Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWT/tnpdaYWg-mIOblkSdZyUYUwj4YI.roa
File: tnpdaYWg-mIOblkSdZyUYUwj4YI.roa (raw, json)
Hash identifier: 9OOPtDRZtEWFS00OMBF9fGcVek0jvTEtYkQ+DET7cfc=
Subject key identifier: B6:7A:5D:69:85:A0:FA:62:0E:6E:59:12:75:9C:94:61:4C:23:E1:82
Certificate issuer: /CN=7EC7F1677BB492380282153BB77EC2EBE3185378
Certificate serial: 0B50
Authority key identifier: 7E:C7:F1:67:7B:B4:92:38:02:82:15:3B:B7:7E:C2:EB:E3:18:53:78
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/tnpdaYWg-mIOblkSdZyUYUwj4YI.roa
Signing time: Fri 01 Sep 2023 10:14:09 +0000
ROA not before: Fri 01 Sep 2023 10:14:09 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38851
IP address blocks: 43.250.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2896 (0xb50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EC7F1677BB492380282153BB77EC2EBE3185378
Validity
Not Before: Sep 1 10:14:09 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B67A5D6985A0FA620E6E5912759C94614C23E182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:74:6b:41:23:1f:7b:00:49:3d:f8:de:ac:
1f:1b:56:e8:e8:ac:94:9a:20:9d:fd:5b:cb:bd:c5:
7d:0b:69:51:c3:ba:e1:13:79:02:ea:8e:12:63:7c:
99:c6:2a:6c:65:a9:f0:e7:4b:a8:2c:9e:d4:19:fa:
55:74:b0:2d:aa:87:32:33:13:3c:c3:94:d9:dc:2a:
f7:ea:9c:fd:e6:15:62:5d:da:63:3c:de:94:f6:fa:
95:b6:86:9f:af:85:9d:7f:97:07:a7:7c:78:0a:08:
73:96:81:b2:9f:8f:8e:dc:7b:de:9e:6d:01:14:e5:
93:a1:49:34:9b:e7:e2:55:77:60:23:34:10:f6:4f:
fa:a1:37:06:ff:7d:58:03:85:3a:9c:a4:83:76:c5:
da:d1:9c:5e:15:6d:13:d6:ab:3c:f3:21:81:f1:ce:
bc:30:4e:2f:f1:ee:b8:c5:6d:c3:d7:1d:32:f3:8a:
01:1d:28:b9:05:b8:51:08:bd:6b:4b:3d:99:8b:f6:
e4:d3:ea:97:fa:dc:e9:af:aa:d2:88:e3:bd:06:ef:
e9:cd:cb:ec:11:a9:8a:7d:68:11:d5:af:b5:5e:b6:
25:3b:b7:29:e0:de:8a:96:cd:6a:f3:d1:6f:64:22:
2b:21:2e:e9:fb:24:a4:51:0d:8a:60:a5:96:0f:ed:
77:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7A:5D:69:85:A0:FA:62:0E:6E:59:12:75:9C:94:61:4C:23:E1:82
X509v3 Authority Key Identifier:
keyid:7E:C7:F1:67:7B:B4:92:38:02:82:15:3B:B7:7E:C2:EB:E3:18:53:78
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/fsfxZ3u0kjgCghU7t37C6-MYU3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/tnpdaYWg-mIOblkSdZyUYUwj4YI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.44.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:bb:ee:a5:8b:54:2a:7f:87:08:21:e1:ef:02:31:da:b7:32:
d0:51:b2:db:c0:6d:63:d3:c0:bc:e6:26:fa:78:0f:88:b0:df:
1e:f3:49:ae:f0:c8:88:a7:b9:8e:9a:01:c1:80:ee:93:02:08:
c3:10:a9:aa:bb:d8:33:a5:f1:7b:12:fb:c0:1d:6d:86:54:13:
bf:1f:26:60:5a:12:1e:48:c8:f5:24:35:d7:50:c8:01:73:64:
69:b6:9e:77:fc:58:53:57:38:9b:ab:7d:20:fc:5d:69:ad:39:
77:44:52:b4:e7:48:1f:a2:48:ec:db:6b:d1:0f:2f:26:f3:c8:
db:21:25:84:ae:53:2e:d1:21:91:1d:e8:32:9f:e6:1f:a0:74:
4d:88:65:f0:ee:41:a6:1f:3f:b8:1f:99:ac:cf:54:c0:e2:0c:
11:97:f5:4d:51:05:e0:6a:2a:67:75:4e:3a:75:a7:cc:c5:82:
61:08:3d:f7:6f:c4:9b:9a:75:5c:e1:47:d9:46:de:54:a5:e5:
2d:43:64:ef:9d:7d:63:aa:89:d0:56:94:04:43:04:15:5b:99:
26:7c:d0:29:5d:98:d5:c6:6b:62:6f:1f:65:cf:ad:c5:b0:22:
d5:51:89:db:0d:b8:74:44:b8:73:b6:12:e4:ff:cb:f5:b9:d9:
2c:3e:20:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org