Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/NWt2mrUMWerj7lDeC0uI6LcpPA0.roa
File: NWt2mrUMWerj7lDeC0uI6LcpPA0.roa (raw, json)
Hash identifier: 0eIJ5Vq4e+6a46O93JwfXk2Y5KCQQkEedEvbJHOAKS8=
Subject key identifier: 35:6B:76:9A:B5:0C:59:EA:E3:EE:50:DE:0B:4B:88:E8:B7:29:3C:0D
Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial: 0B9D
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/NWt2mrUMWerj7lDeC0uI6LcpPA0.roa
Signing time: Fri 01 Sep 2023 10:01:06 +0000
ROA not before: Fri 01 Sep 2023 10:01:06 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18049
IP address blocks: 49.213.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2973 (0xb9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Validity
Not Before: Sep 1 10:01:06 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=356B769AB50C59EAE3EE50DE0B4B88E8B7293C0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:96:62:7a:18:ee:0b:0c:a8:c7:61:db:fd:a0:
c1:33:c0:77:36:4b:6f:6e:bc:f6:b6:e8:90:c1:50:
bb:6d:a9:b7:77:3c:de:b3:4e:06:e4:ea:91:ec:67:
fe:6c:e9:69:75:35:f8:cc:c8:ee:9b:93:28:bb:c7:
7b:dd:fe:58:64:21:18:7f:0d:a8:2b:5a:22:05:1d:
09:2c:75:4c:d4:30:91:96:f0:51:71:66:22:eb:c9:
ed:7c:a0:7b:eb:84:ec:e8:ed:5c:ef:6a:f2:e0:9e:
e6:ac:e0:90:5a:de:3b:9e:6d:39:4e:2f:02:32:7b:
82:23:76:13:ec:6f:21:57:30:0d:68:0b:dc:48:15:
6b:ac:ad:3e:42:19:92:a5:08:97:a2:b5:2d:d8:0b:
a4:1b:5d:8e:90:9e:a6:3d:6a:f7:31:d0:b5:7e:2f:
da:3b:bf:49:41:9c:83:7f:65:ab:74:eb:41:8c:a1:
92:e7:6e:be:2e:23:c7:95:d9:85:73:9d:45:77:48:
2e:40:e2:69:1e:52:43:da:01:8e:89:d2:f5:00:5c:
1e:2f:3f:22:bd:8d:9e:09:f2:2d:7a:12:78:aa:f2:
a6:38:d5:0b:40:c3:4d:05:75:75:1c:24:3b:90:4c:
08:c3:62:fc:a6:87:2c:10:9c:40:e4:a3:52:c3:e2:
b3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6B:76:9A:B5:0C:59:EA:E3:EE:50:DE:0B:4B:88:E8:B7:29:3C:0D
X509v3 Authority Key Identifier:
keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/NWt2mrUMWerj7lDeC0uI6LcpPA0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.213.128.0/17
Signature Algorithm: sha256WithRSAEncryption
b2:91:76:f4:b4:b3:e0:21:40:c6:56:12:fb:b3:22:2a:33:86:
d9:94:93:72:9a:a3:76:60:89:f1:09:d1:06:9a:31:b1:92:30:
41:61:94:f0:24:b3:6d:aa:39:84:25:8c:5b:23:26:a4:b8:b9:
7c:ff:70:52:30:3c:7d:12:7d:95:ea:54:a9:e2:c7:96:bb:c0:
3e:84:d5:76:6f:94:0c:92:b6:74:06:9a:e0:ba:c7:fa:96:54:
d7:87:13:f3:57:e9:84:42:80:c8:4f:0c:4d:f4:b1:df:5f:e0:
75:8a:1c:cf:39:3d:f9:5b:e5:2f:80:45:db:13:cd:c7:0e:3a:
26:b2:0f:90:2a:3d:3c:32:5c:de:c1:d9:c2:48:7b:6c:72:55:
85:07:07:29:fc:20:f6:ce:23:f5:3e:b1:b6:90:53:4f:a2:c5:
6b:f7:8c:38:c4:1e:40:f7:1c:dc:4b:d8:0a:9c:14:c0:94:b5:
10:c3:15:0f:cc:6a:4b:aa:57:0d:79:54:96:06:87:e9:bc:8b:
3a:8e:4d:77:90:36:f9:c9:89:b1:fe:90:a2:22:c2:10:47:2e:
91:60:ba:7c:bf:1a:9f:d3:95:f5:84:5e:de:9b:55:0d:c5:1e:
8b:3f:57:e1:f6:12:ed:b6:31:7c:9c:d4:e0:81:80:35:5f:0d:
8e:18:c7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org