Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TSMC/M_gwunrfRjOzxPpq3pqgEhXOW8s.roa
File: M_gwunrfRjOzxPpq3pqgEhXOW8s.roa (raw, json)
Hash identifier: E0qIQ+X2O+dzgw6d7xPiP5I6BjiVpxMFVv92/3gHPp8=
Subject key identifier: 33:F8:30:BA:7A:DF:46:33:B3:C4:FA:6A:DE:9A:A0:12:15:CE:5B:CB
Certificate issuer: /CN=3A6BE8FAD78E95C4690ED99991FA79DF75F3D337
Certificate serial: 119A
Authority key identifier: 3A:6B:E8:FA:D7:8E:95:C4:69:0E:D9:99:91:FA:79:DF:75:F3:D3:37
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Omvo-teOlcRpDtmZkfp533Xz0zc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/M_gwunrfRjOzxPpq3pqgEhXOW8s.roa
Signing time: Fri 01 Sep 2023 10:01:50 +0000
ROA not before: Fri 01 Sep 2023 10:01:50 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3462
IP address blocks: 202.126.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4506 (0x119a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A6BE8FAD78E95C4690ED99991FA79DF75F3D337
Validity
Not Before: Sep 1 10:01:50 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=33F830BA7ADF4633B3C4FA6ADE9AA01215CE5BCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:21:89:95:3d:90:9f:70:69:08:0a:5d:ce:80:
96:f0:2e:9d:75:4b:56:72:ab:01:a6:25:5c:9d:d4:
40:74:0c:19:5d:47:76:61:e9:67:e0:df:61:93:72:
27:b1:ff:13:54:38:78:2d:5f:2f:98:5e:01:9a:48:
30:5d:c3:9e:1d:11:17:08:c4:2a:e4:81:e5:d3:10:
87:30:e8:dc:63:71:dd:6e:41:e9:01:85:26:05:57:
64:35:37:f5:14:b0:67:f2:4b:49:ee:fc:2d:a4:73:
7a:01:e6:94:96:bb:df:bb:c9:71:dc:15:72:ee:69:
60:c7:43:61:16:a6:5b:f7:38:da:f4:56:ee:9f:92:
2d:64:26:16:7f:fb:85:63:a2:ab:27:ed:31:4f:0e:
05:6f:ff:22:35:f6:20:07:1c:ba:9a:4e:d9:d4:2f:
ff:2d:3d:74:05:f6:9b:b9:eb:b8:aa:89:da:7f:ed:
f6:47:71:67:4c:2f:55:ba:b0:71:15:d5:3d:e9:02:
d7:a1:26:22:0b:d2:c6:68:5c:12:0b:e5:f6:ff:3f:
57:7d:dc:a7:eb:15:82:e0:68:fe:95:c4:2c:67:e6:
b1:3f:b7:65:64:8b:89:e7:ee:a8:ae:e3:84:b6:8b:
87:dc:bc:4e:6c:24:67:70:31:dc:91:b5:03:f0:c9:
c1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F8:30:BA:7A:DF:46:33:B3:C4:FA:6A:DE:9A:A0:12:15:CE:5B:CB
X509v3 Authority Key Identifier:
keyid:3A:6B:E8:FA:D7:8E:95:C4:69:0E:D9:99:91:FA:79:DF:75:F3:D3:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/Omvo-teOlcRpDtmZkfp533Xz0zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Omvo-teOlcRpDtmZkfp533Xz0zc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/M_gwunrfRjOzxPpq3pqgEhXOW8s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.126.64.0/20
Signature Algorithm: sha256WithRSAEncryption
ae:5c:05:90:a7:03:c5:dd:07:25:4b:aa:e4:b9:34:c1:91:fa:
02:a1:0a:ba:eb:3c:d2:37:ac:cf:98:69:e7:a7:6b:ea:1b:05:
bb:52:51:b6:c6:7a:6c:b2:66:5a:c1:82:37:36:c7:49:47:ff:
49:f5:08:43:d0:c6:c3:cc:36:2b:0c:12:d4:20:3b:e5:d0:8e:
7b:12:73:b0:6b:92:4d:74:14:44:21:89:dd:1a:91:92:f2:58:
aa:c0:bf:d9:89:5c:c2:9c:26:69:ab:53:ca:93:16:11:89:62:
82:99:f8:3a:70:d3:fb:88:fe:6f:4c:90:42:a3:db:0f:cd:43:
68:b4:1d:bc:bc:97:ed:f8:88:e3:d6:2e:ea:0f:0e:7b:7f:fa:
56:f4:8e:9a:88:02:57:29:21:53:db:21:97:0c:76:8a:f2:15:
21:af:28:bc:36:1b:7b:f4:ca:f8:db:4f:75:55:63:5d:64:21:
00:59:10:e0:1d:59:d8:20:a3:77:c1:9d:32:85:8d:13:45:fb:
73:a4:f5:59:ca:21:7d:9c:42:f2:0b:b6:8b:a5:78:cb:fd:24:
b2:42:ad:77:81:4d:77:41:f7:c8:47:04:45:7b:24:c4:6b:ea:
b4:90:20:f9:e8:d0:14:b0:8c:a1:9d:5a:5d:e3:81:8e:c9:3d:
0e:49:58:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org