Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/3JmFNj9FYb2cgZVl-ZYeCHWtlCo.roa
File: 3JmFNj9FYb2cgZVl-ZYeCHWtlCo.roa (raw, json)
Hash identifier: srv5h+AU2AbpD1oOtDoeZN2xqv8eKmdeuMQDm2rqnvM=
Subject key identifier: DC:99:85:36:3F:45:61:BD:9C:81:95:65:F9:96:1E:08:75:AD:94:2A
Certificate issuer: /CN=A082F5D992E6BC25E08997538616180702E857C3
Certificate serial: 02AE
Authority key identifier: A0:82:F5:D9:92:E6:BC:25:E0:89:97:53:86:16:18:07:02:E8:57:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oIL12ZLmvCXgiZdThhYYBwLoV8M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/3JmFNj9FYb2cgZVl-ZYeCHWtlCo.roa
Signing time: Fri 01 Sep 2023 08:31:37 +0000
ROA not before: Fri 01 Sep 2023 08:31:37 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38839
IP address blocks: 2406:d7c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 686 (0x2ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A082F5D992E6BC25E08997538616180702E857C3
Validity
Not Before: Sep 1 08:31:37 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DC9985363F4561BD9C819565F9961E0875AD942A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:3b:29:68:62:58:44:19:a7:d5:05:6a:16:2b:
8a:34:02:ac:2d:e6:6b:dc:23:fe:de:9f:89:f1:fc:
02:40:00:61:6e:3e:98:1a:72:9d:58:63:7e:e8:4f:
a5:36:28:1b:1c:45:60:82:d7:87:97:7c:19:98:3f:
8a:5f:09:1c:5a:6b:35:4b:c4:c1:fc:bf:ac:88:81:
cd:ad:82:c7:95:9c:52:17:8c:1a:9d:8f:e8:08:2a:
00:b3:c0:71:3b:8f:15:4f:67:56:52:f8:6f:c6:4d:
16:b9:2f:4d:b3:4f:e9:1a:9e:42:60:c5:98:50:7b:
80:a7:23:1d:6c:10:77:31:71:9e:4a:49:6c:f3:c7:
f8:a1:29:7e:8a:bb:c5:13:5e:7c:42:b3:e8:a3:99:
f9:cc:55:78:2a:d9:6d:cd:93:71:09:bb:00:da:f5:
5a:ca:9a:65:24:e6:84:8d:19:1a:0f:76:47:9a:dd:
1a:eb:6f:bc:29:2a:53:57:6e:96:c0:09:79:57:44:
63:8f:93:f8:80:43:ee:c3:04:ae:ea:f9:cc:cb:97:
eb:17:09:9c:92:3f:57:bf:b9:6b:ed:4a:8f:f5:9c:
84:81:67:ed:e0:8e:64:08:12:d2:97:35:22:64:67:
93:0a:1f:e0:7f:c3:53:de:6f:0a:c1:d3:ac:82:0e:
ec:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:99:85:36:3F:45:61:BD:9C:81:95:65:F9:96:1E:08:75:AD:94:2A
X509v3 Authority Key Identifier:
keyid:A0:82:F5:D9:92:E6:BC:25:E0:89:97:53:86:16:18:07:02:E8:57:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/oIL12ZLmvCXgiZdThhYYBwLoV8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oIL12ZLmvCXgiZdThhYYBwLoV8M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/3JmFNj9FYb2cgZVl-ZYeCHWtlCo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:d7c0::/32
Signature Algorithm: sha256WithRSAEncryption
33:c3:a5:66:82:e2:61:cc:61:d7:33:9b:95:ef:52:cc:e9:74:
66:7d:c3:06:ad:8b:cd:6d:f5:7f:36:e0:2e:86:b7:8c:b5:c1:
f1:2c:c0:79:0b:ff:18:14:5c:20:3a:81:65:ed:d2:2c:30:73:
01:10:ad:d5:e1:95:29:e8:d6:93:ad:42:88:b5:6f:06:1c:f9:
07:c7:22:33:f0:1d:4b:dc:90:54:a1:ee:39:4d:7e:25:6c:7a:
31:cc:39:22:d9:74:73:f2:ec:e9:48:fd:d3:ac:e7:bf:ec:13:
07:5c:44:91:58:ea:21:16:b2:3e:02:5d:51:fd:be:03:d2:f5:
18:95:a6:b3:14:a6:c1:61:7b:d7:9c:ce:0c:2d:6c:30:49:25:
0f:52:bb:a9:db:bf:6e:ab:7c:c0:60:e2:25:72:4d:3d:f5:32:
2a:1e:f6:b6:4c:e8:82:c9:e3:8f:52:4c:e5:04:d4:5d:f5:85:
c1:95:8e:cd:ca:dc:24:25:a1:89:61:dc:23:ec:ed:fb:4a:ab:
f8:e7:16:fc:32:9f:98:55:e3:2c:7e:0c:10:9c:bc:31:3a:8f:
94:a6:26:20:14:de:5a:ce:8a:c3:46:3a:16:1f:f0:5c:32:15:
23:d3:3b:5e:64:ce:dc:d2:f0:b2:5a:08:a5:62:c4:af:e7:e9:
0a:00:fd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org