Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/etdGQOYZrTU9GZJdk4jMXZQ-kGY.roa
File: etdGQOYZrTU9GZJdk4jMXZQ-kGY.roa (raw, json)
Hash identifier: TfIPWITme6zfoUJcYXpZCkjiW5hnJstz3xDnSc8QBAY=
Subject key identifier: 7A:D7:46:40:E6:19:AD:35:3D:19:92:5D:93:88:CC:5D:94:3E:90:66
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0CF2
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/etdGQOYZrTU9GZJdk4jMXZQ-kGY.roa
Signing time: Fri 01 Sep 2023 09:59:15 +0000
ROA not before: Fri 01 Sep 2023 09:59:15 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9916
IP address blocks: 120.126.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3314 (0xcf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 1 09:59:15 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7AD74640E619AD353D19925D9388CC5D943E9066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:19:ab:f9:ff:74:2a:85:2c:5f:c3:95:70:c9:
4c:44:bc:2b:7c:d3:d5:19:6a:d9:e5:01:0f:7a:7c:
80:dc:5a:e8:77:fb:dc:5e:18:40:54:a2:dc:29:95:
89:77:96:b7:95:7f:d2:42:3c:d3:22:34:13:f2:22:
da:27:0c:fb:68:fb:3c:1f:6a:52:b7:e4:e3:a1:c2:
5d:9e:0e:23:7f:46:b7:fa:1c:d2:31:4d:1f:32:c1:
c2:a7:43:8d:69:c0:19:b5:ea:27:72:9f:fd:5a:fc:
ba:5b:19:e8:1d:c3:85:e2:fa:22:7e:a3:a4:66:ae:
81:b0:47:68:af:23:a2:1e:e6:b7:2c:29:0c:b8:6a:
68:73:bc:4e:fc:90:62:6d:49:36:91:2f:41:86:88:
d1:68:d3:82:bf:d9:99:61:d2:ab:89:f1:1b:cd:fe:
f6:3a:bb:85:30:24:b3:05:0f:03:45:8e:9d:a4:47:
eb:5c:84:ef:49:30:d7:9c:c4:b8:e7:3c:b9:b1:e7:
95:65:58:cf:39:49:d4:d9:57:df:f6:bc:41:37:b7:
16:ac:85:29:73:6e:f9:a2:86:88:b8:94:a4:dd:cf:
cb:b5:0e:28:91:bf:e8:0a:5b:8c:0b:dd:9f:fd:bc:
90:fa:82:eb:52:af:1c:dd:de:89:0e:76:69:a2:bc:
09:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D7:46:40:E6:19:AD:35:3D:19:92:5D:93:88:CC:5D:94:3E:90:66
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/etdGQOYZrTU9GZJdk4jMXZQ-kGY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.126.32.0/19
Signature Algorithm: sha256WithRSAEncryption
1f:a7:fa:58:50:74:3e:8b:56:ac:1a:93:78:57:c7:c6:6a:9e:
4f:20:07:f8:16:d4:f6:96:6d:b5:59:4e:42:96:f7:5e:65:92:
28:06:a4:71:5b:2c:7a:e0:6a:16:d9:3d:6a:74:6e:85:b6:2c:
db:e4:de:e8:56:3f:12:bf:09:d3:89:d9:45:b9:b5:22:02:03:
1b:8e:1d:f6:58:50:b2:8b:9a:d5:28:4e:4d:8e:c1:77:9e:01:
9e:04:4a:76:f9:55:4a:7c:1d:83:6d:03:3b:ad:dc:17:7a:54:
e2:91:c2:64:88:21:c3:be:56:cd:c6:ec:71:22:96:19:df:82:
82:17:17:9d:c5:ef:40:40:dc:7d:a5:f4:08:57:3e:3b:3e:36:
0d:39:06:ea:4e:d5:0e:42:66:c8:93:5a:7b:d3:49:08:22:91:
47:ab:76:86:b0:d5:95:03:62:c5:31:f9:ed:ce:04:14:7e:67:
fe:97:5a:ee:5e:62:7a:e4:0c:78:56:2c:50:a7:a9:75:ab:2a:
cc:8b:01:1a:74:8f:2d:ba:84:d9:3b:3d:1b:18:54:8e:b6:a6:
06:15:ea:92:44:6a:e8:aa:70:84:67:b2:43:63:d6:07:c5:96:
87:fb:c2:8a:f5:cb:3d:f9:1c:c7:cc:50:e8:62:e2:e2:4b:94:
13:01:e4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org