Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CXT/w-o2sQOUGVPMz1wflFgiXQ05898.roa
File: w-o2sQOUGVPMz1wflFgiXQ05898.roa (raw, json)
Hash identifier: kw/bl8S98f0L5AllH5xZdsaYu9ijbINgpvY12uC7zNk=
Subject key identifier: C3:EA:36:B1:03:94:19:53:CC:CF:5C:1F:94:58:22:5D:0D:39:F3:DF
Certificate issuer: /CN=DF6DA9C3A7152EB1E86D17CC21DE020D8FC96EF3
Certificate serial: 076E
Authority key identifier: DF:6D:A9:C3:A7:15:2E:B1:E8:6D:17:CC:21:DE:02:0D:8F:C9:6E:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/322pw6cVLrHobRfMId4CDY_JbvM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/w-o2sQOUGVPMz1wflFgiXQ05898.roa
Signing time: Tue 29 Sep 2020 10:00:08 +0000
ROA not before: Tue 29 Sep 2020 10:00:08 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18049
IP address blocks: 2403:8340::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1902 (0x76e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF6DA9C3A7152EB1E86D17CC21DE020D8FC96EF3
Validity
Not Before: Sep 29 10:00:08 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C3EA36B103941953CCCF5C1F9458225D0D39F3DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0b:d6:9c:13:2b:39:44:71:32:f5:f0:ea:de:
b8:5b:be:d7:1c:8a:73:60:39:25:98:fa:62:27:11:
9e:72:9e:dd:75:40:aa:7a:f1:19:f4:1b:4c:33:ad:
71:6b:b7:f0:21:4c:d8:b8:b6:f8:64:23:7a:de:2a:
1f:6d:10:28:e2:cd:5b:c7:3c:95:d2:e4:e1:0a:7e:
22:80:4f:d8:bc:e8:54:58:4e:63:e3:2f:1d:7c:9e:
0b:f3:f2:e0:e4:3a:fe:a6:7f:82:ec:c3:63:d6:2b:
05:36:a8:25:7f:c7:4e:37:0b:d5:b0:91:17:49:45:
6a:6b:13:e6:45:79:cb:ab:9e:dd:b9:39:09:cb:92:
e8:72:af:c4:0d:3f:c0:5b:fa:84:6a:32:32:96:bc:
b1:20:d4:48:0c:c8:91:b8:ac:fe:1f:a6:89:26:0a:
67:94:27:2b:39:64:87:21:cb:e8:1d:dd:31:75:a7:
75:41:07:26:84:31:4a:c6:d1:66:40:25:3a:88:9a:
61:63:8a:05:de:d0:86:a8:3d:54:ec:09:2e:e1:42:
cf:6b:74:54:69:a5:68:bd:ea:ae:87:75:79:20:6b:
6a:68:2e:ae:61:f7:63:a3:02:1d:fa:d3:a1:14:fe:
4d:ec:60:3d:b5:9e:a4:af:ce:bf:4c:c9:3a:54:ef:
01:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EA:36:B1:03:94:19:53:CC:CF:5C:1F:94:58:22:5D:0D:39:F3:DF
X509v3 Authority Key Identifier:
keyid:DF:6D:A9:C3:A7:15:2E:B1:E8:6D:17:CC:21:DE:02:0D:8F:C9:6E:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/322pw6cVLrHobRfMId4CDY_JbvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/322pw6cVLrHobRfMId4CDY_JbvM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/w-o2sQOUGVPMz1wflFgiXQ05898.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:8340::/32
Signature Algorithm: sha256WithRSAEncryption
b1:f9:2b:33:62:0b:65:00:4e:6d:76:c2:0b:d2:04:6d:10:7f:
6d:59:1d:81:87:3c:28:fb:e7:32:8f:be:22:d8:3e:62:61:44:
11:42:6b:cc:be:78:5a:8f:ce:9b:ca:2a:e8:bf:e6:cd:94:00:
74:ec:bf:7f:e1:b4:53:11:fe:27:1e:4e:2e:27:d6:15:09:7b:
9e:e4:95:9b:45:3c:33:3b:91:bb:1e:ff:ee:89:d5:09:c3:cb:
8f:80:93:fd:50:6e:dc:73:24:c3:1b:fa:95:bf:2c:20:7c:08:
82:9d:85:13:86:c2:1c:e5:59:1c:05:89:bb:9c:45:63:97:9e:
e4:84:b2:2c:53:4e:a2:3c:15:a4:4c:57:68:23:38:03:f6:6a:
8d:81:9a:d9:cb:40:68:16:49:dd:62:24:e4:92:9d:15:81:4d:
de:75:8c:7d:a3:9d:5b:84:7e:c5:4b:9b:4f:eb:87:fe:6f:0a:
77:36:fe:3a:0e:6e:d1:a7:cb:7a:22:25:1c:67:05:1b:d4:8d:
99:f7:3c:8e:e9:43:ed:81:78:d4:4a:af:81:2e:5c:af:3d:4a:
6a:b7:cb:ab:b6:e8:b6:08:7b:07:33:2f:10:e3:3d:c2:33:88:
12:a4:41:18:5e:a6:45:0e:74:5b:1e:8c:47:e7:b6:c3:04:49:
f3:35:a8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org