:8a:f2:
49:6f:1a:52:f3:49:e4:33:c3:3c:11:f6:5c:10:d0:
84:82:a0:2f:d7:4d:f7:db:b7:ce:e2:0d:b7:26:49:
4a:5b:70:b9:7b:47:eb:6a:8f:f8:8d:dd:f1:90:88:
87:da:6d:e4:3d:5e:fc:a6:a1:7e:69:e7:56:8c:6f:
95:d0:6a:b1:1a:2d:53:8d:46:6a:19:33:5a:11:ab:
88:04:d6:6d:3a:d3:9b:41:1d:a9:2d:38:85:95:3d:
0d:44:13:84:75:0d:87:d1:bf:ce:24:a1:e2:52:44:
c5:27:e4:5a:54:19:e8:26:b1:f8:73:6d:93:b8:4d:
2e:39:e4:92:52:6f:c0:67:37:a3:f0:db:e8:8b:47:
ca:3e:23:73:26:cf:a2:0a:7f:2e:ed:bd:32:02:cf:
86:23:91:51:e8:2f:49:94:aa:28:08:2b:fe:32:c9:
1b:88:27:33:86:bf:c4:df:b4:6e:19:8f:57:97:fd:
65:81:57:10:8d:35:47:e4:6d:f1:38:c8:2e:4d:0b:
1c:15:2e:b1:13:40:81:e7:12:99:ae:ae:4c:de:c1:
99:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:74:CF:93:EC:EC:8D:25:E6:00:EA:68:11:E8:B9:5C:C6:9F:57:E6
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/bnTPk-zsjSXmAOpoEei5XMafV-Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.71.0.0/16
Signature Algorithm: sha256WithRSAEncryption
86:26:cc:01:fb:d8:2b:ab:0e:50:27:59:be:8b:9c:fb:5e:aa:
e0:90:21:39:0b:e4:a7:59:0d:2f:37:99:2b:39:63:51:85:18:
b8:00:f6:85:1d:ba:9e:61:f2:9e:0b:aa:20:3c:02:f0:a8:a8:
6c:31:a6:b6:8e:81:ec:44:1f:3e:cb:2a:50:97:0b:a2:d3:8e:
f9:bc:15:6e:d3:1e:cc:74:3a:e8:50:06:f1:47:af:de:44:de:
f9:58:4b:81:26:cf:47:98:45:58:75:05:3f:9d:16:d9:ae:3d:
78:86:d0:23:0b:d3:6a:d6:12:0a:16:fc:ac:c7:00:4e:f3:f4:
11:a6:62:21:3c:31:3d:cf:29:e7:a3:64:ca:85:e8:7b:5a:d3:
c9:8f:2b:f4:a7:62:f7:24:b4:b8:8b:59:8b:91:d0:63:5e:3d:
ea:25:4d:91:f0:45:3d:ff:4d:f4:91:26:d0:2b:cc:78:65:fd:
56:1e:ea:84:36:3e:79:b5:e5:75:55:bd:4f:90:15:dc:e8:b0:
35:99:17:76:77:d0:5b:cd:8f:4f:26:31:8c:21:a6:af:4c:94:
f4:4a:af:cc:ca:06:90:67:55:be:50:1d:65:7f:7b:d4:ff:3d:
e7:dc:53:4f:87:9a:1a:ac:cd:04:80:8d:3a:60:ae:8d:42:6c:
1c:2e:22:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org