Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TNET/IvcIAvJSjvyzmgnNEuyzsmayOzI.roa
File: IvcIAvJSjvyzmgnNEuyzsmayOzI.roa (raw, json)
Hash identifier: oE1Htle9TtrAJ+9JYkyw1UJERCjYhVQpzSwFZHSYmnA=
Subject key identifier: 22:F7:08:02:F2:52:8E:FC:B3:9A:09:CD:12:EC:B3:B2:66:B2:3B:32
Certificate issuer: /CN=9FE26AE5E0DA56EC49EC9986B9C894D5B898A153
Certificate serial: 0890
Authority key identifier: 9F:E2:6A:E5:E0:DA:56:EC:49:EC:99:86:B9:C8:94:D5:B8:98:A1:53
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/n-Jq5eDaVuxJ7JmGuciU1biYoVM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/IvcIAvJSjvyzmgnNEuyzsmayOzI.roa
Signing time: Wed 18 Nov 2020 07:16:10 +0000
ROA not before: Wed 18 Nov 2020 07:16:10 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38851
IP address blocks: 43.227.26.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2192 (0x890)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FE26AE5E0DA56EC49EC9986B9C894D5B898A153
Validity
Not Before: Nov 18 07:16:10 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=22F70802F2528EFCB39A09CD12ECB3B266B23B32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:30:f3:4b:8e:ed:4e:ce:55:a0:4d:70:dd:c7:
ae:b7:84:77:1f:b4:62:67:6c:85:f9:50:2d:e6:08:
0f:3b:bf:23:5a:04:55:e6:18:6f:39:94:3e:d5:2c:
9d:d4:63:47:0a:bc:f7:1b:bf:3b:71:41:e7:53:2f:
13:15:d8:22:41:10:b4:63:74:c3:11:02:e9:0a:91:
02:24:59:93:3a:49:89:30:2e:8c:49:da:d5:e0:e6:
83:03:b1:d1:b6:52:f0:f6:8d:41:67:ac:89:c2:36:
09:af:52:13:14:81:f0:6c:10:fe:50:dc:4b:aa:8e:
1c:c1:fa:63:a0:fa:aa:72:20:8d:35:0d:5a:72:f3:
a8:fc:96:ba:fd:24:01:99:94:7b:d6:f6:ce:60:41:
6a:66:02:fd:42:28:8c:4d:55:e9:a4:6a:a9:ca:40:
66:fb:3e:43:78:13:65:c6:8e:90:66:08:c9:7b:9b:
fc:4a:d9:c3:e4:b6:45:f8:29:a6:43:b8:89:04:30:
9d:70:70:98:39:ac:3b:12:b6:89:be:44:9f:7a:b9:
c2:f0:f1:e2:66:56:1c:14:b8:06:c2:e6:92:af:32:
f7:1f:bc:46:68:41:60:c3:99:13:af:d5:65:73:9d:
12:34:db:61:94:88:4a:52:c8:62:90:e2:18:19:4b:
1e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F7:08:02:F2:52:8E:FC:B3:9A:09:CD:12:EC:B3:B2:66:B2:3B:32
X509v3 Authority Key Identifier:
keyid:9F:E2:6A:E5:E0:DA:56:EC:49:EC:99:86:B9:C8:94:D5:B8:98:A1:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/n-Jq5eDaVuxJ7JmGuciU1biYoVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/n-Jq5eDaVuxJ7JmGuciU1biYoVM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/IvcIAvJSjvyzmgnNEuyzsmayOzI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.227.26.0/23
Signature Algorithm: sha256WithRSAEncryption
95:02:9b:0f:e3:6b:88:11:88:d1:1f:c3:a5:f8:a5:74:dd:ae:
c0:e2:da:f3:58:45:bd:01:b8:c9:51:a8:eb:be:5a:4c:e9:fa:
06:39:fc:9d:48:de:f6:f3:a9:ef:4a:a5:54:41:f0:35:37:b7:
45:f0:30:01:ad:78:8e:f8:9a:3f:d9:18:7b:0b:68:32:c8:67:
14:75:40:71:d0:45:7d:a4:a4:2a:05:71:5c:38:06:9e:4d:ea:
a5:69:e1:de:62:4c:f8:84:44:6a:e3:f6:ae:20:19:ed:cd:79:
1b:f1:7c:81:9c:5d:73:7f:ef:ab:88:a7:83:34:1a:4f:67:70:
5b:fc:33:0e:e6:47:95:d4:9e:a4:c5:1e:f5:92:8a:e9:d3:17:
5d:b8:b1:8e:20:86:1f:ae:73:f1:e4:24:6f:9f:3a:77:24:bf:
45:a4:dd:f0:3d:67:14:5e:33:39:3e:82:de:70:43:5b:78:0c:
2d:7d:36:81:8c:6e:97:f4:c7:d2:16:84:58:ac:2c:93:33:f6:
13:b0:a3:c1:f0:ad:8f:c9:f6:e8:5d:a1:b0:8b:14:cb:a2:f9:
58:2f:25:07:a6:9f:63:1e:9e:2d:fc:3b:48:2d:c3:cc:7b:5b:
a2:0f:eb:20:2f:1a:21:2c:3e:e9:6c:4e:5c:ec:6a:b2:12:ba:
e5:65:05:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:21 2025 by rpki-client