Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWINS/bYwAw2TXrVZpfNhzm_DeG7_960A.roa
File: bYwAw2TXrVZpfNhzm_DeG7_960A.roa (raw, json)
Hash identifier: ak+e3oO3cbXUtUoUzp1PQ7oE4QhFIa6zCz6cY7NRHEE=
Subject key identifier: 6D:8C:00:C3:64:D7:AD:56:69:7C:D8:73:9B:F0:DE:1B:BF:FD:EB:40
Certificate issuer: /CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Certificate serial: 0B58
Authority key identifier: 61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/bYwAw2TXrVZpfNhzm_DeG7_960A.roa
Signing time: Fri 01 Sep 2023 08:36:08 +0000
ROA not before: Fri 01 Sep 2023 08:36:08 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17416
IP address blocks: 2405:4d00::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2904 (0xb58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Validity
Not Before: Sep 1 08:36:08 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6D8C00C364D7AD56697CD8739BF0DE1BBFFDEB40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:91:56:f0:b1:98:8b:d1:7c:fa:fd:50:02:ea:
5f:7d:41:43:73:14:a6:db:ec:5e:5d:a6:d9:3f:89:
94:92:06:cf:f5:ba:a1:31:6f:bb:99:18:67:84:6c:
da:0c:79:eb:a3:06:d2:48:ee:a4:61:92:5c:68:5c:
45:bd:e1:86:bd:e0:02:e2:fd:49:93:ff:01:db:5c:
29:27:f5:ab:b2:38:3c:6c:98:1d:51:ac:93:19:44:
72:ce:78:e2:30:2e:18:06:4a:19:72:a6:b2:f9:84:
62:32:18:81:b0:4b:df:d7:58:ad:c9:df:f2:4c:d7:
ea:07:fa:41:5c:a7:d6:64:2d:7f:68:6e:ab:97:44:
ca:b5:4e:b1:d8:21:22:93:39:c0:cc:34:03:07:0f:
c6:59:79:08:e7:13:81:c1:b2:ad:f7:82:46:1f:cc:
f9:e0:3e:fb:4a:a5:24:e1:c2:6f:15:d5:d2:58:91:
3b:ec:ca:3b:dc:0b:31:cd:65:87:45:9e:ad:e2:73:
b7:8b:6b:56:26:35:c4:3d:9f:68:8f:22:4b:4e:55:
16:5e:11:ba:ea:e4:10:d3:eb:e4:03:7a:9d:bc:ad:
6d:ce:a1:5e:e4:25:4e:71:b4:e6:5b:e0:92:43:d4:
1f:b9:9e:3a:23:d9:7d:d3:d5:3a:58:e8:cc:f1:ae:
ad:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8C:00:C3:64:D7:AD:56:69:7C:D8:73:9B:F0:DE:1B:BF:FD:EB:40
X509v3 Authority Key Identifier:
keyid:61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/bYwAw2TXrVZpfNhzm_DeG7_960A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:4d00::/32
Signature Algorithm: sha256WithRSAEncryption
6d:3a:b9:a9:f4:52:69:9b:6a:68:ca:33:1b:df:07:bd:c9:04:
a0:4e:35:57:18:e5:56:fc:d7:24:38:4f:a5:0e:ad:f1:7a:ea:
9d:9b:80:68:5b:c9:8c:0c:f4:42:67:26:ef:09:9a:a9:47:c6:
a9:8e:c1:a4:b2:63:4c:52:b1:ee:37:b4:e7:70:e3:06:43:c2:
63:ff:eb:1a:fd:fa:b3:0c:ee:e6:53:20:3e:60:34:6a:6b:37:
c6:48:a8:7d:6e:a5:d9:b8:bc:cb:fa:8d:58:60:23:4e:7e:f1:
5b:fe:ab:47:b7:e0:6f:39:06:cc:b7:8d:f7:7d:5b:81:7b:32:
52:69:4d:a1:6c:a2:c7:77:31:9f:64:9e:85:b7:d2:ac:c6:c0:
79:ed:47:ea:5f:04:bd:5f:a4:76:60:ab:ad:44:0c:2c:d9:02:
d7:2e:68:17:e5:cd:06:ca:20:70:1d:81:74:42:0f:28:50:3e:
0c:21:65:c0:c3:10:11:49:de:87:d3:15:8c:0b:20:b9:58:9a:
1a:4e:95:e4:fd:a5:f3:d4:b5:b8:2f:06:1d:9c:2b:6c:4b:84:
e6:29:37:09:cf:4e:3b:4c:76:05:ae:8e:84:45:df:c1:45:0c:
20:5f:5b:a7:20:8f:8b:f5:57:b3:7b:b0:9e:09:57:39:5e:81:
ec:97:fb:89
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICC1gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE1
RjlCRDk4Q0M3MEU4ODM2RDAxQTk0ODFDMTlDNUMyRDQ1RDc5MTAeFw0yMzA5MDEw
ODM2MDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDZEOEMwMEMzNjREN0FE
NTY2OTdDRDg3MzlCRjBERTFCQkZGREVCNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClkVbwsZiL0Xz6/VAC6l99QUNzFKbb7F5dptk/iZSSBs/1uqEx
b7uZGGeEbNoMeeujBtJI7qRhklxoXEW94Ya94ALi/UmT/wHbXCkn9auyODxsmB1R
rJMZRHLOeOIwLhgGShlyprL5hGIyGIGwS9/XWK3J3/JM1+oH+kFcp9ZkLX9obquX
RMq1TrHYISKTOcDMNAMHD8ZZeQjnE4HBsq33gkYfzPngPvtKpSThwm8V1dJYkTvs
yjvcCzHNZYdFnq3ic7eLa1YmNcQ9n2iPIktOVRZeEbrq5BDT6+QDep28rW3OoV7k
JU5xtOZb4JJD1B+5njoj2X3T1TpY6Mzxrq0vAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUbYwAw2TXrVZpfNhzm/DeG7/960AwHwYDVR0jBBgwFoAUYV+b2YzHDog20BqU
gcGcXC1F15EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdJTlMv
WVYtYjJZekhEb2cyMEJxVWdjR2NYQzFGMTVFLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9ZVi1iMll6SERvZzIwQnFVZ2NHY1hDMUYxNUUuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9EV0lOUy9iWXdBdzJUWHJWWnBmTmh6bV9E
ZUc3Xzk2MEEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAVN
ADANBgkqhkiG9w0BAQsFAAOCAQEAbTq5qfRSaZtqaMozG98HvckEoE41VxjlVvzX
JDhPpQ6t8XrqnZuAaFvJjAz0Qmcm7wmaqUfGqY7BpLJjTFKx7je053DjBkPCY//r
Gv36swzu5lMgPmA0ams3xkiofW6l2bi8y/qNWGAjTn7xW/6rR7fgbzkGzLeN931b
gXsyUmlNoWyix3cxn2SehbfSrMbAee1H6l8EvV+kdmCrrUQMLNkC1y5oF+XNBsog
cB2BdEIPKFA+DCFlwMMQEUneh9MVjAsguViaGk6V5P2l89S1uC8GHZwrbEuE5ik3
Cc9OO0x2Ba6OhEXfwUUMIF9bpyCPi/VXs3uwnglXOV6B7Jf7iQ==
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org