Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/w8oBTw5O29vU52Fm1EFUZcjOTWM.roa
File: w8oBTw5O29vU52Fm1EFUZcjOTWM.roa (raw, json)
Hash identifier: dHTLLFdvCB+6NuOwbv8bjRt2XxU7topuPDGLAPE0Mfs=
Subject key identifier: C3:CA:01:4F:0E:4E:DB:DB:D4:E7:61:66:D4:41:54:65:C8:CE:4D:63
Certificate issuer: /CN=6016EF41F321C9AA6C1E13D115B5B60A3029C8E5
Certificate serial: 06
Authority key identifier: 60:16:EF:41:F3:21:C9:AA:6C:1E:13:D1:15:B5:B6:0A:30:29:C8:E5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YBbvQfMhyapsHhPRFbW2CjApyOU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/w8oBTw5O29vU52Fm1EFUZcjOTWM.roa
Signing time: Fri 08 Sep 2023 12:09:30 +0000
ROA not before: Fri 08 Sep 2023 12:09:30 +0000
ROA not after: Thu 05 Sep 2024 08:23:46 +0000
asID: 131642
IP address blocks: 2401:30e0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6016EF41F321C9AA6C1E13D115B5B60A3029C8E5
Validity
Not Before: Sep 8 12:09:30 2023 GMT
Not After : Sep 5 08:23:46 2024 GMT
Subject: CN=C3CA014F0E4EDBDBD4E76166D4415465C8CE4D63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b6:eb:66:64:0e:2f:9a:7a:c7:50:66:aa:34:
79:84:e0:79:d0:25:13:89:c2:3a:86:8f:0e:39:2b:
15:36:55:d0:2e:91:3f:bb:6c:4d:77:b8:c3:25:a2:
06:af:23:8f:7d:8a:d9:cd:2a:18:9f:58:92:68:03:
3e:ce:d5:e5:1f:68:35:5c:d9:b3:a1:a3:41:a6:ec:
09:6a:3b:43:6f:f8:f9:41:03:86:fb:26:87:bc:19:
ee:3a:1c:72:95:9a:99:ed:e3:df:67:6a:f5:0d:fd:
a0:e9:41:e2:be:46:f6:72:a1:5f:75:0e:15:5e:62:
8f:74:6e:4c:40:19:6c:50:37:df:ec:95:6b:e6:fd:
0d:7c:f1:7b:cc:63:d0:ef:58:91:20:34:0b:b6:28:
72:0e:91:84:cf:a1:7b:86:99:90:54:a2:78:b0:08:
cb:0c:97:1b:41:6f:b6:af:69:53:71:a9:ff:7a:09:
2e:92:20:d7:95:09:45:c9:b8:0a:21:a7:f8:62:d4:
35:a0:ae:4c:c8:12:c2:61:a3:26:a2:89:c8:ae:9e:
98:f0:f3:2c:3a:81:7f:37:ae:65:94:de:ff:eb:bf:
7d:e6:b6:66:3f:56:0f:93:b9:f0:53:9b:39:50:46:
32:60:77:2d:8c:d8:a9:66:a4:91:49:44:05:8e:ae:
40:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CA:01:4F:0E:4E:DB:DB:D4:E7:61:66:D4:41:54:65:C8:CE:4D:63
X509v3 Authority Key Identifier:
keyid:60:16:EF:41:F3:21:C9:AA:6C:1E:13:D1:15:B5:B6:0A:30:29:C8:E5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/YBbvQfMhyapsHhPRFbW2CjApyOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YBbvQfMhyapsHhPRFbW2CjApyOU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/w8oBTw5O29vU52Fm1EFUZcjOTWM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:30e0::/32
Signature Algorithm: sha256WithRSAEncryption
06:86:25:2a:9a:4d:b2:bf:cd:fe:bb:e2:ea:8e:f4:1f:a1:a0:
26:dc:b3:e6:d0:9a:31:3b:9e:9d:ab:fd:ba:f5:35:aa:cc:c0:
27:3c:fb:5a:50:48:b0:00:08:12:88:b6:05:76:0f:7e:12:8e:
a6:3f:de:39:7c:b5:49:3b:34:f8:95:d4:64:31:58:82:6c:14:
6e:79:11:12:03:d8:57:70:84:56:4d:37:95:4d:47:77:af:63:
b6:ff:32:50:d0:f2:87:0c:2b:e6:13:cf:16:28:ce:51:c5:38:
38:5c:23:3e:cb:cd:bd:36:11:ca:b8:63:fb:a5:6b:e0:00:71:
9c:25:2f:e2:9a:20:2a:31:8b:68:e3:37:21:73:1a:63:80:fd:
2e:31:34:d5:06:ff:37:b3:7c:76:89:fb:ce:46:80:e3:ee:74:
1e:7e:95:88:93:5f:a5:5d:78:44:fb:d7:5f:47:97:df:ad:15:
d0:44:fe:8d:56:c9:48:57:8c:d8:3d:f6:b3:4a:9d:ef:27:e6:
f3:14:a1:c9:31:1d:d2:5e:fb:46:8b:b1:35:f4:dd:eb:36:11:
b1:aa:5d:f4:d0:3e:34:97:d6:a7:e7:20:5b:26:30:f7:47:c5:
19:ba:6c:dc:19:60:13:d0:c1:61:9d:10:4b:b2:94:df:b4:23:
a8:77:71:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org