Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/S8UDrwg3W1Rq9pkNSleU6nKkFLw.roa
File: S8UDrwg3W1Rq9pkNSleU6nKkFLw.roa (raw, json)
Hash identifier: 2/czRi3OkNW60xAUNqXLkxNyfISZhSiFbGWNn0JF9Lo=
Subject key identifier: 4B:C5:03:AF:08:37:5B:54:6A:F6:99:0D:4A:57:94:EA:72:A4:14:BC
Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial: 0BA8
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/S8UDrwg3W1Rq9pkNSleU6nKkFLw.roa
Signing time: Fri 01 Sep 2023 10:01:09 +0000
ROA not before: Fri 01 Sep 2023 10:01:09 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18049
IP address blocks: 61.67.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2984 (0xba8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Validity
Not Before: Sep 1 10:01:09 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4BC503AF08375B546AF6990D4A5794EA72A414BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:52:54:3b:41:9b:d4:af:07:b5:7f:20:51:41:
34:9b:95:90:4c:7f:f9:d1:0d:eb:96:10:69:f8:c0:
d3:0c:af:07:bf:a1:9b:b2:03:4f:7d:60:98:04:8e:
9b:59:48:32:1c:8b:35:8d:0d:5f:6d:73:63:1d:1c:
0e:18:11:58:0e:2f:e6:84:7a:21:33:e6:2c:c2:9b:
d2:ed:cb:cf:7e:de:76:fb:80:eb:51:e4:1c:37:e3:
3c:89:df:0a:6a:d7:0b:74:19:03:8a:31:ae:3b:d2:
96:8a:f2:09:2f:6a:c9:a7:72:29:19:15:13:59:cf:
b3:45:29:66:a5:31:0a:8c:b1:de:29:4d:9f:00:35:
ca:4d:42:5a:12:d8:10:0f:df:f9:06:85:24:3a:5a:
d1:4c:a6:6d:b5:06:94:59:ff:de:20:8b:88:18:3c:
21:3f:e0:2d:67:f1:42:4a:78:95:59:ad:36:7f:15:
f9:b9:2a:93:13:b5:fd:ee:e0:cb:57:22:0f:ec:5f:
84:44:c2:f4:2a:61:08:c1:15:b5:d8:31:73:ab:0b:
6f:cd:d5:42:ef:a0:d4:51:35:2f:6d:9f:ef:a6:aa:
ae:10:d7:07:fa:ab:5b:80:a2:59:b7:dc:10:10:e2:
9f:ff:89:09:c9:e4:c4:47:4b:af:22:22:cb:d3:d7:
e1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C5:03:AF:08:37:5B:54:6A:F6:99:0D:4A:57:94:EA:72:A4:14:BC
X509v3 Authority Key Identifier:
keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/S8UDrwg3W1Rq9pkNSleU6nKkFLw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.67.32.0/20
Signature Algorithm: sha256WithRSAEncryption
11:8a:a4:f6:f1:61:1f:b9:08:6d:55:a8:95:e5:f3:db:2c:09:
1f:6c:1b:4b:47:61:2c:2c:ff:e4:2a:c5:e5:e6:15:a6:5f:25:
b2:c7:3c:5b:25:38:20:91:81:de:fb:2b:d1:84:7d:84:00:d9:
42:11:62:8a:b3:6d:32:cd:c1:04:85:80:73:16:e6:d0:63:b7:
db:15:82:65:5f:72:37:c7:3b:5d:ca:0c:87:af:a4:62:58:9f:
86:29:a5:21:28:1a:8e:af:f8:de:68:ee:7e:3d:c5:ca:2d:66:
0d:1e:89:fd:13:eb:ec:63:90:58:6e:a5:e1:09:42:3f:3b:3e:
ea:b6:dd:f6:d1:1e:50:45:76:ba:44:70:b6:fe:85:60:38:41:
62:3a:4d:ff:3a:78:19:66:a5:da:22:fd:70:6d:63:9c:92:ff:
2c:8c:a4:3d:8d:8c:90:c3:1b:d1:76:e1:ea:1f:e3:78:10:f5:
81:19:47:eb:17:d0:44:fe:be:57:cc:c9:81:15:a9:58:2c:ce:
4b:66:31:bf:ba:e8:f4:d8:a1:79:c6:54:6a:32:73:ac:23:2a:
d0:19:cf:cd:5c:57:83:66:0f:8f:8b:12:07:75:42:a5:4b:e0:
17:1b:a0:50:ed:8f:54:c1:48:7b:3e:33:5e:fb:8e:d4:01:d7:
67:30:cd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org