Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASGC/8PgXdToD9o_aYXp714WQ6r7Uwtk.roa
File: 8PgXdToD9o_aYXp714WQ6r7Uwtk.roa (raw, json)
Hash identifier: 9orl9YKmF8od2FGiTPPUkLcC1zYwjCYPhHH6jwEzkpM=
Subject key identifier: F0:F8:17:75:3A:03:F6:8F:DA:61:7A:7B:D7:85:90:EA:BE:D4:C2:D9
Certificate issuer: /CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
Certificate serial: 0A3D
Authority key identifier: 76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/8PgXdToD9o_aYXp714WQ6r7Uwtk.roa
Signing time: Thu 15 Sep 2022 02:48:50 +0000
ROA not before: Thu 15 Sep 2022 02:48:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24167
IP address blocks: 2400:4500:0:2::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2621 (0xa3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
Validity
Not Before: Sep 15 02:48:50 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F0F817753A03F68FDA617A7BD78590EABED4C2D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:37:17:e9:2a:d9:74:f6:8c:72:d6:ca:c0:03:
44:7f:35:52:6b:2f:b0:69:a4:c5:1a:08:ae:cb:88:
b7:49:60:cc:85:d3:dd:6c:9d:9a:ee:49:28:c9:2c:
71:9f:0f:cc:4f:32:09:df:9c:60:dd:de:fb:b2:b2:
be:67:f9:c9:1a:63:04:c4:90:6f:e2:64:6a:e4:c1:
5a:3a:34:80:21:9d:2f:92:09:28:d5:df:e1:ef:c4:
74:36:d9:12:81:3e:40:b5:c3:d6:52:ab:a4:78:86:
1d:3b:ea:56:c4:8b:01:62:1e:a4:44:4c:43:ad:86:
02:22:e6:b4:f9:0f:b6:3e:a6:eb:c5:b9:62:b2:1c:
ff:6e:65:e8:7a:10:80:45:8a:a8:34:b9:a2:54:18:
c3:f3:f1:0b:de:b9:ac:7b:b6:ef:d5:05:e3:28:e6:
32:36:03:22:ac:c9:78:ee:71:a2:7b:f1:6a:95:3f:
ef:06:37:4a:30:6f:c8:2c:f8:ce:89:c7:f3:a3:15:
eb:07:41:ff:cf:b2:9f:2b:d3:69:76:95:47:24:7b:
5b:46:a8:84:bb:e4:9d:19:d4:4f:94:e3:40:16:29:
e5:17:56:03:cb:09:ec:44:fc:25:a0:64:af:17:13:
cf:9c:c7:88:84:43:c0:85:46:2a:4e:0a:34:ce:81:
fb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F8:17:75:3A:03:F6:8F:DA:61:7A:7B:D7:85:90:EA:BE:D4:C2:D9
X509v3 Authority Key Identifier:
keyid:76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/dg6p94M-3GNm_V4jpCa89iuwHmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/8PgXdToD9o_aYXp714WQ6r7Uwtk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:4500:0:2::/64
Signature Algorithm: sha256WithRSAEncryption
76:98:8c:e1:f7:7f:7a:6c:80:6c:19:7a:89:91:e9:01:1b:0b:
4d:a4:eb:6c:83:01:0f:5b:86:50:fc:41:48:4b:5a:2a:3e:6b:
69:69:0a:d2:23:cb:9c:90:8e:13:12:50:08:c7:14:f9:e8:18:
2a:51:c1:99:30:5c:65:dc:37:4e:e6:33:06:29:e5:dd:41:9c:
51:1a:5b:38:5b:f0:3f:e9:32:76:18:6f:f6:30:94:d3:a5:bb:
c3:00:f1:9f:45:64:69:f8:dd:89:4d:f7:3d:ad:36:9b:4d:00:
58:1b:7b:72:4c:02:fe:7f:4b:63:32:f2:97:6c:92:35:99:98:
eb:47:67:a7:f5:dc:52:45:47:cf:81:c9:7f:74:be:14:6d:f0:
2a:d1:f4:04:84:e1:aa:6d:f6:d6:e3:3c:1b:5d:cd:80:0d:71:
9e:96:32:83:4c:99:cd:98:27:18:88:17:c8:7b:3f:c0:83:51:
26:4d:a3:c3:ea:cd:b1:8c:ce:0c:d5:87:8f:2a:7e:ac:5f:8d:
4a:a6:fc:69:b9:7e:f0:c8:0c:73:b2:cc:6f:90:4f:f6:2f:b8:
7d:b0:31:50:b7:6a:ab:03:02:7f:f6:75:80:2c:bc:e0:6a:ad:
6e:4a:2d:15:c8:fb:a7:a4:43:55:9c:5e:66:0e:72:17:22:23:
38:88:86:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:40 2025 by rpki-client