Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/e1QH0H9fyMMJQLccI-CyOivAa7Y.roa
File: e1QH0H9fyMMJQLccI-CyOivAa7Y.roa (raw, json)
Hash identifier: oBR4bO24GHoR8fB+M4jxWcRzpwni4qyZZJAP2ABZnR4=
Subject key identifier: 7B:54:07:D0:7F:5F:C8:C3:09:40:B7:1C:23:E0:B2:3A:2B:C0:6B:B6
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0D04
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/e1QH0H9fyMMJQLccI-CyOivAa7Y.roa
Signing time: Fri 01 Sep 2023 09:59:24 +0000
ROA not before: Fri 01 Sep 2023 09:59:24 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18185
IP address blocks: 120.117.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3332 (0xd04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 1 09:59:24 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7B5407D07F5FC8C30940B71C23E0B23A2BC06BB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:13:bd:b3:26:1d:cd:b2:88:1f:fa:3a:d1:6c:
d4:e3:14:4c:89:91:64:12:9c:e7:3f:76:05:87:92:
92:32:05:46:22:48:c5:a2:ac:83:fa:67:54:6b:05:
cc:f1:6d:7c:59:53:f5:f1:38:02:09:4b:f8:ca:c6:
c1:7b:3d:ef:e8:a5:60:f5:06:dd:e0:2f:dd:3c:ca:
be:b5:76:90:29:28:69:cc:66:52:7c:84:0b:6e:5c:
86:c7:0b:35:5d:f7:2e:dd:39:8d:29:c8:a5:ec:60:
56:16:5e:e6:18:a8:1c:0b:f9:b5:84:f7:6b:2f:3e:
54:f7:d7:95:65:75:f0:f7:f8:e8:a5:10:23:42:12:
9f:78:e2:95:65:44:20:c5:91:ff:96:17:2c:50:fb:
91:b9:f9:05:de:da:2b:68:42:a3:61:11:91:a6:53:
09:01:2e:f9:c0:31:d8:9e:c9:1c:18:e9:d3:a0:43:
3c:ef:b5:cc:9a:6a:11:1c:7f:46:8a:b7:71:50:da:
79:24:97:38:16:a1:a8:7c:38:9e:b2:6e:92:ae:56:
81:c0:82:e5:3c:4d:e6:ce:67:23:fa:f9:ba:10:93:
3f:2d:a5:5a:81:ac:f1:31:a5:33:c0:d0:5a:cb:45:
9a:ed:22:a5:2c:64:24:40:b0:2e:bf:82:d5:2e:23:
bc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:54:07:D0:7F:5F:C8:C3:09:40:B7:1C:23:E0:B2:3A:2B:C0:6B:B6
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/e1QH0H9fyMMJQLccI-CyOivAa7Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.117.3.0/24
Signature Algorithm: sha256WithRSAEncryption
80:09:73:86:48:9b:da:af:6f:cc:e5:9c:a6:b4:ae:80:46:a7:
25:44:6d:8c:42:50:21:2b:a0:82:03:d2:db:fb:a7:cf:d0:c9:
95:99:7c:82:72:a4:fd:42:48:d1:8a:29:f7:bf:05:d7:4d:07:
5b:b5:66:22:b9:22:bd:dd:0c:56:01:55:df:3b:d0:e3:a3:cf:
68:0d:39:e5:f3:e5:25:9d:98:82:f5:8b:a8:a0:ec:22:af:fc:
a0:fd:c3:8b:5b:fb:e1:95:47:a6:10:88:77:f1:0b:8e:14:8d:
92:6d:9e:39:fa:14:8a:cc:c5:e4:cd:46:0c:cd:d3:31:e8:6e:
46:c9:f9:fe:08:ac:b2:d1:51:0f:2a:1c:88:c5:c9:f5:a0:a6:
a3:36:c6:0e:5f:5d:b1:2d:0e:3c:07:95:f1:85:53:25:0b:48:
62:15:cd:3e:0e:87:1f:c8:82:31:33:30:39:05:77:8c:0c:e9:
e3:fb:7c:81:cc:db:ad:12:ed:6c:1a:94:73:c0:00:d0:0b:85:
6f:3c:9c:c3:80:3b:49:3b:a0:8f:d1:f7:00:b7:3f:ca:63:b7:
58:d8:8d:a7:fb:6c:82:f8:13:c8:31:5d:22:52:0e:91:ba:82:
2c:4d:94:b0:68:94:f3:95:c2:c2:09:ab:40:32:88:49:2b:da:
c6:fb:a3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org