Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/H9h57ETZ7U0TOUaaNHTUbIaPOtI.roa
File: H9h57ETZ7U0TOUaaNHTUbIaPOtI.roa (raw, json)
Hash identifier: /9zhVj98DgA4ZLtOQPNHDDgWZIQB3YaJZsN46K7kn+0=
Subject key identifier: 1F:D8:79:EC:44:D9:ED:4D:13:39:46:9A:34:74:D4:6C:86:8F:3A:D2
Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial: 0B99
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/H9h57ETZ7U0TOUaaNHTUbIaPOtI.roa
Signing time: Fri 01 Sep 2023 10:01:05 +0000
ROA not before: Fri 01 Sep 2023 10:01:05 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18049
IP address blocks: 211.73.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2969 (0xb99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Validity
Not Before: Sep 1 10:01:05 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1FD879EC44D9ED4D1339469A3474D46C868F3AD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:34:17:bc:44:e5:97:fc:1e:6e:fe:cf:43:42:
03:30:77:f6:4f:67:51:ab:25:ba:f3:55:90:74:ec:
42:b4:90:5e:6a:b9:cc:2d:d0:be:1d:51:2f:96:6c:
bd:aa:c2:86:66:af:55:8d:b1:0e:2f:01:92:26:73:
3e:c4:a0:b2:36:23:23:12:c0:3f:5f:29:36:ee:fa:
2f:c7:92:db:d1:0d:16:e6:2b:03:8c:0d:a1:3e:53:
8f:f1:c5:6d:e6:75:5c:5c:8b:1c:2c:dc:3b:5f:b1:
88:36:59:e7:d3:a3:dc:22:f4:28:ce:d8:50:46:ab:
f7:fd:96:7e:dc:a0:16:07:d1:41:86:b5:32:10:fe:
55:fe:ff:04:d6:c2:8b:b3:99:36:bd:e8:5e:f2:75:
af:9f:54:9c:40:85:08:9d:1b:af:3d:a5:6a:a7:75:
2d:f8:40:9b:43:a6:22:22:89:75:d5:03:c7:a0:45:
c5:b2:24:a7:69:3e:08:47:e9:ab:08:09:24:dd:91:
4f:89:92:eb:6a:51:45:29:6d:ee:4e:c8:c3:32:15:
2e:6f:5a:b6:80:95:f8:45:69:ea:79:c8:26:51:1f:
eb:d0:50:22:31:e3:1e:e8:68:93:a3:20:25:64:f4:
31:ad:a8:96:fb:89:6e:b8:ba:b0:02:19:c9:9c:1c:
cf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D8:79:EC:44:D9:ED:4D:13:39:46:9A:34:74:D4:6C:86:8F:3A:D2
X509v3 Authority Key Identifier:
keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/H9h57ETZ7U0TOUaaNHTUbIaPOtI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.73.160.0/19
Signature Algorithm: sha256WithRSAEncryption
6f:8a:c9:7e:4d:b2:27:4d:74:32:f7:a5:23:75:19:60:c0:dc:
b0:fa:f8:07:70:3e:1d:09:fb:eb:ae:d5:8a:33:78:53:34:29:
68:2a:5c:fd:6f:19:d4:2e:ad:2b:0a:79:80:6c:a8:cf:32:1f:
e4:0b:75:63:54:d4:a5:90:99:98:0a:62:b0:68:59:9e:43:5f:
d8:62:2a:33:d5:42:14:3c:8d:a5:86:8c:fb:ca:04:38:b7:06:
df:f4:04:2b:db:b1:d2:ee:df:b5:c6:59:6f:00:37:f2:81:3a:
2b:66:8a:b0:7f:aa:08:e7:5e:c5:40:aa:c0:12:ce:94:59:2b:
a9:2a:93:f1:f2:b6:3c:f5:b7:18:17:35:74:d1:d3:d1:2a:02:
9b:6e:2a:e0:9f:6d:86:11:31:0d:d8:c8:f5:a5:cd:cc:6e:11:
05:0f:0f:97:59:6a:8d:8e:63:93:1e:23:86:df:5f:68:6c:10:
bd:9b:66:18:06:02:85:9e:1c:9f:3e:27:d0:8c:b8:30:71:4d:
59:4a:03:98:40:e6:87:6a:35:47:21:a2:c0:ed:65:cf:eb:9d:
2a:25:90:aa:37:bc:ba:a7:b1:41:da:65:47:7a:fe:6a:0c:70:
c1:11:ac:d0:42:91:14:f1:56:da:3e:c8:45:c0:80:c7:dc:45:
c1:88:f8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org