Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/ur2pgjE9-U_FBNL9bxOYNBMlQcA.roa
File: ur2pgjE9-U_FBNL9bxOYNBMlQcA.roa (raw, json)
Hash identifier: 5eGohBLTpmCtQpfsiOOJuPDqOQWT6TLCd8/AGLtegjs=
Subject key identifier: BA:BD:A9:82:31:3D:F9:4F:C5:04:D2:FD:6F:13:98:34:13:25:41:C0
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0CF8
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/ur2pgjE9-U_FBNL9bxOYNBMlQcA.roa
Signing time: Fri 01 Sep 2023 09:59:18 +0000
ROA not before: Fri 01 Sep 2023 09:59:18 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18047
IP address blocks: 120.127.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3320 (0xcf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 1 09:59:18 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=BABDA982313DF94FC504D2FD6F139834132541C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:03:15:63:40:b0:13:57:5f:66:73:b2:ca:73:
4b:0e:c3:66:09:9d:26:12:c4:fc:e0:2c:32:c9:76:
c5:85:26:78:42:73:2e:9e:dd:ed:a9:df:29:27:a4:
46:eb:3c:07:a2:9d:85:63:6b:4d:09:f1:02:07:0a:
31:89:0f:84:6d:a0:12:77:2a:0f:1c:9b:9f:3b:4a:
52:3a:5b:d0:cd:34:5e:d7:93:74:35:29:84:4c:63:
d2:90:05:13:08:35:c9:d7:46:4a:6f:5d:f8:b1:46:
fd:c5:29:c6:91:08:14:da:47:eb:b6:41:a6:15:d4:
89:af:89:45:87:40:e7:bf:6f:fc:ab:c9:f9:9b:98:
02:40:2b:08:88:8e:b7:27:47:18:c1:d5:d3:5f:82:
90:bd:2c:9b:ef:20:85:b7:f0:c1:5c:99:7d:b4:00:
48:41:f8:ac:85:3a:eb:8e:e9:ef:2b:de:f8:cc:4c:
89:c6:7f:92:c7:d4:3f:17:a5:21:11:09:6b:f9:f5:
8d:42:9f:79:76:8a:a6:b6:bd:b2:88:7b:c6:56:a5:
94:05:b8:14:91:5d:6c:08:a3:dd:4d:e8:05:91:9a:
15:c6:01:ba:a9:d8:6c:1f:fa:74:aa:dd:59:f8:71:
62:54:7c:87:de:8c:3b:40:99:02:9b:8c:eb:38:66:
d2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BD:A9:82:31:3D:F9:4F:C5:04:D2:FD:6F:13:98:34:13:25:41:C0
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/ur2pgjE9-U_FBNL9bxOYNBMlQcA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.127.160.0/19
Signature Algorithm: sha256WithRSAEncryption
3e:9f:e8:84:f1:9d:98:e8:db:6b:15:90:5c:e2:d5:03:95:dd:
43:41:c8:08:2c:0f:8a:dc:d9:ea:dd:9a:29:96:53:5f:c3:65:
98:82:a0:80:96:6a:c0:cb:68:71:25:59:44:31:53:56:a0:b4:
bd:f5:bf:99:1b:d6:76:40:28:01:95:fe:05:a2:d5:45:13:ee:
31:d8:00:dd:b0:29:83:9a:f3:51:34:8f:38:bc:e5:51:57:fd:
58:14:7d:85:92:cd:fd:e4:ef:10:60:48:15:78:af:3d:66:31:
ef:f7:11:02:cb:d6:15:88:a3:51:94:56:58:ce:b3:0e:dc:04:
98:64:04:9b:7b:8e:49:28:7d:f5:d1:29:81:f7:e7:04:5b:ff:
0b:41:cf:a7:4e:fb:17:e9:23:81:b4:29:27:2c:24:eb:59:9d:
ff:ab:4b:bc:8d:2f:4b:a6:69:0e:8d:ca:a4:93:6b:e5:cc:a0:
6c:0b:5c:c7:06:2b:2d:d9:d7:2a:9b:e9:95:27:31:ae:fd:e3:
05:84:25:26:3b:95:13:ca:f4:58:8c:09:08:89:78:24:b4:d8:
dd:51:dd:22:3d:d5:28:79:ef:cc:ce:d8:5e:ab:46:5d:d5:50:
65:22:17:de:d7:9b:8f:f1:08:ab:51:dc:3b:24:22:76:c8:2e:
a2:7d:72:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org