Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/oTOPtHeU89SVTJb9W-UJqTrAluc.roa
File: oTOPtHeU89SVTJb9W-UJqTrAluc.roa (raw, json)
Hash identifier: H7z9uh6GhUmqJwVT9p3SnmjWmrQUyLh0bzk9PahNIMw=
Subject key identifier: A1:33:8F:B4:77:94:F3:D4:95:4C:96:FD:5B:E5:09:A9:3A:C0:96:E7
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0D1B
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/oTOPtHeU89SVTJb9W-UJqTrAluc.roa
Signing time: Fri 01 Sep 2023 09:59:37 +0000
ROA not before: Fri 01 Sep 2023 09:59:37 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17716
IP address blocks: 120.96.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3355 (0xd1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 1 09:59:37 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A1338FB47794F3D4954C96FD5BE509A93AC096E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:f6:4e:a5:19:92:4c:93:00:0e:eb:23:d7:
90:81:56:c4:57:37:6b:bf:09:7c:8e:f8:71:b5:04:
7c:7c:83:7b:7a:92:4d:46:35:e5:84:67:8e:70:39:
7f:d2:f9:12:e1:a5:95:9a:77:07:7b:d8:a0:21:4a:
c9:74:ff:77:21:de:b7:6d:da:96:53:81:47:ff:ae:
11:8e:4f:f3:a7:56:70:df:be:86:60:8f:44:e2:5d:
36:df:3f:73:b3:bc:ba:d6:b4:78:45:8f:7c:67:b3:
9d:b9:1f:05:7b:dc:70:fd:78:bc:86:38:96:f6:80:
65:67:17:d6:3a:36:d5:82:e6:f6:41:98:62:ed:09:
c3:7e:fa:a7:e9:d6:73:ec:bf:ec:20:e6:74:0e:69:
89:62:fd:bb:1d:e8:5e:79:c1:3d:04:56:d7:59:fc:
7f:e3:01:a4:e2:f9:8e:90:4d:c6:01:17:04:91:64:
1e:3b:6c:a9:38:8a:5e:8e:83:e3:94:6f:c7:d7:b8:
19:11:98:29:09:1d:8c:19:05:ca:a2:a0:bc:f6:70:
85:fe:94:d5:df:4d:68:09:b9:48:11:0c:e5:82:52:
77:8b:cc:43:45:86:55:02:e1:18:18:25:a0:68:a4:
4a:11:12:b7:46:a7:ef:bc:3f:ae:e9:1c:f3:28:c3:
72:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:33:8F:B4:77:94:F3:D4:95:4C:96:FD:5B:E5:09:A9:3A:C0:96:E7
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/oTOPtHeU89SVTJb9W-UJqTrAluc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.96.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4f:99:5e:35:0f:49:7f:f1:2d:48:fa:cf:91:f5:f6:e0:41:22:
f6:3a:26:ea:7f:74:ab:ff:93:4d:1c:e4:1e:5f:9c:b3:d4:19:
ae:70:88:7f:1e:ce:31:d7:8d:c6:f6:57:51:de:74:a1:21:b7:
fd:3d:d6:05:34:b6:68:dc:84:d9:d2:21:f4:41:03:f5:e8:c2:
b8:06:87:9c:cd:64:14:d9:0d:88:de:4a:9b:0b:db:40:97:72:
ed:e9:c1:e4:18:4a:68:bc:61:d8:52:92:d8:d8:6f:e2:7c:27:
75:10:ea:78:d0:f1:0f:2e:a5:fc:c2:c8:c4:87:ee:d3:5f:f1:
84:78:aa:e3:00:aa:26:d8:a3:e3:ed:0d:43:1c:64:45:38:8f:
65:f9:12:6f:d8:1f:dc:33:f7:38:8a:65:bc:39:2e:90:2e:08:
9b:ca:a0:4c:ac:94:d7:a6:db:60:0c:67:1b:05:4c:84:20:65:
a3:40:1c:9c:9a:de:5f:4e:03:30:6a:52:b5:d6:ed:d1:d6:a4:
7d:7b:18:98:6a:d6:ab:3b:9d:43:24:f1:a9:ac:1a:24:dc:81:
e6:c8:8f:a2:2f:d5:36:7a:df:70:95:1c:10:95:c2:1a:ce:08:
2b:2d:c3:a8:54:e8:98:79:97:d2:8a:12:a1:f1:57:36:7d:c9:
25:83:3a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org