Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TSMC/L1v6jAVX__edN2zjPSWc0eN0z_I.roa
File: L1v6jAVX__edN2zjPSWc0eN0z_I.roa (raw, json)
Hash identifier: XGmLlvRkS2KVWAhyJgHqV7/lnT7mmRJQf83DrcUfnA4=
Subject key identifier: 2F:5B:FA:8C:05:57:FF:F7:9D:37:6C:E3:3D:25:9C:D1:E3:74:CF:F2
Certificate issuer: /CN=3A6BE8FAD78E95C4690ED99991FA79DF75F3D337
Certificate serial: 1199
Authority key identifier: 3A:6B:E8:FA:D7:8E:95:C4:69:0E:D9:99:91:FA:79:DF:75:F3:D3:37
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Omvo-teOlcRpDtmZkfp533Xz0zc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/L1v6jAVX__edN2zjPSWc0eN0z_I.roa
Signing time: Fri 01 Sep 2023 10:01:49 +0000
ROA not before: Fri 01 Sep 2023 10:01:49 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 202.126.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4505 (0x1199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A6BE8FAD78E95C4690ED99991FA79DF75F3D337
Validity
Not Before: Sep 1 10:01:49 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2F5BFA8C0557FFF79D376CE33D259CD1E374CFF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b2:81:c1:ab:b4:c3:e5:be:e1:1e:54:71:06:
66:9d:32:17:b3:5b:66:4b:75:17:8c:c5:36:d1:df:
49:d8:88:f9:1b:0a:5a:fa:1b:04:50:66:bd:a1:2e:
a5:39:d1:bd:16:eb:34:6e:86:61:73:17:c7:d7:13:
eb:a2:1d:7f:36:e0:3f:8f:6d:d3:f5:8e:e9:71:7c:
3d:b0:8a:86:7b:67:89:a0:e3:a6:a4:84:c3:1c:2e:
60:64:e4:6a:56:d0:9d:d4:27:6a:ea:52:09:c9:bf:
e0:76:65:0a:b1:a3:5c:ca:65:b9:9f:d3:27:b8:2d:
31:31:68:f1:53:f1:62:ab:c1:8a:ba:27:8f:e4:9f:
31:81:e4:6f:56:a9:a9:ef:09:36:53:97:63:87:2c:
74:83:39:43:86:e3:e4:87:c3:f8:4a:18:9d:01:c2:
dc:0e:9f:f7:29:d3:32:16:36:72:a6:f0:e2:52:29:
08:c9:60:73:42:e2:16:c5:c0:ae:d8:1c:c4:fa:cb:
3b:f8:af:51:cf:eb:96:5c:55:7f:52:f3:b9:ba:0e:
81:5a:29:34:c9:bd:47:88:32:71:e8:f6:d1:44:9b:
d4:69:47:72:77:8a:9b:9a:16:a4:f4:4a:2a:37:f2:
5e:d7:54:15:bc:71:c3:95:92:0d:66:db:b4:89:10:
35:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5B:FA:8C:05:57:FF:F7:9D:37:6C:E3:3D:25:9C:D1:E3:74:CF:F2
X509v3 Authority Key Identifier:
keyid:3A:6B:E8:FA:D7:8E:95:C4:69:0E:D9:99:91:FA:79:DF:75:F3:D3:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/Omvo-teOlcRpDtmZkfp533Xz0zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Omvo-teOlcRpDtmZkfp533Xz0zc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/L1v6jAVX__edN2zjPSWc0eN0z_I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.126.64.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:f9:14:33:0b:f7:5b:29:60:73:b1:f8:74:e3:3a:3e:6d:9c:
8b:cf:8d:11:e9:be:f6:16:33:7b:f7:29:c9:bf:d8:75:5e:dc:
cf:a1:45:ae:cd:fa:5e:ca:63:7d:a4:b9:c3:1f:ef:22:19:94:
96:ac:7d:47:88:63:92:9b:0a:f3:97:f3:01:bd:9f:fb:f9:8a:
5d:bb:84:78:97:a1:6d:2b:24:8e:de:3b:0d:87:89:80:38:ae:
f5:15:b6:fd:5b:e7:c3:09:15:47:aa:53:20:33:67:32:c2:78:
69:fc:8f:71:43:ea:d3:4c:11:9e:65:03:92:f4:04:8c:8c:5e:
8f:88:f5:a8:92:94:30:62:c3:47:57:6e:76:a1:04:a8:45:40:
18:c7:5e:c9:99:95:a5:4c:1e:62:72:93:92:f8:ef:c5:ad:d7:
af:66:25:40:97:c1:74:6e:69:7e:86:01:89:d9:1c:5c:4b:03:
b9:32:a2:a2:fa:e6:95:a3:0f:ad:eb:95:a5:34:ea:af:bd:8d:
80:fe:8e:c7:58:30:20:f1:f7:f2:d1:74:98:f1:32:07:ca:2c:
8c:72:3a:de:28:ce:5c:84:85:52:87:56:51:2d:8d:10:28:d4:
bf:d9:4e:00:74:83:b3:cf:29:67:b1:da:0c:8b:eb:2f:86:4f:
2e:57:a6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org