Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASGC/EQpEWN4_mvtx8pvTicpq0ifNBjQ.roa
File: EQpEWN4_mvtx8pvTicpq0ifNBjQ.roa (raw, json)
Hash identifier: dZZyokcm34RWa/ELK5RM9HlJPRrVne+HHj2dHDC6R1M=
Subject key identifier: 11:0A:44:58:DE:3F:9A:FB:71:F2:9B:D3:89:CA:6A:D2:27:CD:06:34
Certificate issuer: /CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
Certificate serial: 0B33
Authority key identifier: 76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/EQpEWN4_mvtx8pvTicpq0ifNBjQ.roa
Signing time: Fri 01 Sep 2023 08:05:54 +0000
ROA not before: Fri 01 Sep 2023 08:05:54 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24167
IP address blocks: 2400:4500::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2867 (0xb33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
Validity
Not Before: Sep 1 08:05:54 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=110A4458DE3F9AFB71F29BD389CA6AD227CD0634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2b:6a:89:f6:c7:ea:d6:73:cf:4c:ef:37:aa:
43:73:15:f8:bf:6f:6a:da:4a:0a:26:4a:0b:4e:44:
f8:ff:92:0f:28:6a:eb:40:ba:43:96:d4:45:cc:7b:
6b:65:d2:31:3f:25:ba:81:1e:8b:5e:16:e8:b9:19:
7b:9f:96:66:a7:01:b2:41:04:77:23:3c:18:04:cf:
dd:00:33:bd:b2:eb:77:44:3d:f2:d3:52:78:c4:fd:
df:03:2b:db:14:66:74:b0:40:fc:41:f3:66:d3:d7:
19:de:2d:45:65:a3:4c:9c:c8:1c:28:17:7c:cf:4d:
80:0f:da:e4:18:db:39:23:6f:c2:93:a2:82:1b:d8:
93:f3:3c:81:04:c6:72:d7:df:74:6e:8a:49:40:0c:
e4:7b:e6:64:58:d7:ba:7a:1e:57:95:c7:f9:7d:a0:
11:c3:21:a8:84:54:dc:ad:09:14:35:b5:19:3f:d0:
0b:9b:7c:b5:fa:b3:c0:8f:37:10:92:33:f9:19:20:
0f:19:bf:18:0f:b2:0c:2d:ae:f5:d0:2d:74:6d:fa:
24:0c:18:ec:47:8e:86:74:3e:b7:e3:ce:42:e4:af:
53:b2:02:fe:d9:16:13:0d:e8:4f:5d:65:7e:3b:1b:
a8:c8:f3:b6:03:d6:41:e3:c8:c4:91:ad:12:93:e9:
c5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0A:44:58:DE:3F:9A:FB:71:F2:9B:D3:89:CA:6A:D2:27:CD:06:34
X509v3 Authority Key Identifier:
keyid:76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/dg6p94M-3GNm_V4jpCa89iuwHmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/EQpEWN4_mvtx8pvTicpq0ifNBjQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:4500::/64
Signature Algorithm: sha256WithRSAEncryption
dd:d5:cf:29:b1:60:05:f0:7b:d4:6b:62:89:96:53:ef:71:c0:
a2:48:42:58:31:2d:43:1e:53:4b:62:b7:c0:c7:2c:e7:9f:38:
01:30:fa:fb:3a:9c:8b:7f:ce:bd:50:54:cd:05:63:2b:dc:a4:
8b:60:60:1f:0c:a9:88:cb:c4:87:5a:28:d0:2b:0c:72:43:e0:
0d:f0:50:46:60:d5:66:f0:ac:d4:f7:cd:2d:38:a5:6e:39:d3:
e8:4d:cb:99:f7:2c:d9:b7:37:e7:78:19:8d:a6:35:07:4b:c8:
45:32:29:bf:f1:dd:b5:f8:05:a9:22:c7:b4:e6:56:33:d6:12:
2a:fd:49:e8:d1:56:32:51:76:9d:a8:fc:df:9c:38:e3:a5:f2:
d3:ff:38:75:cb:b9:05:58:82:03:1f:ea:4e:de:bb:b7:04:85:
22:fd:f6:c4:aa:4c:8a:11:ed:0b:43:4a:54:11:0c:99:9f:79:
2b:a7:15:73:b3:84:8c:16:75:44:92:9a:0d:36:23:da:6b:ad:
b1:9c:a9:a8:02:f5:64:f0:3f:eb:12:c2:33:7d:e1:50:ae:ed:
07:a3:e5:9a:fa:f2:ca:27:ea:95:52:0b:f0:91:46:da:e8:17:
54:8a:20:25:0f:2a:f7:02:3b:b7:4b:c5:d7:11:93:a3:44:72:
e9:13:25:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 01:28:04 2024 by rpki-client on console-ams.rpki-client.org