Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/sjwxTPS-_05ShxAgHspLnzpHwAo.roa
File: sjwxTPS-_05ShxAgHspLnzpHwAo.roa (raw, json)
Hash identifier: Iegk+y74ZEmeZID4dZYOvTWvcOWO6LCtHR9CojTvrug=
Subject key identifier: B2:3C:31:4C:F4:BE:FF:4E:52:87:10:20:1E:CA:4B:9F:3A:47:C0:0A
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 0B8B
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/sjwxTPS-_05ShxAgHspLnzpHwAo.roa
Signing time: Fri 01 Sep 2023 09:59:54 +0000
ROA not before: Fri 01 Sep 2023 09:59:54 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131596
IP address blocks: 61.58.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2955 (0xb8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Sep 1 09:59:54 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B23C314CF4BEFF4E528710201ECA4B9F3A47C00A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d1:fa:f1:18:9a:ee:01:a8:ed:c2:71:ce:86:
b9:65:1d:fe:04:36:05:e2:4a:82:e2:a8:30:16:45:
e0:00:25:a4:6c:78:cc:4c:28:75:10:0b:f2:24:92:
c4:de:73:71:f4:04:4b:61:c2:0f:f9:56:ed:29:53:
a8:fd:17:f7:3d:f6:47:50:4f:fc:34:41:97:4c:bb:
2d:3c:ae:34:21:1f:81:67:07:9c:1c:79:83:a6:be:
80:65:31:a7:3f:57:2c:38:d2:e4:d8:9b:50:8b:e3:
60:79:f2:33:52:8b:4b:fd:50:14:01:33:2b:1a:8c:
c1:ab:b3:fa:15:af:14:55:b0:49:b9:cc:26:5d:69:
e4:51:cb:9a:58:25:c5:29:77:f7:ec:72:d5:95:2d:
ae:2f:e1:2f:de:d9:28:ae:55:f7:5c:9b:4d:5a:0c:
8b:14:b7:cf:76:31:87:d3:82:af:13:c1:05:58:e5:
dd:25:c3:70:e1:d2:50:cd:b1:3b:b0:44:e2:d6:7b:
89:7b:41:2b:94:cc:15:6b:57:fe:a5:b6:b7:8c:a1:
49:f1:29:3d:1b:18:0d:52:6f:64:d5:2b:67:65:b8:
62:70:8a:82:1e:5b:3d:70:35:a3:bf:90:d4:35:14:
01:a1:c6:0f:63:4b:a2:db:85:f9:87:e3:b5:29:4b:
63:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3C:31:4C:F4:BE:FF:4E:52:87:10:20:1E:CA:4B:9F:3A:47:C0:0A
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/sjwxTPS-_05ShxAgHspLnzpHwAo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.160.0/19
Signature Algorithm: sha256WithRSAEncryption
b1:34:3e:f2:02:1e:17:bb:01:6a:95:da:d2:e8:64:9d:a2:ad:
80:27:bc:fa:94:b5:e0:c2:cf:33:20:36:e5:fe:5d:2b:2e:8c:
1e:11:12:43:6a:ac:ea:b2:e0:04:cb:0f:e9:88:36:26:b2:66:
d9:2c:71:ce:21:d5:33:90:97:07:99:55:b8:0d:0e:65:36:94:
7e:01:b9:38:aa:ba:8a:87:53:d3:b0:de:f8:e6:af:6e:4c:fd:
6b:32:f9:b3:95:d3:af:9d:e6:4e:5c:ba:bb:76:1c:36:2e:71:
cd:18:a4:f0:fe:52:5e:5e:20:61:40:b6:19:70:dd:6b:cc:58:
ec:3d:77:c7:3e:8c:3f:5d:1c:4b:ae:c0:42:0f:ce:fe:c7:c3:
0a:97:4e:9a:5e:3a:82:85:58:10:5a:42:d0:15:f7:9b:8a:12:
22:5a:de:43:da:ee:83:78:d5:59:d4:c1:66:6a:77:06:be:ff:
00:f6:67:5b:13:1d:26:c5:37:c4:e7:2f:19:6f:7a:b3:52:bb:
57:82:dd:89:66:ee:da:7c:22:94:74:10:1c:f0:33:cf:22:f2:
e8:c1:d7:af:97:aa:58:f1:8b:a7:17:1f:0d:4e:69:13:f6:f2:
2b:ad:93:87:fd:85:ab:af:b7:b8:2d:8d:ed:1f:ab:33:d4:83:
26:69:1c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org