Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/1ul4Osq9HBuoyRyBoZN-n5jksow.roa
File: 1ul4Osq9HBuoyRyBoZN-n5jksow.roa (raw, json)
Hash identifier: sRc/T0Cmslns1KtvCfyCIuuE4ibNIA3I+Un+pAy4ICs=
Subject key identifier: D6:E9:78:3A:CA:BD:1C:1B:A8:C9:1C:81:A1:93:7E:9F:98:E4:B2:8C
Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial: 0BA5
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/1ul4Osq9HBuoyRyBoZN-n5jksow.roa
Signing time: Fri 01 Sep 2023 10:01:09 +0000
ROA not before: Fri 01 Sep 2023 10:01:09 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4780
IP address blocks: 27.100.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2981 (0xba5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Validity
Not Before: Sep 1 10:01:09 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D6E9783ACABD1C1BA8C91C81A1937E9F98E4B28C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:37:32:2d:34:85:4e:e0:3b:a2:ea:5b:ec:
f6:c2:00:17:34:b2:a2:b4:bd:5e:04:7c:0f:00:1f:
e7:63:1c:1d:5d:99:11:2d:fa:50:c9:5f:c9:dd:fa:
e1:c7:4a:f7:34:60:08:24:54:38:79:f9:ee:16:90:
25:06:aa:3c:3f:d2:e4:80:a9:58:1c:e5:58:0d:a5:
30:58:69:10:fc:a1:4c:da:2f:27:a0:7b:c5:ee:0b:
83:e2:1e:ac:b7:5a:16:f5:69:2b:1c:a2:39:cb:87:
a0:10:12:c1:fa:97:74:ff:12:7d:9e:8a:41:f0:a8:
f3:94:93:26:5d:2a:5f:e2:57:b3:18:5d:21:df:3d:
96:76:52:55:96:d6:cb:b6:e7:e2:f8:7f:d2:24:30:
aa:f3:f0:63:c2:7c:6b:e2:c3:32:db:fb:2d:b3:00:
91:b0:6d:82:c0:d9:8a:2e:2e:ba:f9:bc:58:c9:cb:
2f:db:7a:c7:fb:bc:ca:b9:3d:1d:0f:95:50:9d:bb:
02:dd:86:8d:6e:37:ff:13:38:57:55:61:7f:50:cd:
bc:87:70:84:bd:8e:19:de:5b:ba:d6:83:68:1d:ea:
ed:44:4b:db:06:88:fe:81:43:7d:5a:ac:f9:3c:8c:
46:c2:19:36:a6:62:e8:52:ba:f3:ae:e1:45:17:35:
a5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E9:78:3A:CA:BD:1C:1B:A8:C9:1C:81:A1:93:7E:9F:98:E4:B2:8C
X509v3 Authority Key Identifier:
keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/1ul4Osq9HBuoyRyBoZN-n5jksow.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.100.64.0/18
Signature Algorithm: sha256WithRSAEncryption
38:2e:b3:61:84:f0:63:c0:4d:64:c9:1f:56:de:34:c1:c9:c1:
4f:1b:8f:be:4e:3e:e3:93:4e:01:45:47:e8:42:eb:d6:85:d1:
a0:e0:e4:21:46:4b:9c:47:2f:39:f2:bc:6f:4e:28:2a:53:a6:
d3:6a:86:8b:57:8e:44:9b:80:0c:b4:6c:2f:29:e9:5f:87:58:
a3:c8:78:4a:1f:68:43:d5:c5:a9:c7:5d:5a:bb:0f:23:0b:d1:
e3:eb:fd:e6:16:f8:7e:4d:06:fa:5f:9c:01:eb:08:e3:51:b5:
e7:5f:59:90:62:0a:4f:c9:3b:f8:ab:18:4d:ee:92:57:5f:d0:
10:ed:05:dc:85:fe:73:13:3d:8b:f0:d3:b8:74:a8:72:25:b3:
27:c6:e8:88:9e:bd:06:8d:e7:2d:82:0f:52:4d:76:f3:ec:a0:
4a:50:98:81:10:f7:fc:62:78:76:0e:d5:d7:ce:2e:fe:47:5a:
06:fd:a9:9a:8a:99:b5:59:59:0a:95:61:3a:24:0f:ce:a1:64:
d3:00:81:5a:49:1d:7d:8f:bd:f3:c0:d3:1b:b9:ac:8a:12:c7:
91:2a:e9:56:5c:85:23:a8:39:2e:97:74:ee:0c:0e:4c:43:fe:
0f:5a:9c:04:7b:1d:0d:35:fa:66:91:88:95:75:dc:cf:70:3a:
6a:31:e2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org