Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/zZ1fLY6_8WC81gt85g_8vPWH_yM.roa
File: zZ1fLY6_8WC81gt85g_8vPWH_yM.roa (raw, json)
Hash identifier: 88fDUm8ukhUjzUe0/gAHB1pV6Gx9XKkNUa2ozVFTC9w=
Subject key identifier: CD:9D:5F:2D:8E:BF:F1:60:BC:D6:0B:7C:E6:0F:FC:BC:F5:87:FF:23
Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial: 0435
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/zZ1fLY6_8WC81gt85g_8vPWH_yM.roa
Signing time: Fri 01 Sep 2023 08:03:42 +0000
ROA not before: Fri 01 Sep 2023 08:03:42 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 51044
IP address blocks: 2406:8dc0:2500::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1077 (0x435)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
Validity
Not Before: Sep 1 08:03:42 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=CD9D5F2D8EBFF160BCD60B7CE60FFCBCF587FF23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bd:0e:0a:39:38:b2:84:6c:98:79:49:5a:4b:
3d:2a:d7:23:cf:35:f0:a4:ec:c1:f1:e6:f1:5a:f0:
a1:5f:20:1d:3a:54:bc:14:38:24:2f:1f:53:b5:2c:
f0:7e:c9:6c:8a:ac:99:0d:af:bc:be:ca:ac:fe:b9:
6c:33:48:fa:71:81:18:33:6c:f3:b8:a8:68:1a:22:
47:de:a5:18:c4:e5:24:67:34:5a:bd:01:01:0d:77:
45:4c:66:cc:f6:ab:36:c7:5c:98:21:2b:38:db:20:
51:0e:fa:62:f9:a7:62:a5:88:2c:34:2a:db:79:3a:
31:8f:20:11:d7:2d:13:d5:b9:c7:b2:d5:86:1e:00:
76:a7:e0:80:51:11:f6:43:11:70:45:90:6f:d1:36:
64:00:3b:30:95:07:29:44:d6:6d:e4:0a:f8:85:fd:
58:e2:23:d7:9f:26:08:d1:0c:88:25:e4:f1:ee:85:
c5:6b:86:53:06:fe:30:ba:26:16:3a:17:fa:87:da:
16:66:07:7d:74:4e:61:52:a2:e7:19:01:0c:b5:33:
05:9b:81:0f:69:a9:d0:88:d0:a0:e6:c3:98:b5:60:
19:9c:71:6b:65:2f:4d:3b:7f:a4:5d:ca:4c:fd:91:
cd:f7:64:c7:8e:ad:1c:7e:0d:ba:a5:82:ab:2b:d9:
e5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9D:5F:2D:8E:BF:F1:60:BC:D6:0B:7C:E6:0F:FC:BC:F5:87:FF:23
X509v3 Authority Key Identifier:
keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/zZ1fLY6_8WC81gt85g_8vPWH_yM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:8dc0:2500::/40
Signature Algorithm: sha256WithRSAEncryption
1c:ff:87:0f:bb:25:0c:54:29:81:d1:98:01:6d:f4:82:f2:f3:
e3:8b:e7:77:22:a2:19:6e:ac:06:f5:1c:62:96:b5:46:61:5b:
08:e4:49:40:78:1c:60:d3:3c:2c:cf:c0:e2:9e:f7:b6:30:80:
5b:bf:7c:48:4b:a0:d5:f9:41:95:b3:cd:54:3b:9c:bc:c5:6c:
e0:ad:a9:e5:e8:25:11:c8:c3:25:54:b7:41:3c:4e:fb:d8:a3:
06:d3:1a:50:24:f4:e1:52:a9:e5:b3:19:0c:39:f5:b7:65:e7:
b1:80:be:60:00:65:47:ef:db:6b:10:f1:8c:6e:a9:f0:c6:69:
a4:29:6d:28:1d:e8:23:30:3a:6c:fc:09:79:8f:b8:32:13:2e:
b3:c4:11:13:77:50:f9:04:fb:73:3b:30:4d:39:50:ea:da:74:
5d:27:b9:2c:7f:b8:d3:aa:75:0f:23:83:1a:5f:8b:39:67:91:
17:4d:bb:fd:8d:51:77:b0:a3:0e:17:89:2b:ef:a6:94:68:ff:
d7:5a:42:93:b8:c0:cc:ed:a3:4e:b4:a0:7e:a3:d7:43:26:88:
69:34:41:48:75:b3:e0:6f:6a:64:38:c1:80:01:05:1e:9f:69:
5e:40:77:f0:b4:28:d3:5a:da:4a:01:50:ab:19:fe:1d:6d:96:
33:51:53:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:17 2024 by rpki-client on console-fra.rpki-client.org