Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/DV9TU6BCv_ln_mHc5u2WrDgtFrE.roa
File: DV9TU6BCv_ln_mHc5u2WrDgtFrE.roa (raw, json)
Hash identifier: 9HcA6XXnIQ5/0Agt8psks2z/xsi+sW1hbCQ6C33Glx8=
Subject key identifier: 0D:5F:53:53:A0:42:BF:F9:67:FE:61:DC:E6:ED:96:AC:38:2D:16:B1
Certificate issuer: /CN=A5A6AC38EE68C364CF79188F06427E9C766D4C1A
Certificate serial: F3
Authority key identifier: A5:A6:AC:38:EE:68:C3:64:CF:79:18:8F:06:42:7E:9C:76:6D:4C:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/DV9TU6BCv_ln_mHc5u2WrDgtFrE.roa
Signing time: Tue 21 Nov 2023 15:31:02 +0000
ROA not before: Tue 21 Nov 2023 15:31:02 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131657
IP address blocks: 2400:c9e0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5A6AC38EE68C364CF79188F06427E9C766D4C1A
Validity
Not Before: Nov 21 15:31:02 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0D5F5353A042BFF967FE61DCE6ED96AC382D16B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:86:41:eb:3c:81:c2:af:df:f7:a5:66:92:5c:
47:7a:ce:19:fd:ca:de:89:c4:b7:25:52:39:16:1e:
22:24:25:d4:9f:fc:66:61:59:88:b5:be:5a:5b:8b:
a6:a0:94:6d:9d:21:68:6f:11:21:54:72:7d:06:20:
b6:d2:f9:c0:c1:9d:4e:ba:e2:df:1a:47:44:3e:0c:
b9:23:92:60:9b:b8:da:66:6f:12:d9:d8:94:3c:f7:
ab:a2:85:97:97:9c:7c:8c:89:cb:32:d5:00:8a:d3:
5d:46:20:de:a0:80:88:a5:f3:b5:e4:80:7b:e7:34:
93:01:34:fd:e9:f6:31:8e:2a:76:fb:a5:05:bd:40:
50:be:55:40:0c:f0:e5:57:02:6d:9a:2d:be:9f:c3:
44:ce:96:c5:e9:80:8f:a3:f3:0a:8f:60:e9:c5:8e:
77:ed:10:97:2e:63:17:b9:ff:7e:df:2e:05:23:30:
aa:f1:27:8c:b6:00:63:ac:a5:a6:fe:12:1d:23:0f:
27:52:81:f8:56:ad:79:42:b6:00:3f:64:1f:37:7e:
f6:ab:09:44:20:0c:c0:f9:88:d4:da:c6:9b:5e:6e:
87:30:6d:97:91:27:62:7f:cb:bd:6f:60:fb:12:8b:
38:21:4b:b4:7a:a0:29:18:3d:c8:38:d8:75:9d:45:
54:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5F:53:53:A0:42:BF:F9:67:FE:61:DC:E6:ED:96:AC:38:2D:16:B1
X509v3 Authority Key Identifier:
keyid:A5:A6:AC:38:EE:68:C3:64:CF:79:18:8F:06:42:7E:9C:76:6D:4C:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/DV9TU6BCv_ln_mHc5u2WrDgtFrE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:c9e0::/32
Signature Algorithm: sha256WithRSAEncryption
7b:89:b7:38:4e:0e:1d:c2:12:8b:05:a9:f7:0f:2f:80:53:1e:
51:10:6a:1e:6f:c5:a9:8b:dc:0b:65:f3:8a:36:7a:ee:33:d9:
d0:09:1e:40:76:3a:76:0c:d3:82:d0:05:c5:95:df:60:b6:92:
61:c5:46:60:a4:a9:e4:4c:fc:73:e2:f0:d0:ad:5d:5e:39:0e:
80:c2:76:d1:49:6a:09:ce:7e:2e:33:4f:99:61:03:39:58:c4:
53:fa:af:30:88:5e:5d:6f:4c:68:50:14:6a:b9:47:9f:8d:b6:
62:33:40:5e:cb:5a:e7:a1:8b:94:03:5e:f3:b7:92:81:47:8e:
f4:da:d7:30:d4:d2:26:3c:05:d9:b7:e5:62:81:96:5d:cb:0e:
c8:0b:22:db:2f:e4:51:b2:fa:e6:34:a7:22:05:06:cb:fb:ad:
b5:c6:c3:65:34:dc:96:66:c7:f5:94:5a:ee:36:07:83:1f:e7:
ca:c5:67:0c:e9:a0:c3:37:42:42:29:fc:3a:54:40:b8:32:b8:
73:ff:33:4c:8b:4a:31:90:cb:42:d7:5b:0c:5e:72:17:53:99:
7a:cc:ca:27:0a:1a:74:03:c5:36:ff:1b:6d:a8:34:4a:74:65:
ff:63:e9:73:9c:1d:af:b8:90:8d:39:9d:c3:37:78:0b:42:16:
fa:3c:26:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:10 2024 by rpki-client on console-ams.rpki-client.org