Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/IKaN1KDMYLXJNt-eFxdwxQuy_nw.roa
File: IKaN1KDMYLXJNt-eFxdwxQuy_nw.roa (raw, json)
Hash identifier: RzqQObtLNuI4OltD3idH8DblfTA7ErvHHsaCNyVPu+g=
Subject key identifier: 20:A6:8D:D4:A0:CC:60:B5:C9:36:DF:9E:17:17:70:C5:0B:B2:FE:7C
Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial: 0B9E
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/IKaN1KDMYLXJNt-eFxdwxQuy_nw.roa
Signing time: Fri 01 Sep 2023 10:01:06 +0000
ROA not before: Fri 01 Sep 2023 10:01:06 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18049
IP address blocks: 27.100.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2974 (0xb9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Validity
Not Before: Sep 1 10:01:06 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=20A68DD4A0CC60B5C936DF9E171770C50BB2FE7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:af:45:76:f6:08:15:e2:d6:b0:e5:8d:b8:
49:a8:fe:37:72:c8:62:84:31:7d:11:ee:25:da:11:
6d:94:c7:72:52:84:a1:b8:bc:87:c2:5a:37:8a:a8:
29:56:f2:09:0d:af:b0:2a:f0:68:63:ad:0a:b1:49:
b4:9b:04:d8:11:74:12:e4:be:ab:13:42:2d:2e:2f:
b7:ab:ca:87:1e:49:ff:df:0f:32:ee:1b:f6:7e:77:
63:fa:20:b3:58:29:2a:59:98:e7:47:3b:cc:89:2f:
01:28:6a:39:24:0c:7e:c7:ed:72:88:b5:3e:98:0f:
17:ee:ae:75:ee:f5:70:6c:89:08:2d:c9:ea:81:9d:
26:74:33:08:e0:a0:92:15:86:82:25:55:fd:c3:cd:
7d:41:c3:4e:6b:96:4b:94:97:bd:51:da:ed:db:fc:
09:e9:74:36:ac:40:9b:db:82:9a:d9:a7:5c:73:29:
4b:1b:94:aa:ce:9b:84:8c:d8:8c:31:ee:ec:3f:62:
1f:18:31:08:3f:87:0f:e8:1d:f6:cd:61:08:9e:8f:
7e:86:b4:24:7e:e0:8e:c8:79:eb:43:ca:47:72:e7:
93:71:38:5e:b4:11:84:38:49:ee:bd:cb:f2:6f:13:
e2:a0:a6:27:76:e8:78:f9:7b:97:35:40:f4:b8:dc:
b3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A6:8D:D4:A0:CC:60:B5:C9:36:DF:9E:17:17:70:C5:0B:B2:FE:7C
X509v3 Authority Key Identifier:
keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/IKaN1KDMYLXJNt-eFxdwxQuy_nw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.100.64.0/18
Signature Algorithm: sha256WithRSAEncryption
17:51:fd:a0:e9:fe:b1:55:06:9d:e5:22:9a:1d:95:b2:d6:d9:
a7:48:13:ee:26:f1:e5:80:51:7b:8d:e7:6d:0f:15:ec:ad:2f:
15:41:88:f9:98:52:9e:84:f4:7a:4b:6a:13:87:cd:9b:fb:d6:
53:45:1e:f7:25:c7:40:2e:7c:05:5a:fe:b1:ca:b4:4d:93:d1:
9f:35:33:58:ff:c0:b2:06:0e:03:6f:f3:39:01:56:81:7b:be:
1f:d2:81:e4:71:50:6c:fe:a7:f9:ea:6d:ad:4d:07:93:10:17:
29:75:0e:d6:af:ec:f4:41:cd:b8:1a:43:61:28:5f:e7:63:4b:
f7:18:0f:ee:9c:ae:51:a8:46:fc:ee:63:da:19:50:d0:e1:51:
9b:da:4e:bd:76:cf:bd:c8:5e:30:16:2a:eb:eb:15:30:45:4f:
50:91:24:69:3c:06:e0:2c:b1:21:02:0a:f3:c8:12:56:67:bf:
11:cf:5e:04:fa:95:e1:92:86:2b:26:f3:63:7b:6a:3b:3a:3a:
2a:d5:6c:99:1f:25:bb:6f:3e:90:da:bc:41:63:71:e9:a3:69:
c3:80:be:f7:a3:d5:2a:53:8a:95:a3:9a:59:18:58:62:3f:7c:
01:58:cb:a5:4a:17:7a:ee:37:9d:3f:15:2c:4d:32:7b:11:14:
b6:a4:f6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org