Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/RWMbA82ndbD1y6ikrvf2y33cwIY.roa
File: RWMbA82ndbD1y6ikrvf2y33cwIY.roa (raw, json)
Hash identifier: vjRZeL3tbmVcB2vkAq9DRmLKjWmqNvfM8+Rcj6/0Vjs=
Subject key identifier: 45:63:1B:03:CD:A7:75:B0:F5:CB:A8:A4:AE:F7:F6:CB:7D:DC:C0:86
Certificate issuer: /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial: 0B46
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/RWMbA82ndbD1y6ikrvf2y33cwIY.roa
Signing time: Fri 01 Sep 2023 08:34:05 +0000
ROA not before: Fri 01 Sep 2023 08:34:05 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4780
IP address blocks: 61.58.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2886 (0xb46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Validity
Not Before: Sep 1 08:34:05 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=45631B03CDA775B0F5CBA8A4AEF7F6CB7DDCC086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:81:6c:6f:43:a5:3e:7b:09:be:b6:c1:f4:ec:
db:38:fd:44:cc:dc:a3:3a:9b:95:ae:71:b0:6a:db:
0f:0b:e4:ea:b3:e1:30:a3:85:23:ab:86:76:ba:b5:
ba:23:60:c8:51:a0:72:f0:8d:71:1d:83:06:30:86:
da:07:f4:d3:26:b5:7f:ee:75:ae:b7:9b:11:2f:f4:
f1:ba:b4:67:1f:0d:6f:61:cb:70:f4:f8:b3:5e:93:
71:34:b1:20:20:b0:fd:4f:94:80:d5:f7:42:7b:08:
a8:a2:66:32:7f:67:86:16:cc:c9:af:a2:d2:e6:29:
33:92:d2:7c:46:6e:aa:84:56:1f:84:76:a3:85:61:
73:7c:b3:1b:b0:28:2a:55:d9:04:de:5c:41:b8:1f:
5f:45:18:dd:6a:f4:e9:3f:27:f4:62:ff:3b:d7:20:
ff:af:c7:d1:e4:ca:c0:95:a5:aa:01:bb:44:9b:56:
7d:eb:0b:08:92:06:1b:6c:dc:da:22:94:61:50:04:
67:29:0c:73:f5:a8:20:0e:c1:7b:88:45:b2:c7:83:
88:63:af:ad:ae:12:a4:84:c7:7a:0f:7f:ac:50:87:
ca:db:aa:8e:e2:e5:26:8a:37:f2:95:e6:a3:ec:1e:
d6:c0:9b:b5:23:26:3c:dd:5e:14:81:bc:d5:de:41:
eb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:63:1B:03:CD:A7:75:B0:F5:CB:A8:A4:AE:F7:F6:CB:7D:DC:C0:86
X509v3 Authority Key Identifier:
keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/RWMbA82ndbD1y6ikrvf2y33cwIY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.48.0/20
Signature Algorithm: sha256WithRSAEncryption
ad:33:7b:c3:5f:30:30:0f:41:36:a6:d5:d4:01:ae:f8:92:81:
1b:9d:12:77:06:a4:bd:3d:b3:9a:6d:41:65:fb:73:9f:9d:62:
4c:b2:d2:6c:5c:05:9b:21:66:e3:99:43:93:f2:00:8e:ac:76:
68:74:fa:a6:83:db:5a:cc:2f:30:a5:2b:a9:97:2d:c0:28:03:
8e:97:6d:db:7b:04:ce:11:03:b3:07:b1:fa:3d:3c:1b:f4:6c:
7c:d0:37:1b:5f:c2:1c:e0:ba:e9:77:ae:ed:63:c0:b7:95:65:
ea:53:22:35:ac:ac:08:af:22:77:16:23:2b:f9:5a:ca:e1:1f:
cd:b5:21:1a:d7:fc:b9:41:28:07:03:d0:72:eb:fb:39:ca:29:
c4:ed:5c:42:5a:d4:22:7d:bb:2d:28:51:e3:3c:14:d0:1d:d2:
ee:ee:fa:f1:06:34:f6:d8:c0:14:08:dc:77:70:53:1e:b7:e5:
9b:32:b1:d5:bd:fa:84:a4:e7:9c:e3:b3:4d:fe:38:72:a4:3e:
83:b2:9f:c3:d4:f7:3c:9c:e7:51:3d:9a:16:1b:78:b7:7f:2c:
2a:1c:22:c9:53:68:d5:26:1a:27:d9:83:1d:3e:5f:73:9d:db:
5b:e7:e1:1f:78:18:36:78:36:4a:fa:47:7f:f9:77:74:4b:f9:
90:33:13:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org