Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/fttwriiiokIJWM00gQnUVyrWe2o.roa
File: fttwriiiokIJWM00gQnUVyrWe2o.roa (raw, json)
Hash identifier: WwdgqffMRbLOtLXM9x/pb8flyOfbzFaC2IWoMtmIPmk=
Subject key identifier: 7E:DB:70:AE:28:A2:A2:42:09:58:CD:34:81:09:D4:57:2A:D6:7B:6A
Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Certificate serial: 0B96
Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/fttwriiiokIJWM00gQnUVyrWe2o.roa
Signing time: Fri 01 Sep 2023 08:35:41 +0000
ROA not before: Fri 01 Sep 2023 08:35:41 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38851
IP address blocks: 61.65.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2966 (0xb96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Validity
Not Before: Sep 1 08:35:41 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7EDB70AE28A2A2420958CD348109D4572AD67B6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0b:04:4c:76:05:d3:4d:f5:9f:8c:aa:07:1f:
c8:a7:5f:42:d5:eb:25:2d:e9:f7:73:6e:88:5a:4b:
9b:18:e0:fd:78:7e:da:eb:b0:fe:48:35:8d:d3:60:
2d:d2:69:f8:cd:1f:1e:3c:2b:25:41:e6:5b:fa:e7:
e7:0d:f6:7b:96:ec:92:b1:c8:2d:6f:f1:ac:ba:54:
79:db:e2:81:4f:42:73:14:5f:f8:d3:55:ee:dc:84:
89:47:91:1c:93:04:ce:4b:ff:d1:99:10:9c:09:2d:
3e:c3:88:9c:63:c2:6d:0f:99:f2:d9:31:bb:16:0e:
15:43:e3:24:b0:a2:df:24:55:9c:34:79:27:fd:5a:
34:82:88:f9:b7:a7:3f:95:f9:aa:98:37:aa:2b:16:
e7:cf:37:d4:42:17:a0:f6:28:12:22:27:eb:84:4c:
92:83:77:11:f5:5f:42:9a:57:ec:85:98:bb:79:3f:
ff:48:66:5d:37:52:5d:9d:1c:1e:42:30:3c:4b:b4:
a5:7a:35:f2:6d:4b:d7:06:e9:44:da:6c:a6:96:46:
1d:e1:0c:99:68:73:34:ff:e9:e1:d0:c2:df:f7:cf:
05:d9:b6:8f:b7:26:e9:39:ff:98:0e:ad:c1:5d:db:
fd:1e:96:1b:46:68:fb:11:f8:38:3f:29:47:ff:71:
07:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DB:70:AE:28:A2:A2:42:09:58:CD:34:81:09:D4:57:2A:D6:7B:6A
X509v3 Authority Key Identifier:
keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/fttwriiiokIJWM00gQnUVyrWe2o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.65.240.0/20
Signature Algorithm: sha256WithRSAEncryption
a2:e3:df:25:61:a3:18:28:83:fc:ff:b9:5a:e4:0c:b4:62:9e:
1a:f8:4e:f4:88:8b:16:a3:eb:76:96:31:d7:e8:8a:a8:44:e8:
37:28:f1:d4:af:67:9e:7e:b4:97:a5:8a:a8:76:15:fe:87:c3:
e7:f8:5b:5c:1c:02:52:2f:1b:ae:c2:68:71:a9:05:cc:68:73:
87:71:3e:e5:94:01:89:7c:1d:6f:f8:ee:ef:ce:44:dd:de:ca:
e2:ed:35:5e:6a:e4:09:de:35:6a:10:f4:7e:ba:0d:af:89:eb:
74:9f:5c:3c:12:d7:59:0f:eb:e8:a8:8e:96:5c:c2:f6:2a:0f:
f1:30:9c:95:53:d3:b2:f8:cc:c2:db:37:86:9d:f2:78:a9:b8:
4e:9f:0b:c3:03:8c:68:ae:62:3d:28:29:7f:61:dd:c7:15:6b:
f0:46:b9:55:a9:6d:f7:af:35:7a:59:e1:7c:74:01:43:4a:c1:
d7:d2:bc:15:9f:b9:0e:e9:be:45:eb:5a:21:cc:49:da:62:13:
1e:d4:c6:6e:11:96:eb:62:e5:8d:19:c9:97:04:76:c6:7e:09:
8e:f8:e1:55:e3:09:5c:43:46:f0:df:8d:55:db:c6:c7:e9:61:
e1:30:d6:2f:ef:1d:c4:5f:98:8e:f9:1f:5f:28:1b:b0:77:11:
d2:06:af:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org