Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/DxnmAlzWFj2qYZ4qx0Vl6nLslDQ.roa
File: DxnmAlzWFj2qYZ4qx0Vl6nLslDQ.roa (raw, json)
Hash identifier: kZZDovp3RVYVVnZm4mPYF/zefoag+V9sKTMW6q4Mu08=
Subject key identifier: 0F:19:E6:02:5C:D6:16:3D:AA:61:9E:2A:C7:45:65:EA:72:EC:94:34
Certificate issuer: /CN=1CB1CA70A33248FB3DAEE8BF41E2DAA76A7DCFD3
Certificate serial: 0A48
Authority key identifier: 1C:B1:CA:70:A3:32:48:FB:3D:AE:E8:BF:41:E2:DA:A7:6A:7D:CF:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HLHKcKMySPs9rui_QeLap2p9z9M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/DxnmAlzWFj2qYZ4qx0Vl6nLslDQ.roa
Signing time: Thu 15 Sep 2022 02:41:55 +0000
ROA not before: Thu 15 Sep 2022 02:41:55 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131603
IP address blocks: 43.251.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2632 (0xa48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CB1CA70A33248FB3DAEE8BF41E2DAA76A7DCFD3
Validity
Not Before: Sep 15 02:41:55 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0F19E6025CD6163DAA619E2AC74565EA72EC9434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:63:50:d0:5e:11:b3:1c:04:df:a2:6b:24:
e0:bc:93:ff:dd:c1:ab:40:21:7a:42:34:e0:33:00:
45:0b:ad:26:6a:46:5f:0f:6e:38:ed:5f:57:bd:11:
5e:b9:e3:1a:4b:21:98:07:ed:f9:4b:7b:ba:8b:04:
6f:19:58:da:05:43:81:f2:52:14:93:4b:13:fc:66:
29:28:06:6b:e3:03:70:a0:06:36:c0:9c:8d:8d:62:
d3:b2:ba:36:c5:8e:1d:bd:8f:f1:50:90:5d:1e:e0:
50:05:ea:0b:89:42:5f:d4:dc:8d:4c:f1:bf:2e:50:
4e:7a:54:5a:6f:11:55:ae:e1:eb:89:1e:01:30:70:
ff:7d:a5:90:17:94:64:67:9a:40:ae:6f:6d:f3:66:
51:f2:0b:6d:89:6b:c5:dd:4b:12:74:80:f5:f2:dd:
76:ed:32:ab:0c:7d:a9:a5:8e:a3:37:c7:ec:e3:22:
d0:2e:35:39:92:8f:bd:77:ac:5b:e6:01:57:d2:75:
2d:86:3f:10:99:7a:1a:3a:cd:31:b7:ae:93:d9:6d:
31:6a:77:c4:c1:dd:3a:98:c6:a2:db:41:fc:34:e5:
05:ad:cf:14:b8:52:6a:99:61:d9:00:cc:61:b8:76:
dc:39:84:22:50:43:98:0e:cc:26:13:39:45:dc:55:
3c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:19:E6:02:5C:D6:16:3D:AA:61:9E:2A:C7:45:65:EA:72:EC:94:34
X509v3 Authority Key Identifier:
keyid:1C:B1:CA:70:A3:32:48:FB:3D:AE:E8:BF:41:E2:DA:A7:6A:7D:CF:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/HLHKcKMySPs9rui_QeLap2p9z9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HLHKcKMySPs9rui_QeLap2p9z9M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/DxnmAlzWFj2qYZ4qx0Vl6nLslDQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.56.0/22
Signature Algorithm: sha256WithRSAEncryption
af:59:dd:9b:ff:65:c8:c7:1d:e2:d1:da:53:a6:c2:d9:48:bb:
cb:38:5d:12:e1:83:e4:26:39:75:b1:d9:9d:f9:d9:30:1b:12:
e8:1a:1f:ea:6c:97:11:02:ab:a2:63:7d:b2:fc:38:f7:5f:92:
bf:f6:ed:4b:b0:12:a9:2e:9e:71:55:f9:4a:40:ce:2b:3e:a3:
8f:cc:ff:a9:3a:dd:fe:cf:0a:d7:9d:88:89:a0:d2:41:dc:c1:
e9:12:ee:a6:bd:a8:3c:e0:db:21:c5:6b:60:32:a3:2c:11:66:
12:db:ac:61:83:b7:60:97:df:44:5f:15:71:9e:ea:b0:ef:81:
62:37:ca:5a:6d:d7:db:74:52:2d:bc:bd:c1:5a:b9:a1:fc:2c:
e5:8f:64:9a:11:80:09:54:3c:6d:9d:86:d8:96:ee:c4:49:bb:
5d:56:95:6b:de:46:1f:91:81:dc:06:19:8f:00:eb:ee:47:e2:
14:4b:6a:e0:11:45:4e:18:b2:55:f8:79:c9:b9:fb:34:c2:b5:
5d:fc:fa:6a:ab:4e:ff:10:93:40:29:35:44:e7:63:87:74:7c:
0e:16:b9:a4:9f:a9:b8:2a:4f:61:8c:00:76:e6:41:3b:0b:7e:
d2:8d:bb:b6:ff:c4:75:f9:6a:f5:a2:83:90:52:f6:44:6f:67:
7d:c8:55:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org