Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/lClT2wqvS_du79Cr4ukkI0zbAc4.roa
File: lClT2wqvS_du79Cr4ukkI0zbAc4.roa (raw, json)
Hash identifier: fWHdzIwKLNTD/voIn+/+iAIDC/x5esLYmYDO0s50Duo=
Subject key identifier: 94:29:53:DB:0A:AF:4B:F7:6E:EF:D0:AB:E2:E9:24:23:4C:DB:01:CE
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0C9B
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/lClT2wqvS_du79Cr4ukkI0zbAc4.roa
Signing time: Fri 01 Sep 2023 09:59:19 +0000
ROA not before: Fri 01 Sep 2023 09:59:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 1659
IP address blocks: 192.83.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3227 (0xc9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Sep 1 09:59:19 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=942953DB0AAF4BF76EEFD0ABE2E924234CDB01CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7f:07:64:ff:21:27:f3:50:48:bf:5b:78:88:
14:54:d2:0e:2e:8d:75:76:69:b6:39:3d:e8:ef:21:
e0:4a:b1:b5:2b:f4:08:59:1a:19:30:66:56:af:90:
d4:21:d9:5f:4d:81:45:e3:d1:74:28:ad:9f:5b:f5:
8b:c8:02:2d:4a:64:47:74:67:9a:3a:99:13:c4:b8:
17:b2:34:d6:fb:52:5d:1e:4f:cf:49:84:62:9b:03:
76:2d:5a:a3:75:db:bf:01:5f:84:3a:20:dd:cb:f9:
30:d1:66:df:19:e2:d1:29:c6:6d:dc:94:03:87:bf:
e5:5b:93:ff:9e:7f:bc:8c:73:92:8d:18:07:2a:06:
74:61:3e:f0:be:70:f6:8f:b4:0d:fc:e0:32:1d:bc:
41:04:ff:51:fb:1f:a4:8a:a5:69:d2:fd:7e:c7:80:
10:1c:5a:6a:f2:61:a6:12:84:ca:50:93:98:3c:39:
35:94:25:76:b1:8d:d5:86:50:1c:55:42:32:fe:c6:
da:84:d7:ad:7d:f7:47:9b:fb:b4:c6:76:64:03:5e:
e1:89:ca:fb:f8:b0:44:43:02:af:8f:f6:06:e6:dc:
90:6d:2e:59:b1:01:78:6f:c3:91:4b:31:23:2c:c5:
08:cc:aa:e2:90:ee:aa:7a:fb:67:38:b6:d0:4d:5f:
d4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:29:53:DB:0A:AF:4B:F7:6E:EF:D0:AB:E2:E9:24:23:4C:DB:01:CE
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/lClT2wqvS_du79Cr4ukkI0zbAc4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.83.196.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:b8:03:15:7c:5f:c2:c3:7e:1e:1f:60:10:37:3a:9a:7e:fc:
58:e9:2e:8e:59:dc:33:61:3b:a0:44:fc:be:6c:d8:e9:0e:53:
3e:60:12:21:9c:7a:ad:a7:8c:0d:be:ba:15:a9:00:d6:5e:c8:
69:97:54:4e:04:8e:7e:ec:a4:d8:2c:f9:6e:a2:1f:d0:a3:35:
2a:b6:53:88:4d:d8:38:e3:ef:4f:a4:4d:81:65:46:b3:de:46:
94:b9:23:3a:51:17:01:90:64:0b:22:eb:da:b8:56:35:dc:1a:
cb:93:be:e5:44:ee:69:a3:1d:26:50:f2:c0:df:2b:5c:35:b7:
56:3f:f4:65:b6:4e:22:a8:5a:08:97:e6:c5:c8:22:ba:bf:b4:
5e:e5:ed:aa:47:ca:41:e5:ef:64:d2:38:52:7d:2f:a0:1d:fe:
45:32:71:39:62:03:b8:c1:56:f6:c8:a5:c2:5a:90:05:cc:55:
e0:68:e3:2e:21:4a:64:e8:cf:30:49:2c:16:fd:00:21:58:08:
f3:67:17:a0:c5:e6:1e:d7:15:2c:5b:46:a6:9d:be:9a:3d:2e:
0d:12:a2:31:b5:56:b9:02:8d:e0:dc:d2:79:c6:f8:95:3a:f5:
de:a0:bb:05:b8:52:6c:92:20:e1:7f:cd:08:70:42:e8:bb:49:
57:f4:bf:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org