Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/ouQBXX5VBVvXpoGudj7X6mi_kAM.roa
File: ouQBXX5VBVvXpoGudj7X6mi_kAM.roa (raw, json)
Hash identifier: l7pz4hw5KE13Fr7dcdtDm0UaZgHQB5BbkVPTT9KBJCg=
Subject key identifier: A2:E4:01:5D:7E:55:05:5B:D7:A6:81:AE:76:3E:D7:EA:68:BF:90:03
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0C70
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/ouQBXX5VBVvXpoGudj7X6mi_kAM.roa
Signing time: Fri 01 Sep 2023 08:26:34 +0000
ROA not before: Fri 01 Sep 2023 08:26:34 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18429
IP address blocks: 61.57.128.0/21 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3184 (0xc70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Sep 1 08:26:34 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A2E4015D7E55055BD7A681AE763ED7EA68BF9003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:04:4c:20:77:b0:09:06:42:b2:da:64:53:7c:
7a:74:d4:d6:dc:b7:91:1f:e2:5e:87:f8:a8:22:2d:
63:5a:a8:f2:35:58:2d:6e:ff:fa:7b:62:25:5d:d2:
30:b4:61:d0:23:58:a8:bd:46:6a:6a:90:d1:87:9a:
21:ae:5b:82:f3:1a:a8:94:f8:f0:ce:f6:eb:0a:ba:
3c:86:2e:03:5d:ef:b1:6b:ff:dc:a1:08:37:62:14:
a6:8a:e9:7c:a6:5a:01:9a:e6:73:fb:4a:1b:f9:47:
89:a1:c5:70:b2:53:4b:8b:56:df:3b:60:be:c1:ff:
37:0d:f6:ca:ab:4c:71:d8:29:23:a2:4a:59:94:94:
67:d1:9c:de:af:c3:a4:db:83:b6:d2:87:55:86:bd:
32:13:5c:b6:3a:2a:bc:7b:81:ef:b6:a0:ee:6e:81:
e8:c0:bd:3b:ee:d2:b0:c2:0c:e5:27:6a:ba:76:76:
a3:b9:38:58:40:f4:2d:4f:6f:36:73:1d:cb:fe:d3:
72:9f:d7:a1:4b:54:fd:f4:55:17:82:8f:fc:62:c3:
01:2a:a2:7e:7c:c1:f6:7e:a8:06:6b:aa:d6:b6:ba:
c6:42:7a:e5:35:a3:d1:94:69:1a:3f:29:1d:5f:be:
87:3b:35:8c:cc:b8:ef:04:d0:66:57:48:cc:16:37:
07:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E4:01:5D:7E:55:05:5B:D7:A6:81:AE:76:3E:D7:EA:68:BF:90:03
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/ouQBXX5VBVvXpoGudj7X6mi_kAM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.57.128.0/21
Signature Algorithm: sha256WithRSAEncryption
83:63:9f:dd:4c:f5:ac:8f:ea:73:24:27:f2:c5:cd:5c:66:d5:
34:aa:d6:50:f0:4e:75:18:8f:ea:92:b3:e3:08:30:9f:09:bc:
61:e4:9f:7d:05:3a:e3:e7:2a:1a:78:18:4b:ac:c3:9a:b9:88:
08:16:64:7e:5b:6c:2c:b0:6c:bb:9d:e3:37:40:9b:b6:e0:c5:
ed:66:1a:cc:3c:93:64:9b:11:68:aa:ee:6d:a4:c5:c4:65:6e:
ee:64:21:5d:d3:2c:4d:b9:72:7f:44:ed:2a:b6:52:c2:df:da:
52:5b:9b:b3:99:6b:de:64:b3:29:df:00:a3:ba:27:3b:d8:cc:
ad:eb:b8:9a:4e:24:12:ef:cb:32:9a:34:eb:1c:42:04:36:7f:
d3:8f:7a:be:84:83:4c:23:9a:2b:4f:b4:35:80:e6:6d:99:39:
c0:27:ec:94:f0:fb:93:8a:ac:93:88:50:0c:bc:05:0d:c5:e9:
ca:42:e3:c2:69:99:82:26:5d:fc:c7:ef:8a:78:18:bc:3c:ce:
7f:37:45:00:c2:e7:19:25:38:01:dc:92:9a:61:bd:11:82:a0:
f6:78:f3:4e:a2:ae:4d:f7:0f:69:4e:24:36:20:cf:42:ef:ed:
4f:a4:7a:6a:d4:6a:ff:a7:13:38:ad:ea:b5:3a:ec:50:3c:43:
8f:cf:ef:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org