Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/k6rLiUOzBHomssn1tHS11KpGvKc.roa
File: k6rLiUOzBHomssn1tHS11KpGvKc.roa (raw, json)
Hash identifier: HrQ3eYExguYtvZY3lRFhTf/3Vj2lBMOgV1Rsd3gjnlU=
Subject key identifier: 93:AA:CB:89:43:B3:04:7A:26:B2:C9:F5:B4:74:B5:D4:AA:46:BC:A7
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0C5F
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/k6rLiUOzBHomssn1tHS11KpGvKc.roa
Signing time: Fri 01 Sep 2023 08:26:28 +0000
ROA not before: Fri 01 Sep 2023 08:26:28 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18429
IP address blocks: 61.57.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3167 (0xc5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Sep 1 08:26:28 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=93AACB8943B3047A26B2C9F5B474B5D4AA46BCA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4f:41:af:41:87:6d:ee:30:dd:ed:e9:05:8b:
6d:5e:de:29:5b:69:6a:5a:62:ae:40:aa:e7:ad:b4:
12:3c:6c:72:e5:ab:d5:ca:c3:aa:20:fb:83:4a:ab:
59:46:42:44:c7:60:f9:13:78:db:4c:df:8d:2e:d6:
fc:4e:3e:14:ab:9f:1b:cb:94:ce:f0:8c:f6:db:cd:
93:88:b9:4d:53:d1:2f:5e:e1:ce:ff:29:2c:a2:7e:
c9:15:9e:ae:e2:71:ed:b3:60:2b:5b:88:85:8f:09:
6d:5a:1b:45:1b:52:c3:08:d7:93:dc:6a:c3:73:da:
47:42:69:2a:bc:10:6a:61:16:e0:30:4d:a7:9f:be:
03:82:35:4e:d7:91:96:d5:fa:ce:a1:37:99:e6:b9:
7b:9f:3d:8b:86:53:f2:5a:af:7c:28:bc:ea:e0:87:
6b:42:a9:d9:69:3c:ea:5a:f8:08:a3:11:32:5c:be:
da:6d:0e:b2:6f:5e:ac:c0:b1:b4:4a:68:c9:fe:23:
c6:31:49:d7:da:95:74:7b:ba:55:01:ce:14:3c:73:
d4:be:23:d5:5d:0f:31:5f:eb:57:1a:98:c3:c4:17:
6d:d2:3a:20:68:83:90:cf:e7:53:e9:60:25:61:cd:
6e:93:41:0f:5f:02:8f:e2:f9:28:75:dc:ac:ca:b1:
13:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AA:CB:89:43:B3:04:7A:26:B2:C9:F5:B4:74:B5:D4:AA:46:BC:A7
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/k6rLiUOzBHomssn1tHS11KpGvKc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.57.128.0/20
Signature Algorithm: sha256WithRSAEncryption
36:8a:c5:e7:7a:46:8f:8a:33:12:0e:25:4b:05:9f:a7:9e:15:
cb:7f:d8:8b:79:2e:90:c6:32:0a:58:84:3e:55:cf:b1:2a:6f:
11:f5:fa:43:0f:65:9e:86:2f:88:54:5b:d5:84:19:46:12:c3:
86:41:3b:9b:35:83:fe:b2:d0:ba:21:7e:20:16:f7:f2:e0:ab:
55:99:09:9f:ba:8d:29:63:30:98:02:d4:2a:a0:b7:26:c9:8f:
96:2c:39:6a:85:53:40:29:2f:ca:24:e0:ee:7e:c4:6a:53:e3:
24:36:c5:62:4a:94:5a:92:6e:c5:98:d1:c9:29:dc:b2:89:90:
28:68:e4:75:3c:ef:8a:aa:e0:06:8e:c1:f1:b3:6e:18:8a:b7:
72:1c:4e:d7:24:13:46:60:39:16:6c:7e:33:72:38:95:96:58:
47:9a:71:2d:35:52:d0:e1:d9:a1:ff:b2:29:cf:c5:3c:53:b5:
36:72:85:f3:b1:01:3b:85:97:e6:58:0c:de:67:4f:58:76:90:
38:10:58:a1:f4:5a:87:a1:c3:bd:27:6a:66:a8:c0:fa:ab:c0:
c5:1c:9c:7e:3e:62:29:f0:52:c4:7d:a7:14:00:a3:0d:7c:12:
de:b7:a9:a8:5e:3b:6e:ec:e8:e8:0a:c4:c8:75:d4:54:fe:16:
bd:f1:87:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org