Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/VfDbPZ2wZOSdWQbsl-AmiEtWsHs.roa
File: VfDbPZ2wZOSdWQbsl-AmiEtWsHs.roa (raw, json)
Hash identifier: WsrTcW/SIvQ3L4794raKS6YrUq9EF1C5pU49ohczNMc=
Subject key identifier: 55:F0:DB:3D:9D:B0:64:E4:9D:59:06:EC:97:E0:26:88:4B:56:B0:7B
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0C6B
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/VfDbPZ2wZOSdWQbsl-AmiEtWsHs.roa
Signing time: Fri 01 Sep 2023 08:26:32 +0000
ROA not before: Fri 01 Sep 2023 08:26:32 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18429
IP address blocks: 61.57.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3179 (0xc6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Sep 1 08:26:32 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=55F0DB3D9DB064E49D5906EC97E026884B56B07B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:49:3c:62:b9:76:38:28:ae:43:3c:d3:8e:
a3:b0:8b:88:ec:c4:bb:94:4e:50:65:1c:49:92:cd:
f7:c7:5f:02:51:7e:2b:c2:78:6c:07:01:30:91:10:
e7:98:0d:29:12:d0:d2:be:40:51:ac:96:a0:7f:0d:
6f:fb:92:ae:09:62:a6:c7:94:cf:d2:ef:21:9f:4f:
a1:c1:01:96:c1:c5:3e:f0:4a:7f:b2:a4:4a:7a:09:
86:f6:e9:6d:7a:7a:28:ca:b6:90:8c:43:c9:c7:34:
74:14:c4:9a:a9:27:62:75:74:c0:55:e9:d6:ac:1f:
d5:7a:d0:80:7a:79:67:67:85:8b:81:5b:46:ed:a0:
b8:0c:0e:5d:85:4f:71:da:b4:f1:3a:55:7f:bc:12:
28:17:3e:cf:c5:04:7d:f7:6f:6e:a7:39:93:9e:dc:
59:62:cc:06:d1:00:e0:e4:c0:69:5d:80:12:99:ac:
2c:a2:26:d4:e3:28:8a:c3:2c:f3:24:5f:9e:7a:c8:
7d:20:be:4a:f6:28:e1:41:eb:19:c5:77:12:35:25:
c5:ba:82:12:7e:ec:84:85:f9:78:19:31:26:9e:ff:
dd:09:b6:05:9d:8d:80:c7:89:03:b7:34:ff:a3:45:
4d:1b:fd:ad:34:77:97:95:41:b6:b0:35:65:dc:3f:
98:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F0:DB:3D:9D:B0:64:E4:9D:59:06:EC:97:E0:26:88:4B:56:B0:7B
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/VfDbPZ2wZOSdWQbsl-AmiEtWsHs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.57.148.0/24
Signature Algorithm: sha256WithRSAEncryption
99:4b:2a:b3:1b:1a:9e:87:d2:ac:30:11:24:6f:37:40:0a:9f:
2d:d0:cf:1b:d1:b6:d8:8d:43:ad:47:42:a9:49:ba:a0:8b:b6:
13:8d:af:62:63:d0:ed:d4:1f:db:70:7d:0c:51:ae:1b:df:af:
83:ec:b9:5d:eb:93:02:26:20:28:44:df:51:5a:2c:68:c4:6b:
d8:7c:74:95:a2:11:f9:27:d7:01:65:66:3b:4c:4d:bc:c2:bb:
96:43:e5:4b:13:73:f8:88:1e:13:c4:d0:fe:1e:de:6e:9e:0b:
b5:c8:71:b2:f8:6f:62:b3:f2:ff:0f:b9:ff:4f:5d:66:67:49:
26:1d:89:7e:b9:87:64:52:05:e6:df:cb:6b:d0:f0:77:b9:a5:
73:61:a4:02:fd:3c:64:ed:22:9d:10:45:13:38:a3:81:cc:2a:
3c:ce:4a:e9:38:57:64:17:d3:b6:59:5c:5a:f4:54:10:31:39:
11:07:f8:8b:d7:e6:e0:f9:6b:48:26:90:b6:69:f5:07:76:7e:
af:75:df:96:d7:ef:97:73:ed:92:14:4f:66:b8:e8:65:7d:3f:
3c:98:ef:16:36:51:ee:71:53:72:3a:af:7e:d6:17:7d:43:6d:
b1:47:1e:c6:5c:54:e4:f5:df:6e:f9:eb:de:aa:1a:1a:99:32:
62:ca:8d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org