Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASGC/qTkobEsGSHTeUIkMh-Blm_Wwen4.roa
File: qTkobEsGSHTeUIkMh-Blm_Wwen4.roa (raw, json)
Hash identifier: XsdXpQtKL8zXNSyCS1h39KvJeaURevE1szV5vTrsWWQ=
Subject key identifier: A9:39:28:6C:4B:06:48:74:DE:50:89:0C:87:E0:65:9B:F5:B0:7A:7E
Certificate issuer: /CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
Certificate serial: 0B30
Authority key identifier: 76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/qTkobEsGSHTeUIkMh-Blm_Wwen4.roa
Signing time: Fri 01 Sep 2023 08:05:53 +0000
ROA not before: Fri 01 Sep 2023 08:05:53 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24167
IP address blocks: 2400:4500:0:1::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2864 (0xb30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
Validity
Not Before: Sep 1 08:05:53 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A939286C4B064874DE50890C87E0659BF5B07A7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c3:e9:01:11:ad:44:dc:34:14:70:f3:5a:1e:
e1:ed:ad:a6:4f:0d:fb:fb:fb:f8:00:a0:fb:02:30:
bd:b7:32:54:45:71:c8:a4:5e:b9:c3:74:45:bc:e1:
68:e3:8e:62:67:82:82:a8:63:65:5e:da:22:4e:31:
c6:79:1f:dd:a3:54:52:61:61:e4:c2:a2:c5:0d:5e:
5e:c6:c7:f5:4d:f3:46:e5:5e:67:b8:d7:f2:0b:59:
ec:f1:47:1c:02:7b:9a:84:dd:94:ca:4e:7f:10:25:
6a:80:16:43:0d:cd:51:73:1d:4b:11:5a:b1:32:6d:
bd:ac:20:64:6a:54:dd:7c:8f:d8:c3:88:96:9a:a6:
d8:57:a8:14:88:61:9b:ff:e7:24:f9:c1:f4:02:c4:
9e:26:0d:58:09:35:cb:ee:2a:4d:af:30:34:2c:da:
29:3a:68:0d:f7:52:4d:0c:33:f5:49:67:45:9a:e8:
7a:c1:f7:55:fd:38:f1:c7:2a:1d:77:32:e4:bb:44:
57:73:2f:fe:22:c9:fa:c7:15:23:ba:ec:61:36:73:
9c:99:db:f9:ce:0c:7d:9e:93:ea:74:d2:12:e6:f4:
8d:be:e9:b3:5d:50:79:20:8e:8b:d2:ac:d9:dd:d8:
d6:c9:a1:96:37:ec:1e:9f:6b:0a:c0:b8:59:d8:66:
3c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:39:28:6C:4B:06:48:74:DE:50:89:0C:87:E0:65:9B:F5:B0:7A:7E
X509v3 Authority Key Identifier:
keyid:76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/dg6p94M-3GNm_V4jpCa89iuwHmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/qTkobEsGSHTeUIkMh-Blm_Wwen4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:4500:0:1::/64
Signature Algorithm: sha256WithRSAEncryption
8f:38:24:30:74:71:7d:ef:da:7f:44:ff:24:f0:c9:a5:58:ea:
47:10:2a:ce:45:61:a9:64:68:92:8c:ea:bc:31:bf:9b:83:a8:
54:31:c0:fe:a9:82:d7:a4:16:89:35:83:50:7c:fe:ac:ff:b9:
af:04:b9:49:ce:16:71:55:25:ab:d2:fc:70:f3:51:49:21:f2:
f3:95:63:8a:75:84:72:c0:5a:9a:cc:cf:91:87:74:6e:b2:57:
4f:0e:2b:24:4f:35:b1:ac:9b:97:98:cb:8b:31:8f:46:0e:f0:
74:ab:f4:a1:ed:a5:a3:fe:90:93:ab:14:77:94:81:8f:f6:b8:
bf:8b:35:b0:95:dc:42:4a:03:68:67:c2:a9:e4:43:e2:8c:e2:
ba:aa:aa:87:3e:e3:74:66:75:18:59:0b:89:91:d9:d1:10:88:
f1:fa:6d:1e:55:ff:ce:52:fc:e9:1e:2a:2a:52:74:3b:43:4e:
88:b9:38:53:fa:8f:03:74:0d:fb:2a:fd:b6:e3:35:17:6e:b5:
24:76:73:e9:69:70:6a:60:c6:05:01:fc:12:09:5a:3a:68:6b:
fe:38:2b:60:7e:21:f3:d2:bf:5b:6d:30:7b:0c:1c:00:da:49:
d4:eb:ac:8a:38:d2:07:3b:e1:95:5a:23:50:e3:f8:e2:2c:c1:
d3:cf:b4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 01:28:04 2024 by rpki-client on console-ams.rpki-client.org