Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/x4PIU4txdfD0OqwLA4543KxCaSQ.roa
File: x4PIU4txdfD0OqwLA4543KxCaSQ.roa (raw, json)
Hash identifier: QKgp+vUfrOTSRehMfafYM+tOYZsSGhU5WyqMgyWTHGA=
Subject key identifier: C7:83:C8:53:8B:71:75:F0:F4:3A:AC:0B:03:8E:78:DC:AC:42:69:24
Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial: 0CB4
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/x4PIU4txdfD0OqwLA4543KxCaSQ.roa
Signing time: Fri 01 Sep 2023 09:59:35 +0000
ROA not before: Fri 01 Sep 2023 09:59:35 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 1659
IP address blocks: 140.128.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3252 (0xcb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Validity
Not Before: Sep 1 09:59:35 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C783C8538B7175F0F43AAC0B038E78DCAC426924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8e:38:55:a4:86:08:e9:c3:dc:34:0c:56:9a:
8b:ae:28:bf:b4:34:b1:76:10:36:ac:cd:5d:ea:74:
35:9b:83:be:21:d6:d4:89:d5:6b:04:af:7a:77:22:
91:0c:ca:37:fa:dd:a4:4c:da:94:b9:6d:04:8c:a2:
3b:38:48:f4:a6:2b:40:6d:98:5c:ae:56:2c:ca:37:
79:2c:27:58:31:98:5c:43:53:1b:92:d2:23:44:96:
e1:c8:eb:95:dc:37:3f:72:97:9b:70:58:63:42:88:
7e:3f:0f:9d:bc:0e:4c:12:20:66:6f:53:49:47:f0:
c9:8a:dd:fb:13:59:61:0b:c6:bb:56:46:6c:91:44:
c0:a4:fe:12:74:6e:ee:7b:35:e2:41:75:78:b5:5d:
ac:5b:f7:48:95:f3:d9:9b:67:dd:7a:be:3e:85:c9:
5e:ff:65:64:77:71:5b:d1:98:8b:f1:28:62:da:a8:
74:1e:9e:dd:ec:23:5e:d9:c2:6a:fc:a2:4f:a5:7a:
3e:f0:f9:56:f5:4e:a8:73:1c:62:ad:51:1a:43:f4:
74:b0:2a:bd:e0:6e:25:d0:f1:88:28:d4:38:8d:53:
9a:6a:e1:3b:5e:08:58:e9:a0:46:a6:5f:a8:d8:8f:
7b:ab:5e:db:77:70:d9:0c:17:3c:8a:58:ab:0d:2d:
d1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:83:C8:53:8B:71:75:F0:F4:3A:AC:0B:03:8E:78:DC:AC:42:69:24
X509v3 Authority Key Identifier:
keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/x4PIU4txdfD0OqwLA4543KxCaSQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
140.128.0.0/16
Signature Algorithm: sha256WithRSAEncryption
28:e7:11:a4:c2:22:82:d0:3f:b4:33:51:0c:d2:c1:1a:20:0e:
7b:e3:9b:5e:25:09:52:c6:5c:dc:77:9d:86:48:da:11:e5:8a:
0d:31:ae:ce:1d:1e:41:b5:9d:dc:11:b0:2e:2c:c7:43:c8:73:
13:03:5a:62:c5:c2:b8:a2:ea:74:6c:72:10:bf:51:70:13:be:
0b:25:bf:86:92:86:51:5e:87:fa:26:10:d3:d8:c8:e4:d4:82:
f2:16:a6:b0:ae:0c:b8:36:b2:04:32:f3:f7:d5:03:60:38:f1:
87:3f:c8:07:ae:c9:c6:8a:48:18:a9:d4:8a:6e:71:6e:09:84:
bb:c5:37:3a:33:55:3a:b1:95:ad:b9:44:09:ca:b4:80:65:01:
d6:00:ce:db:2c:c9:02:0b:93:ca:c0:9c:c3:df:01:9c:dc:66:
13:c9:1b:1d:eb:7d:35:bf:76:02:5b:f1:6c:bd:ec:76:fa:85:
d4:4b:7a:d3:cd:1d:a2:47:bc:b2:47:02:97:0a:4d:56:f9:8d:
07:26:76:d7:c7:2e:c2:b7:44:d2:89:ad:2f:55:63:10:09:9f:
ae:60:32:a9:96:e5:1a:36:13:d8:3c:3c:f8:cd:e3:46:56:d6:
dd:41:5f:d0:db:97:ea:24:54:db:e2:5f:aa:7b:0b:32:b8:6c:
12:e4:e6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org