Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/XSQUorNk0M6wme5RHszNK9Rwprg.roa
File: XSQUorNk0M6wme5RHszNK9Rwprg.roa (raw, json)
Hash identifier: E0zETctVeCY0CtqybcRnIc5mou2Y5UfV4bRkXALc2l8=
Subject key identifier: 5D:24:14:A2:B3:64:D0:CE:B0:99:EE:51:1E:CC:CD:2B:D4:70:A6:B8
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 0C53
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/XSQUorNk0M6wme5RHszNK9Rwprg.roa
Signing time: Mon 17 Jun 2024 08:48:56 +0000
ROA not before: Mon 17 Jun 2024 08:48:56 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 123.0.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3155 (0xc53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Jun 17 08:48:56 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5D2414A2B364D0CEB099EE511ECCCD2BD470A6B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1e:0e:48:94:f0:2c:4c:8d:90:26:9c:f2:d9:
c4:a3:ef:e3:52:8c:8c:22:22:aa:5f:97:f7:36:f0:
5f:0e:84:4f:88:72:da:87:8f:c1:a0:6d:e3:21:78:
24:41:79:57:af:e9:d7:14:91:f5:cb:cb:cb:b1:5d:
9e:db:99:00:9e:38:88:39:6d:15:d9:38:cd:83:97:
f4:1e:d0:42:ea:b8:61:3d:97:3c:a1:6a:4c:f7:ea:
ea:82:a7:10:80:a9:50:97:00:c6:e2:78:c5:ed:3e:
50:12:41:28:96:c1:53:94:e9:d9:0a:22:ef:26:fd:
f3:0a:30:85:0d:cd:26:24:c4:04:69:fb:53:48:38:
b5:09:3f:86:84:c7:6a:fc:ed:24:f7:cc:ed:a3:f3:
92:38:5c:ea:15:54:e5:71:76:ee:3b:ae:bf:1b:b4:
81:f1:38:4f:71:5e:94:f9:c8:fe:78:3f:eb:b5:46:
46:e6:a9:19:d5:f3:84:4d:93:7e:82:55:71:24:64:
a9:e0:f0:f6:1e:13:cd:09:c0:76:2f:79:84:24:89:
97:06:23:90:5e:71:e0:5b:b9:76:b2:2c:cb:fd:3c:
8b:73:8d:98:b2:fd:9e:7a:47:88:93:2c:f6:dc:a4:
3a:7b:67:1a:25:9a:40:d0:2c:74:84:2e:b6:5a:b5:
2d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:24:14:A2:B3:64:D0:CE:B0:99:EE:51:1E:CC:CD:2B:D4:70:A6:B8
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/XSQUorNk0M6wme5RHszNK9Rwprg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.192.0/18
Signature Algorithm: sha256WithRSAEncryption
d0:39:a3:aa:8d:58:47:31:17:6f:8f:b8:0f:1c:27:a3:cf:d2:
ff:e5:8e:b1:7f:5a:da:16:b3:55:8a:48:bd:93:9d:b7:4c:e2:
70:0e:45:93:0f:d4:b1:a4:92:4f:b6:5d:37:20:3e:f0:2c:3f:
34:9d:e3:75:8d:1b:05:0b:9a:27:79:0b:62:c9:e0:91:76:f0:
3a:76:6e:89:6e:c4:ea:6a:16:3f:5d:f2:d0:f1:ec:5b:3c:d0:
de:33:93:71:ce:1a:e2:83:52:b7:4d:68:c1:23:fe:15:71:5e:
4a:47:63:78:06:e5:aa:36:4e:c5:02:43:f1:c9:51:49:30:ac:
42:8a:d8:b0:2d:ce:ff:d8:fc:1f:36:48:5f:4f:b2:15:1a:96:
31:46:b6:e4:d0:bf:b6:ae:49:f2:26:92:e8:89:be:b4:95:3b:
0e:a9:c8:ce:b3:c1:42:1f:72:bb:33:a8:8e:7f:8e:23:35:36:
72:c5:d5:7f:3a:02:c3:54:93:b6:22:89:7a:7b:2c:9f:07:60:
8b:69:db:63:99:1a:ec:08:ac:65:c0:89:a1:bd:2d:86:4b:e6:
9d:47:b9:05:93:4a:8b:0b:7d:47:2f:ba:01:7c:06:e5:7c:fa:
d6:63:9e:d3:a6:13:92:73:0e:0a:0f:00:ad:26:47:25:ed:ab:
d2:03:7b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org