Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/IfydskpK4D-mYauvBpRNEEsgVqQ.roa
File: IfydskpK4D-mYauvBpRNEEsgVqQ.roa (raw, json)
Hash identifier: fogPRD0bhXJ6Un6XHYo7V9gqJss54c6rZEvL+lC1D58=
Subject key identifier: 21:FC:9D:B2:4A:4A:E0:3F:A6:61:AB:AF:06:94:4D:10:4B:20:56:A4
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 116D
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/IfydskpK4D-mYauvBpRNEEsgVqQ.roa
Signing time: Fri 01 Sep 2023 03:14:20 +0000
ROA not before: Fri 01 Sep 2023 03:14:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 396982
IP address blocks: 101.101.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4461 (0x116d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Sep 1 03:14:20 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=21FC9DB24A4AE03FA661ABAF06944D104B2056A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:63:c3:d8:27:06:89:96:9a:cd:89:a7:b8:44:
f0:f2:85:45:8e:d7:49:a7:84:84:08:23:04:8a:c3:
ee:e0:b3:6e:e1:7b:93:cd:f4:ac:8d:10:1e:4d:43:
8e:35:6a:6a:a1:5f:8e:00:ff:31:91:54:7e:6b:dd:
cb:ec:9c:6e:9f:cf:f3:58:f7:33:6c:f4:ff:db:80:
1c:a8:7e:05:d3:57:0b:d2:c3:67:d8:2c:df:35:66:
0d:0e:38:79:36:56:c7:2c:22:47:ba:8a:f8:e4:39:
bd:66:38:44:c2:95:6a:35:44:4c:49:7c:41:cc:d4:
ba:4d:d2:12:b1:ec:98:c7:62:4e:d7:ae:3b:42:ef:
66:5a:21:a6:7c:0a:b2:c3:96:2a:a2:51:ff:08:ae:
36:cf:e4:cc:10:f2:60:9b:37:60:4f:b2:ed:f8:04:
54:c3:8b:6d:2a:2a:c5:77:91:05:99:87:5e:8c:91:
39:b1:3e:38:a4:ae:76:d9:67:70:e0:58:a2:78:c6:
76:13:15:ab:f4:4e:b3:5f:fc:1c:dc:1f:33:06:e8:
37:93:41:fc:11:85:b1:f5:55:63:28:7b:16:20:2f:
01:d7:6c:05:88:96:50:98:bb:5e:d9:2f:3a:45:58:
60:04:66:99:4f:5f:47:04:8d:1e:f0:3d:c5:fa:c9:
c7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FC:9D:B2:4A:4A:E0:3F:A6:61:AB:AF:06:94:4D:10:4B:20:56:A4
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/IfydskpK4D-mYauvBpRNEEsgVqQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.101.101.0/24
Signature Algorithm: sha256WithRSAEncryption
34:7e:68:a0:0b:03:ce:62:0a:33:3a:29:57:d1:b8:50:8b:16:
58:33:c7:62:c5:2b:40:ed:b7:cc:dd:f5:50:fb:3f:4c:da:45:
ed:8d:91:3b:21:1e:d6:5b:e5:b0:e2:d0:72:b7:de:6e:96:f0:
da:36:7b:34:6e:5b:22:3c:76:ce:31:ec:8a:ec:fc:35:31:cd:
32:ce:61:22:c9:2f:72:8b:16:2e:07:25:0c:05:28:97:ea:8a:
e8:bb:3a:8f:0f:39:24:96:7c:fd:54:1f:0d:f0:3e:4f:7e:c0:
56:cf:6f:65:a9:7c:37:34:1f:e0:29:57:f1:13:f3:c7:3d:8f:
2b:ff:68:b6:d7:dd:e8:aa:73:5c:2a:01:80:be:5a:cb:e1:5d:
52:23:04:59:b9:af:32:d5:b9:3b:4c:06:a5:8a:84:86:29:75:
f0:49:42:0f:36:01:bf:fb:5a:04:ee:40:75:51:3b:39:f9:2a:
68:f0:64:5e:4d:3d:a9:b6:11:99:9d:a5:96:8f:89:b7:ae:bc:
1b:1b:80:73:7a:39:8c:10:b5:c0:08:7a:ea:43:20:0e:15:be:
01:bc:c6:c9:e0:f5:73:f8:db:ac:ab:8a:af:44:8f:62:ae:51:
c6:ac:73:ec:c2:8f:b0:ab:30:ef:3a:2a:51:5c:11:67:b5:af:
11:6a:a4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org