Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/M9CLrTKgO6c7zTkspop12ZnygT4.roa
File: M9CLrTKgO6c7zTkspop12ZnygT4.roa (raw, json)
Hash identifier: zL/5b79vnKGn8xfk3E8oYHj+BZ8YTiLx6P5IX+K19MY=
Subject key identifier: 33:D0:8B:AD:32:A0:3B:A7:3B:CD:39:2C:A6:8A:75:D9:99:F2:81:3E
Certificate issuer: /CN=A736CFF1948740614D0321E63B8403EB9AB9748D
Certificate serial: CA
Authority key identifier: A7:36:CF:F1:94:87:40:61:4D:03:21:E6:3B:84:03:EB:9A:B9:74:8D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/pzbP8ZSHQGFNAyHmO4QD65q5dI0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/M9CLrTKgO6c7zTkspop12ZnygT4.roa
Signing time: Fri 01 Sep 2023 08:31:11 +0000
ROA not before: Fri 01 Sep 2023 08:31:11 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38136
IP address blocks: 2400:bea0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202 (0xca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A736CFF1948740614D0321E63B8403EB9AB9748D
Validity
Not Before: Sep 1 08:31:11 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=33D08BAD32A03BA73BCD392CA68A75D999F2813E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:f2:3c:4b:8b:0d:51:10:97:d2:63:77:49:
45:cc:7c:d3:25:c9:0e:88:b8:d6:3a:0d:a1:1e:d5:
f7:47:9e:e3:89:db:65:ab:1c:e9:6d:96:cc:a6:48:
90:89:72:21:1c:d7:e9:41:07:d5:26:b9:63:ac:c6:
93:d5:b5:4e:81:d3:d8:62:f8:26:d0:bd:08:b6:d3:
85:63:d9:d1:4f:f6:b3:79:6a:21:5a:9b:9c:39:52:
cc:e8:09:85:0b:7d:0b:bf:3f:cf:d9:7d:a5:8b:7b:
ee:5c:63:e0:99:17:64:cf:a8:1d:08:cc:05:56:e8:
57:6f:77:8a:7d:10:68:ec:cc:4a:47:8a:6a:37:f8:
88:64:47:6b:55:78:10:78:fa:6f:4a:2c:b7:c4:9b:
82:54:33:cc:60:79:b4:4a:b3:36:4e:d7:7f:50:5c:
c8:25:b5:dc:a0:31:9c:7c:0a:93:20:45:91:83:0a:
93:8f:53:39:39:b6:1c:23:a3:f7:0e:d8:1c:66:ef:
57:b9:ce:66:35:5a:54:81:6d:cd:8b:1a:8e:00:a5:
37:2c:1f:36:71:37:cf:b1:4d:29:6d:c7:40:d9:ec:
2c:f6:48:95:f4:d3:ea:c7:2c:30:f4:29:e0:df:ef:
22:5f:a1:0e:1f:a5:04:c6:50:77:bc:84:8c:33:8f:
7b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D0:8B:AD:32:A0:3B:A7:3B:CD:39:2C:A6:8A:75:D9:99:F2:81:3E
X509v3 Authority Key Identifier:
keyid:A7:36:CF:F1:94:87:40:61:4D:03:21:E6:3B:84:03:EB:9A:B9:74:8D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/pzbP8ZSHQGFNAyHmO4QD65q5dI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pzbP8ZSHQGFNAyHmO4QD65q5dI0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/M9CLrTKgO6c7zTkspop12ZnygT4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:bea0::/32
Signature Algorithm: sha256WithRSAEncryption
4f:2f:fa:9c:10:f0:19:bd:41:3b:41:ea:93:7b:c4:62:52:eb:
a4:89:2d:b4:de:5a:d4:23:55:7d:ed:1c:83:c6:79:10:a6:89:
40:0d:dd:5c:32:87:e9:1a:fb:ca:ca:e1:7f:62:e9:8f:60:6a:
30:8b:c2:1e:3d:43:44:28:e9:36:1b:0f:e4:5a:56:34:21:40:
00:9b:2f:e0:66:7e:1d:5d:b8:d1:16:85:ca:11:9b:b7:19:4c:
63:36:08:04:bb:fd:38:67:52:3a:bb:ae:dd:b0:ea:9a:61:a8:
e8:fa:f1:08:f0:22:52:74:09:e6:f4:28:b2:e8:97:f4:d8:12:
fd:d7:2f:07:f8:73:ba:b7:27:c8:fb:5b:1c:3f:f4:0d:c5:e7:
03:76:59:bd:55:83:2f:2a:e6:55:c0:f8:ad:f7:7b:54:5f:c0:
fe:20:4e:ad:90:5a:42:c1:88:e6:f4:ac:4f:2a:04:40:1f:4f:
60:05:65:05:aa:8f:53:c0:b1:83:54:31:99:fb:0f:eb:59:37:
c0:5d:64:03:2f:3b:07:b4:da:4c:45:35:09:a0:dd:c7:99:2a:
73:96:b1:4f:f8:11:00:ee:dd:b0:7a:34:ec:34:18:1e:34:fe:
74:15:c7:39:52:be:8d:fa:f6:1d:6b:5e:a7:20:ba:5c:90:c2:
b4:a4:99:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org