Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/fvEJsF4McvO7hEZN3YgHomfOLm4.roa
File: fvEJsF4McvO7hEZN3YgHomfOLm4.roa (raw, json)
Hash identifier: plLCX9qFv/eH9TWw9V3eVZe8cpwptrS22X02zJZG+SY=
Subject key identifier: 7E:F1:09:B0:5E:0C:72:F3:BB:84:46:4D:DD:88:07:A2:67:CE:2E:6E
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0CF7
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/fvEJsF4McvO7hEZN3YgHomfOLm4.roa
Signing time: Fri 01 Sep 2023 09:59:17 +0000
ROA not before: Fri 01 Sep 2023 09:59:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38844
IP address blocks: 210.60.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3319 (0xcf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 1 09:59:17 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7EF109B05E0C72F3BB84464DDD8807A267CE2E6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:44:63:6a:b1:46:47:49:78:c0:ca:c8:7e:
a7:ef:3f:c1:48:84:4d:18:32:e0:d8:a9:6a:f1:ab:
8b:55:6f:6d:fa:c9:1d:74:4f:24:ed:9a:6e:ef:0e:
46:04:a1:d3:b8:9f:20:55:10:f3:12:e2:69:84:7f:
55:e4:54:51:03:e7:17:1d:54:04:9a:a2:3c:f0:89:
27:e3:4d:a9:63:5a:83:fc:e8:b1:29:b7:96:22:61:
2a:a3:3e:0d:cf:89:b4:90:32:cf:98:e3:5e:1a:42:
ed:a4:c7:d7:16:1c:52:41:32:ae:79:6c:1e:93:da:
33:12:11:41:85:4c:00:42:0b:15:2a:77:db:b0:d2:
d7:34:5f:17:75:76:05:4d:d4:ed:46:46:23:da:ab:
a3:0d:89:25:99:8b:84:45:28:62:3d:bb:08:37:17:
8b:f5:aa:57:c6:60:ce:ac:d2:c2:87:ae:5c:e1:94:
63:d9:0b:e5:c7:79:e6:b9:cf:44:41:7f:34:33:f6:
e6:1a:55:e7:bb:76:6a:c4:74:70:65:c2:fe:4f:91:
d7:c5:ab:c4:f8:1a:8c:3b:4f:86:1e:d7:ea:7b:5f:
2b:33:6d:f2:0c:ff:f9:ca:02:a7:64:77:62:40:86:
ba:f1:18:9e:af:31:46:ad:5e:2e:2d:8b:f5:8a:11:
b6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F1:09:B0:5E:0C:72:F3:BB:84:46:4D:DD:88:07:A2:67:CE:2E:6E
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/fvEJsF4McvO7hEZN3YgHomfOLm4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.60.150.0/24
Signature Algorithm: sha256WithRSAEncryption
43:49:44:66:dd:fd:52:03:cb:83:97:57:e0:8a:fb:e7:8f:39:
86:ee:73:52:33:a7:b5:75:54:11:26:02:e6:9a:59:da:9c:39:
29:24:6b:aa:53:a8:24:28:a8:3d:b0:8d:c0:0e:33:df:8e:e2:
bb:2e:ae:e3:d0:14:95:c3:7c:5c:79:49:ee:9e:f9:bb:83:d9:
51:6c:4c:07:39:c7:1a:5e:90:59:df:7e:b2:76:c7:bb:7c:60:
77:ba:45:3a:78:78:ce:e3:22:a2:14:dc:0a:c9:7d:d9:c7:71:
42:98:54:f2:1b:85:ca:b7:aa:da:fb:c0:cf:3c:03:27:8e:80:
a7:58:c1:03:45:91:47:17:a5:17:49:91:5f:c8:49:23:06:06:
54:ec:a9:f8:69:e3:95:e7:d4:0c:28:05:10:4c:3c:04:e1:73:
76:46:74:b5:26:fc:d1:cb:9d:28:fd:7a:39:97:cd:5e:e9:7f:
5c:bc:ab:5a:61:ab:33:c8:b0:1c:ec:83:07:03:59:d5:8f:56:
ce:0b:9f:79:d2:00:c4:61:6f:12:19:f2:ca:8c:99:52:a4:3e:
37:77:3c:28:9d:18:5e:50:23:32:13:41:81:24:7a:17:b1:1a:
83:04:d3:5d:03:c8:f7:b3:2e:11:8f:f9:9f:73:3a:97:9f:95:
5f:06:77:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org