Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/sy1KeKpc7PUFUgZCCK-fMrf_qfE.roa
File: sy1KeKpc7PUFUgZCCK-fMrf_qfE.roa (raw, json)
Hash identifier: 7zicTRNlPtEwH8UBn/HtQV4U8ENcM2PbUrsNocxgUSE=
Subject key identifier: B3:2D:4A:78:AA:5C:EC:F5:05:52:06:42:08:AF:9F:32:B7:FF:A9:F1
Certificate issuer: /CN=1CB1CA70A33248FB3DAEE8BF41E2DAA76A7DCFD3
Certificate serial: 0B38
Authority key identifier: 1C:B1:CA:70:A3:32:48:FB:3D:AE:E8:BF:41:E2:DA:A7:6A:7D:CF:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HLHKcKMySPs9rui_QeLap2p9z9M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/sy1KeKpc7PUFUgZCCK-fMrf_qfE.roa
Signing time: Fri 01 Sep 2023 10:21:20 +0000
ROA not before: Fri 01 Sep 2023 10:21:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131603
IP address blocks: 43.251.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2872 (0xb38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CB1CA70A33248FB3DAEE8BF41E2DAA76A7DCFD3
Validity
Not Before: Sep 1 10:21:20 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B32D4A78AA5CECF50552064208AF9F32B7FFA9F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:45:10:cc:6f:55:62:08:2f:7e:de:0e:2a:4b:
05:f3:52:09:bb:95:fa:b4:0a:a6:3c:28:25:a3:d3:
c9:3e:22:4e:a3:d9:22:97:e1:39:68:20:20:4e:31:
ef:7b:33:73:96:f3:08:ef:76:ae:da:b2:2e:62:47:
38:fe:1d:fd:99:ac:5d:18:66:e7:4c:b2:bf:36:2c:
a0:59:1f:a8:60:b3:bf:75:5d:fd:3c:aa:ee:98:6e:
56:bf:2a:0b:ae:b4:ad:1b:2e:f5:bc:41:8a:08:87:
a5:43:41:99:69:7b:c2:ce:32:5a:11:ca:60:57:c5:
fc:cc:04:4c:6d:29:08:a6:64:92:cd:3f:99:a0:40:
18:a0:ba:16:9b:36:b8:07:de:ee:5e:5a:e8:40:ad:
2f:0f:1e:fd:69:f3:fe:f7:f0:54:62:48:80:29:da:
6f:a1:ab:4b:ce:9d:21:92:ca:8b:af:00:70:3f:2e:
e1:9c:8a:71:bd:39:0c:e0:7e:e6:18:64:25:b5:a7:
da:62:d7:77:2b:ea:9b:65:b8:7f:a0:c1:85:8b:21:
65:4c:5d:49:8e:be:7f:de:53:43:17:24:2d:f6:f3:
ab:08:2b:b0:a4:88:6d:27:97:9e:99:92:ea:79:83:
59:d4:16:f6:a0:c6:6d:2e:25:ed:d8:2b:1b:14:ff:
2b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2D:4A:78:AA:5C:EC:F5:05:52:06:42:08:AF:9F:32:B7:FF:A9:F1
X509v3 Authority Key Identifier:
keyid:1C:B1:CA:70:A3:32:48:FB:3D:AE:E8:BF:41:E2:DA:A7:6A:7D:CF:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/HLHKcKMySPs9rui_QeLap2p9z9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HLHKcKMySPs9rui_QeLap2p9z9M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/sy1KeKpc7PUFUgZCCK-fMrf_qfE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.56.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:30:e8:eb:fa:f0:16:1a:dc:8a:df:08:a7:af:fb:bf:79:69:
c9:ee:a2:79:03:ec:4f:ec:b4:19:a5:ac:09:ae:0e:e6:0b:9a:
ab:18:92:20:43:f9:3a:07:13:8d:0a:92:61:da:5a:5c:e5:4c:
1f:a5:31:51:9d:ee:16:de:f5:f1:0f:70:22:a8:6a:75:e4:bf:
00:2d:76:38:05:5f:3c:37:37:aa:6e:db:93:0f:6e:e9:e3:6d:
6f:6f:8f:f7:64:91:68:7f:a7:e1:bf:9d:d9:06:be:1a:7b:54:
05:37:6e:66:2a:38:6d:8f:68:b5:e5:f9:f7:46:2e:d2:ce:15:
af:ba:b7:9e:a3:30:ca:65:48:23:c7:0b:55:2a:c4:d9:bd:ed:
31:3b:97:9c:c1:81:98:a3:87:95:e7:a3:c3:7f:ad:cb:1b:32:
a8:c3:7f:b5:5a:86:cd:e1:af:8e:42:f0:ef:4f:98:6b:0d:97:
73:c5:26:4d:3b:1a:4c:8a:48:5a:e1:84:a7:82:73:53:92:94:
4c:27:99:61:98:fa:ff:bb:73:7a:fc:5f:b4:e6:75:bf:2d:07:
bc:ff:ab:44:cd:41:2c:66:a6:d9:5b:57:14:0c:b5:fe:ac:e2:
02:d4:1e:ef:a2:91:9a:70:8c:fe:6c:2d:6a:e7:62:bf:dd:a8:
8c:e1:5a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org