Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/vqCa_gAQg_lVSjcrmb9rP9QXlAQ.roa
File: vqCa_gAQg_lVSjcrmb9rP9QXlAQ.roa (raw, json)
Hash identifier: 1Tu/fHgmzP9DBG5liGraxzVD1TuoaXEidzAXyXQztEk=
Subject key identifier: BE:A0:9A:FE:00:10:83:F9:55:4A:37:2B:99:BF:6B:3F:D4:17:94:04
Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Certificate serial: 0B69
Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/vqCa_gAQg_lVSjcrmb9rP9QXlAQ.roa
Signing time: Fri 01 Sep 2023 10:13:54 +0000
ROA not before: Fri 01 Sep 2023 10:13:54 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18018
IP address blocks: 122.255.94.64/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2921 (0xb69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Validity
Not Before: Sep 1 10:13:54 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=BEA09AFE001083F9554A372B99BF6B3FD4179404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:bd:1d:6c:54:f3:67:9a:62:d0:57:bc:94:
82:c5:55:2a:6f:27:d3:2d:e3:fb:9c:64:9d:31:e8:
25:57:86:d9:04:e7:ac:51:49:85:28:f7:c9:d6:a9:
12:0c:c6:fc:37:2d:e7:6c:2e:7f:ab:52:58:01:84:
fa:ed:3f:3f:7a:fa:43:08:ac:1e:79:fb:1f:4b:ca:
f5:d2:6e:27:a1:43:e9:21:74:8d:dd:42:3a:95:bd:
e1:cb:45:8f:3f:ef:a9:09:38:32:2b:50:aa:e2:62:
09:74:81:e8:5a:d5:d0:aa:60:ad:98:06:d6:2a:59:
47:8c:a7:1a:71:d8:27:60:ae:e0:1a:69:8e:29:7e:
61:83:cd:22:bd:63:43:29:17:65:40:87:ca:11:fd:
fc:61:3a:40:dd:6b:d0:90:7e:05:b0:72:fc:e5:3a:
22:cd:21:49:3d:a6:e8:3e:0b:90:ce:9a:32:8e:dc:
87:3e:58:81:05:ff:ff:2a:83:de:03:74:f6:95:a5:
67:38:c8:7d:00:d5:e7:f0:79:77:0d:62:ee:e4:d6:
5e:48:54:e7:40:19:22:5d:75:2c:60:f0:d1:1a:23:
43:a9:c8:7e:dd:f4:2d:35:8c:b2:42:b0:67:4f:c7:
0b:ca:cc:dd:0f:8f:d3:c0:03:0b:5c:4f:1d:39:92:
a6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A0:9A:FE:00:10:83:F9:55:4A:37:2B:99:BF:6B:3F:D4:17:94:04
X509v3 Authority Key Identifier:
keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/vqCa_gAQg_lVSjcrmb9rP9QXlAQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.255.94.64/26
Signature Algorithm: sha256WithRSAEncryption
0e:43:41:27:34:d9:99:d9:5b:66:c9:28:c3:eb:29:78:c8:76:
b5:b7:4a:11:5b:0e:d6:ec:39:a6:60:4b:e7:aa:cb:93:8e:3d:
e1:5b:0e:1f:1b:df:d4:5a:29:53:03:04:3b:0b:f1:e3:e3:b3:
74:e3:c8:4a:ec:c9:a1:1b:94:af:cb:69:4d:d8:30:83:c1:49:
5a:49:e0:1f:d1:4f:1c:88:9b:1a:26:d3:72:d7:a2:e9:f6:fe:
e9:60:1f:36:ca:f3:fd:2b:95:e7:13:d9:cf:3c:fd:6d:74:30:
1a:a4:77:45:7c:90:02:42:22:d2:38:75:bb:bf:91:cb:7e:3a:
9a:83:9a:78:db:fd:76:23:3e:aa:4a:b9:40:eb:19:76:57:17:
25:bb:49:c1:6a:de:b0:37:39:6d:b4:b2:58:cc:0a:e2:8c:ba:
4b:b3:2d:ba:1e:8a:b1:84:f0:09:32:be:ab:ae:50:c1:df:a8:
67:6e:5b:77:00:ab:d2:8a:51:e2:37:5b:4e:51:d3:3f:77:1f:
df:5c:fe:b6:05:ba:9d:b1:f7:d8:83:f7:e2:c9:53:b8:a5:cf:
de:11:d6:3e:d0:00:b5:a5:60:57:0b:de:7a:88:03:52:b7:cd:
a6:0a:b3:33:56:2c:de:b6:e3:23:6d:5a:f4:96:93:1f:90:72:
a7:93:26:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org