Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/SYM9TpZu5xqWexUipOrsUhSI2ms.roa
File: SYM9TpZu5xqWexUipOrsUhSI2ms.roa (raw, json)
Hash identifier: VnZjSa9EB4x//85mifJfn7gbqHHOMOUxcTL+rxjkeIY=
Subject key identifier: 49:83:3D:4E:96:6E:E7:1A:96:7B:15:22:A4:EA:EC:52:14:88:DA:6B
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0BBC
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/SYM9TpZu5xqWexUipOrsUhSI2ms.roa
Signing time: Fri 01 Sep 2023 08:36:40 +0000
ROA not before: Fri 01 Sep 2023 08:36:40 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9244
IP address blocks: 61.56.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3004 (0xbbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Sep 1 08:36:40 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=49833D4E966EE71A967B1522A4EAEC521488DA6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:fc:ce:aa:b6:d4:3c:53:ce:1e:c8:d0:b4:
37:12:94:3b:e5:2d:54:30:ce:51:8a:39:69:2a:fd:
ff:2b:71:ca:28:b4:67:10:cc:c4:37:55:fc:9b:bb:
1c:d6:a7:9e:00:8c:ad:69:09:f5:53:a7:df:b4:98:
8e:8c:e8:f9:c5:4c:9a:16:26:3e:ec:e9:52:1d:79:
b3:5a:87:08:75:2f:6d:41:eb:ea:61:b5:2b:59:fd:
f8:b1:c3:16:33:fa:ea:ea:5c:65:03:f6:f5:27:13:
7c:27:0a:47:66:e2:13:27:88:94:02:b2:c1:96:05:
76:4e:e6:15:c9:0f:a8:10:29:8d:bd:a1:8c:64:d6:
02:43:82:a0:fd:94:ef:55:02:61:c6:c7:2a:80:7b:
5a:7a:02:cc:b2:27:17:23:61:72:a9:87:31:85:98:
f2:fb:94:d5:4f:db:eb:09:0e:3e:98:f0:dd:68:e5:
c8:59:db:f3:c5:82:80:dd:a0:d5:db:26:2d:4a:11:
79:9a:1a:f1:98:07:25:36:b1:ed:b6:c5:04:c3:a3:
5b:c5:68:8f:4f:d9:33:6e:75:95:4e:e7:ec:0e:4b:
a7:b3:37:5c:e2:a1:65:36:a8:96:c4:7a:81:85:27:
ea:20:1f:83:73:82:3d:00:15:c3:dd:86:fe:17:4e:
d4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:83:3D:4E:96:6E:E7:1A:96:7B:15:22:A4:EA:EC:52:14:88:DA:6B
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/SYM9TpZu5xqWexUipOrsUhSI2ms.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.84.0/24
Signature Algorithm: sha256WithRSAEncryption
58:4a:b2:ec:a9:72:f5:25:0c:f7:22:d1:f0:6a:fd:61:60:68:
34:83:d5:c0:c0:86:03:f7:8e:72:aa:6e:c4:35:9a:02:e9:13:
26:1c:77:59:c9:0c:de:6f:19:27:d4:91:89:1f:0c:b5:03:b1:
ea:a7:ae:5d:b5:d1:13:85:91:bb:af:e1:69:1b:08:28:6f:e6:
b1:69:60:85:12:1d:8c:34:0c:94:83:62:b5:41:a7:f8:8a:13:
d5:c3:75:a9:51:8a:61:e0:5a:a2:a3:cd:40:02:5f:f8:69:dd:
8f:82:1c:71:ff:55:38:48:f9:97:f5:20:df:1e:35:84:1b:c3:
69:1a:39:d7:21:3a:1d:84:d6:31:8e:88:4e:4d:23:32:ee:3e:
de:ec:76:3b:09:c8:ae:09:6c:26:31:7d:0a:ac:07:03:47:c7:
e3:9d:54:a7:8c:40:d8:3d:3e:e5:0e:0c:d9:c6:28:98:e0:37:
4f:5a:9f:1d:df:4b:df:cf:5e:74:a5:91:e3:a5:10:5d:c4:78:
1f:42:a2:d2:1a:5c:2b:35:87:ad:59:a8:59:84:fd:68:46:0a:
fe:ac:f1:35:44:a6:12:30:21:da:02:0a:d6:b5:1d:b3:a4:c8:
a6:65:f8:81:e8:98:e6:e4:2d:1e:83:d1:15:06:0b:89:e8:c2:
9e:0a:71:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org