Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/cvInd9cv_B2L1W7hFHjTHTqIayI.roa
File: cvInd9cv_B2L1W7hFHjTHTqIayI.roa (raw, json)
Hash identifier: O77U2BON4s7RJuYob3PFyqI0CUk1zRaG+HeAljH1SKw=
Subject key identifier: 72:F2:27:77:D7:2F:FC:1D:8B:D5:6E:E1:14:78:D3:1D:3A:88:6B:22
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0D18
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/cvInd9cv_B2L1W7hFHjTHTqIayI.roa
Signing time: Fri 01 Sep 2023 09:59:36 +0000
ROA not before: Fri 01 Sep 2023 09:59:36 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 1659
IP address blocks: 120.107.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3352 (0xd18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 1 09:59:36 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=72F22777D72FFC1D8BD56EE11478D31D3A886B22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d2:8b:f4:c5:88:1f:6d:2d:7f:8a:ab:d7:82:
74:58:53:cc:4d:eb:41:b1:9d:65:58:1c:d0:2c:cc:
2c:c7:c2:a7:a4:06:27:dc:0a:c4:61:bd:c6:48:9e:
f1:47:75:c3:5d:dc:2c:76:17:99:a1:7e:10:e0:2f:
92:50:8d:fe:9d:48:4d:b0:c1:05:a7:81:7a:ef:1e:
06:c5:73:ed:80:9b:6c:bd:f0:16:7d:a1:d3:c7:a3:
97:b7:16:40:35:3d:ee:07:66:57:12:b5:30:90:41:
c4:89:63:62:7c:2a:15:69:f6:ad:34:a3:30:be:c6:
d8:40:0d:67:82:50:ce:6a:de:57:7d:0f:ce:8e:7c:
bc:46:6d:68:ea:93:5e:dc:f0:cf:b0:53:ed:9a:64:
c2:5d:81:40:99:9d:22:bb:2b:c7:d8:36:56:11:1d:
ae:f5:6c:23:74:c1:95:ce:5c:08:88:e2:95:11:55:
89:96:92:01:06:d6:a2:a4:46:a4:b8:fe:bb:49:aa:
51:e4:56:a8:2f:19:db:1b:d7:92:60:65:35:bd:5a:
f8:50:e9:ce:8e:40:5c:5d:04:b1:fd:7a:49:69:37:
e2:9c:79:f0:b7:7f:78:dd:ce:5c:a7:15:94:44:e7:
e8:90:b8:b8:aa:d8:c9:52:2f:af:2a:57:8c:9f:85:
9a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F2:27:77:D7:2F:FC:1D:8B:D5:6E:E1:14:78:D3:1D:3A:88:6B:22
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/cvInd9cv_B2L1W7hFHjTHTqIayI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.107.0.0/16
Signature Algorithm: sha256WithRSAEncryption
48:99:d4:5d:1f:21:25:50:73:75:39:fc:63:f8:c1:bc:b9:4c:
a0:8b:08:a3:ee:14:b2:60:7e:72:03:2d:27:fc:c4:28:31:c9:
de:a8:64:fc:73:82:17:eb:43:28:98:80:72:71:dc:d6:9a:21:
12:d7:46:d0:16:84:9e:be:fd:d6:a0:66:2e:c7:6c:5b:98:64:
92:b0:f1:02:26:8e:fe:a1:95:c8:c2:47:7e:ba:ac:a5:bc:5e:
0c:93:e2:a6:3e:9e:d4:85:ad:9a:71:18:3f:b9:ed:b1:78:6d:
e7:9b:1b:b3:eb:23:ff:f7:01:50:c7:68:00:f9:a5:98:b0:44:
52:1c:a0:f0:5c:3a:df:05:c1:5c:db:c7:37:25:7c:7a:03:2f:
f6:ea:c0:25:2e:8d:60:e4:04:43:01:0c:7d:5f:17:3d:40:90:
9c:1d:1b:94:05:cd:55:de:81:72:9e:2f:c8:fc:54:1d:95:d1:
1f:f7:4c:b3:d0:50:8b:5e:b4:10:41:c0:7c:e4:12:17:47:c4:
14:07:9e:cb:30:ed:94:05:31:70:d3:7d:c3:55:06:aa:8f:d6:
70:f0:7c:d5:b7:89:f3:ab:dd:3a:d1:e6:d3:c5:f7:9e:70:f4:
2b:97:95:65:0c:1b:c6:51:a9:07:88:86:23:0f:6d:47:bf:99:
22:42:9a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org