Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/l6b_WzECpppNDLoyk4uN6OutD98.roa
File: l6b_WzECpppNDLoyk4uN6OutD98.roa (raw, json)
Hash identifier: UrxabEjJOoc7PMeioTdSzaVxg9OHjH26trGYbaQezEY=
Subject key identifier: 97:A6:FF:5B:31:02:A6:9A:4D:0C:BA:32:93:8B:8D:E8:EB:AD:0F:DF
Certificate issuer: /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Certificate serial: 580C
Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/l6b_WzECpppNDLoyk4uN6OutD98.roa
Signing time: Fri 01 Sep 2023 09:33:49 +0000
ROA not before: Fri 01 Sep 2023 09:33:49 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38851
IP address blocks: 43.227.26.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22540 (0x580c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Validity
Not Before: Sep 1 09:33:49 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=97A6FF5B3102A69A4D0CBA32938B8DE8EBAD0FDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f9:3e:0c:74:c2:df:c2:20:28:ee:c5:5f:8f:
20:14:96:a7:de:04:c8:f7:e0:c7:62:4a:9c:50:08:
e6:b7:f3:ef:53:62:ff:9a:1a:74:27:8a:13:8b:a5:
38:d2:de:79:ea:5d:29:40:45:da:e8:a6:65:27:52:
2e:71:28:9f:23:b9:11:6a:81:f3:a7:b0:69:f1:87:
e0:e6:7f:1c:22:8a:ef:6e:a2:f5:03:47:4e:05:6b:
2d:ae:a4:55:e0:a6:56:20:38:7c:a7:49:3d:2b:2c:
68:c2:34:6b:2c:0a:ec:b4:f6:b2:17:62:32:47:3d:
d3:5a:e2:5d:c8:49:55:ea:c9:5f:dd:59:53:7b:bc:
d8:1e:61:c6:f7:e6:e1:bd:be:dd:00:24:53:36:f7:
4b:89:28:4d:bc:41:dd:ff:66:6e:37:48:a7:54:3a:
dd:b7:92:82:8c:da:d2:e6:fa:71:09:21:ab:d3:db:
23:fa:0f:82:2f:d2:d1:90:b7:91:5e:68:c9:06:ca:
03:a6:b6:af:7f:93:85:f5:04:d2:62:77:55:b3:dd:
5a:3c:58:25:ff:80:e2:da:63:de:16:56:2f:e8:8e:
51:e9:bc:dd:21:6b:34:fc:ef:6c:19:14:61:96:af:
47:f5:8b:68:cd:66:25:a3:f3:b8:b2:ab:23:36:a5:
aa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A6:FF:5B:31:02:A6:9A:4D:0C:BA:32:93:8B:8D:E8:EB:AD:0F:DF
X509v3 Authority Key Identifier:
keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/l6b_WzECpppNDLoyk4uN6OutD98.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.227.26.0/23
Signature Algorithm: sha256WithRSAEncryption
29:e0:1e:de:c5:ea:d2:cb:fa:ba:18:4a:a6:fe:35:a1:63:11:
14:43:5e:48:ff:43:70:f7:8d:23:b8:43:05:78:e4:01:1b:e2:
dd:21:b5:01:94:4e:4e:08:93:9d:e5:a1:cd:11:f6:8a:7f:c4:
38:1b:63:79:13:49:01:35:50:bf:be:8a:67:4f:8b:f0:ea:a0:
ab:b3:9e:77:7d:2e:d1:a6:70:3d:4b:e3:4a:2c:03:a6:9e:93:
1e:8b:22:85:6b:d8:79:d6:72:35:a2:8f:68:34:51:18:76:49:
bc:72:5c:40:3b:1a:72:f2:ae:54:7c:ba:e3:98:b0:dd:5b:e3:
8b:35:ef:8f:08:0a:fa:f0:1c:93:32:1e:4f:cf:43:78:08:b9:
70:a3:4f:0d:8f:81:a6:d7:d2:85:ee:83:4d:5e:24:29:d1:ce:
50:4a:c7:14:8c:11:96:70:04:49:d3:ce:f2:0a:29:5c:da:13:
33:d4:92:6f:3c:89:0d:1f:75:18:0b:1a:b8:c8:5f:e6:2f:a0:
ef:a0:98:ca:f8:31:62:95:18:58:33:22:f0:f0:8e:a3:5a:f0:
d4:61:25:2a:fe:2e:a5:b7:28:f6:aa:55:8a:e0:7f:97:57:9c:
e1:c3:62:56:42:e0:a7:c6:4d:96:73:9f:96:22:8b:e9:64:91:
89:ee:5c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org