Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/8AyNOKBfFiswIjrLwbWSAwfLNMw.roa
File: 8AyNOKBfFiswIjrLwbWSAwfLNMw.roa (raw, json)
Hash identifier: jKo+C49d8QzD2RYx710Jl9oZgIZVvBOjhivLj5YWRY0=
Subject key identifier: F0:0C:8D:38:A0:5F:16:2B:30:22:3A:CB:C1:B5:92:03:07:CB:34:CC
Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial: 0B9A
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/8AyNOKBfFiswIjrLwbWSAwfLNMw.roa
Signing time: Fri 01 Sep 2023 10:01:05 +0000
ROA not before: Fri 01 Sep 2023 10:01:05 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4780
IP address blocks: 58.99.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2970 (0xb9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Validity
Not Before: Sep 1 10:01:05 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F00C8D38A05F162B30223ACBC1B5920307CB34CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5c:5d:8e:48:db:86:95:af:ac:b5:80:3b:f9:
6d:71:e8:89:b7:3f:f9:e6:4f:7b:96:ee:32:07:bc:
d2:14:50:d1:04:d2:76:f9:f9:35:01:5e:2f:af:2a:
be:f6:c6:8a:5f:17:b6:ae:64:e0:ac:21:33:7b:71:
a4:17:6d:a3:97:71:00:50:a5:c8:83:9d:f9:be:18:
a3:dc:84:1b:ea:fa:d7:a9:f6:20:e6:51:1f:e5:6b:
dc:04:45:e7:0f:6c:59:8a:45:6b:09:ad:51:3b:44:
2d:04:6b:c7:ba:77:40:e8:9a:04:25:e4:f6:28:58:
01:f5:0a:11:42:cb:08:18:2e:24:4e:d9:b0:1a:d4:
1a:f9:74:af:30:bc:c2:b5:fb:ea:35:85:75:df:46:
a4:cc:ae:9a:27:18:15:78:0f:c2:d7:d7:9f:9a:d1:
f9:32:52:b0:77:27:30:f8:b4:18:12:e0:d8:8c:5b:
21:c9:8d:6a:38:5a:07:58:4f:f4:01:47:dc:95:47:
9a:dc:7e:21:73:e3:92:4b:a4:8c:2a:85:67:c3:f4:
04:b6:a7:7f:3f:af:b6:22:3e:60:fe:0c:c4:96:3d:
9e:de:e8:cd:00:63:90:5c:97:8f:0e:6d:4f:48:7e:
50:d4:13:6e:05:c2:29:bd:94:58:68:e3:ad:83:78:
42:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0C:8D:38:A0:5F:16:2B:30:22:3A:CB:C1:B5:92:03:07:CB:34:CC
X509v3 Authority Key Identifier:
keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/8AyNOKBfFiswIjrLwbWSAwfLNMw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
58.99.0.0/18
Signature Algorithm: sha256WithRSAEncryption
25:4e:fc:85:9f:8d:b8:d5:28:46:6d:97:c7:a8:f2:ce:7c:91:
fa:7b:6e:2f:8e:2a:00:d0:46:0a:46:a2:0d:67:73:10:45:86:
8b:3e:4d:9a:fd:6c:ae:43:b6:4c:a6:91:80:0f:8f:15:45:18:
b4:5d:ea:2e:1c:66:e5:3c:42:7c:57:47:00:be:82:c0:9f:56:
5c:83:7a:54:d7:4c:29:37:a2:03:96:fe:7c:c9:27:19:96:20:
fb:0c:cf:a0:cc:69:77:1c:6d:27:98:43:f9:64:cf:71:0e:8d:
44:37:ca:dd:8c:cc:c5:11:53:69:28:09:c9:53:fc:67:c5:3c:
bb:b1:2c:38:4a:19:fd:b7:a4:51:86:5b:8e:9b:cd:4a:ac:b6:
2f:17:42:09:c2:eb:19:1e:62:cf:29:6a:c6:18:ce:d9:f3:7f:
4b:4f:eb:c7:32:4e:a2:d1:c1:f1:49:38:fa:e1:c9:d0:e5:ce:
f1:ae:16:fc:40:98:ae:58:e1:2e:18:ae:f9:f2:50:42:03:2f:
2c:6d:68:60:8c:4b:dd:c2:bd:f9:af:08:4d:a4:0d:c1:61:9c:
c3:cf:08:64:c3:e1:a0:11:74:3b:fc:b5:a6:ba:c1:05:0d:c2:
93:49:d4:ea:07:eb:9c:b2:a1:17:b6:ce:1c:a0:7f:e9:b1:17:
12:7d:36:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org