Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gzWk9jzHZwaRBKNmHi1sHrsKzbo.roa
File: gzWk9jzHZwaRBKNmHi1sHrsKzbo.roa (raw, json)
Hash identifier: kyAfdjWa02OSsuLtclXB0l2rWNEtMTORJE2p/2/Xb+Q=
Subject key identifier: 83:35:A4:F6:3C:C7:67:06:91:04:A3:66:1E:2D:6C:1E:BB:0A:CD:BA
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 0C55
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gzWk9jzHZwaRBKNmHi1sHrsKzbo.roa
Signing time: Mon 17 Jun 2024 08:49:16 +0000
ROA not before: Mon 17 Jun 2024 08:49:16 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 123.110.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3157 (0xc55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Jun 17 08:49:16 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8335A4F63CC767069104A3661E2D6C1EBB0ACDBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:71:e7:3d:49:73:58:ec:35:d6:27:f3:38:b4:
38:72:05:43:c1:8f:1e:bc:40:3c:ba:fb:e6:46:59:
85:73:21:bc:28:34:c0:ea:d7:ff:b1:8e:42:4e:77:
5c:cb:8a:6d:72:8d:be:62:01:f0:7e:8b:54:d2:cb:
a9:44:e1:df:75:17:73:a1:83:dd:f0:c9:57:6a:de:
a8:c5:f8:3f:7c:4a:c6:3b:ad:b7:2b:19:8a:06:ca:
f5:9b:2c:d4:73:c0:9c:db:28:c8:0c:c8:f5:f4:10:
03:6e:7f:f7:8c:72:55:59:dd:80:e6:4d:24:5f:88:
db:d4:67:57:a6:0e:78:12:41:25:7c:e7:12:32:7b:
47:ff:aa:3c:d4:49:16:d3:2e:02:9f:34:53:fc:1f:
c6:40:a8:bb:bd:d3:6c:b1:26:0c:71:08:87:a3:c2:
a0:10:f2:d7:a8:bf:29:ea:c2:7d:2b:55:58:7b:9e:
3d:86:96:4b:08:ef:0b:2e:09:a6:5c:05:a1:63:44:
11:89:9e:37:07:8a:39:86:21:6f:3e:b1:62:9e:ac:
95:e4:67:97:7c:fe:92:80:05:d0:d4:10:b6:8b:ae:
54:a1:f6:ee:5e:14:fd:16:c9:73:1b:84:c5:11:bd:
71:35:b1:b8:f6:06:e6:67:5a:ad:60:e2:49:07:1a:
7f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:35:A4:F6:3C:C7:67:06:91:04:A3:66:1E:2D:6C:1E:BB:0A:CD:BA
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gzWk9jzHZwaRBKNmHi1sHrsKzbo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.110.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2e:d7:d0:ed:1d:60:1e:90:9d:e9:12:13:38:c6:86:32:dd:b0:
a8:5c:5f:89:41:e2:39:ec:0f:a7:9d:38:b0:32:cb:94:1d:e8:
2a:e1:46:a5:98:5b:cc:69:85:82:42:10:14:18:38:a3:da:7c:
d5:9d:f1:f1:d2:3e:86:16:24:43:1a:06:b1:df:8c:75:5b:67:
c7:f9:d4:69:0b:80:d2:ff:3c:72:a1:a1:ed:d1:75:a4:7d:74:
9e:3d:1f:f9:56:74:47:1b:ea:cc:30:c2:5e:35:d5:14:7f:29:
63:ec:c1:ae:f5:a7:ca:f6:15:68:0f:ac:81:c3:91:f1:bd:a2:
30:49:90:90:28:27:05:7d:7a:56:36:41:fe:f2:6f:1c:a1:03:
40:83:52:71:ba:a7:3d:3a:0c:0f:40:29:85:79:fc:6d:cd:a5:
15:14:a0:7b:68:54:05:31:68:37:b2:af:2f:21:6d:4b:bd:6c:
10:ba:44:76:22:90:55:d6:8a:42:f2:75:b3:ce:5e:a3:fb:ae:
e4:2f:11:bd:58:47:86:60:34:1c:73:83:fa:e1:b6:d4:b3:be:
13:d5:50:9e:f3:db:7e:20:ae:30:d6:b3:51:78:4c:4c:9f:97:
98:43:32:90:65:81:fd:c8:ca:a8:2c:0a:c6:52:b4:bc:2f:1e:
6f:f0:1e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org