Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EASPNET/qd3ueYlFmojuiV0F1wppCSXYSKM.roa
File: qd3ueYlFmojuiV0F1wppCSXYSKM.roa (raw, json)
Hash identifier: M0Dx9ZOC/FPUnboBHY4YMy5VVqwHiUWJuDz7WVippdc=
Subject key identifier: A9:DD:EE:79:89:45:9A:88:EE:89:5D:05:D7:0A:69:09:25:D8:48:A3
Certificate issuer: /CN=552B16164C361040D88F32D36509448CF3BB9D25
Certificate serial: 0B36
Authority key identifier: 55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/qd3ueYlFmojuiV0F1wppCSXYSKM.roa
Signing time: Fri 01 Sep 2023 08:38:51 +0000
ROA not before: Fri 01 Sep 2023 08:38:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 10135
IP address blocks: 2405:5600::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2870 (0xb36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B16164C361040D88F32D36509448CF3BB9D25
Validity
Not Before: Sep 1 08:38:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A9DDEE7989459A88EE895D05D70A690925D848A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:dd:d3:66:30:14:7a:76:b3:45:5c:32:eb:
d4:c5:16:c3:d5:c6:ae:cd:c8:79:64:31:25:50:0a:
c7:a4:0b:13:a6:a3:f8:fe:9c:25:8a:dd:30:a0:d8:
f6:71:c6:9d:65:89:03:e5:ab:b1:a0:c0:29:a1:f7:
22:7b:86:4b:2a:4f:6f:6f:a0:5e:33:03:64:33:95:
5f:35:3d:37:85:e8:b9:f6:cc:c7:c2:94:55:94:72:
8a:9f:15:f0:a2:5f:70:a2:da:88:be:a8:19:f4:dc:
5c:5a:d1:36:58:8b:85:58:ff:22:90:58:1b:e2:e9:
26:31:e3:a0:d6:e1:8e:d0:c4:3b:df:e1:eb:0b:07:
be:af:7f:36:e5:43:a1:89:18:f7:72:db:03:40:43:
ad:cf:a3:aa:60:f4:29:e2:d8:16:e3:f1:57:89:21:
5d:e7:64:cd:81:7e:f7:45:ba:20:c3:0b:fc:1b:cf:
49:8b:e3:be:3a:90:45:e7:70:7b:75:f2:6e:02:b6:
3a:97:99:d6:16:60:ad:0b:00:c2:93:98:1f:b7:fc:
65:20:a0:4b:5f:c7:eb:ec:ee:fd:70:81:14:d4:89:
44:a6:53:a7:ea:57:c5:cf:3d:a2:e9:4b:37:74:15:
ed:c8:58:85:48:ae:d1:4e:1c:ff:dc:c2:9e:c0:f4:
91:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DD:EE:79:89:45:9A:88:EE:89:5D:05:D7:0A:69:09:25:D8:48:A3
X509v3 Authority Key Identifier:
keyid:55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/qd3ueYlFmojuiV0F1wppCSXYSKM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:5600::/32
Signature Algorithm: sha256WithRSAEncryption
2f:37:21:ed:a5:ae:3d:9d:d0:47:df:e4:b2:66:5b:4b:5f:42:
98:84:cf:30:60:bc:87:77:2e:52:61:b5:44:5b:0d:91:7b:d6:
93:d6:3d:b2:f8:84:7c:09:c0:89:4f:3c:25:72:fc:d3:cc:9d:
fb:b1:ba:d8:e0:53:0c:48:0e:f4:8a:07:5a:e6:78:5a:70:ce:
d8:4c:75:44:af:0c:32:58:91:23:ff:63:9c:a2:55:b9:f0:91:
89:42:b8:c1:96:66:df:cc:0c:87:12:d0:20:05:6f:90:5c:61:
d7:a6:82:ea:60:8d:1f:ad:fe:9a:91:8e:8f:4d:41:22:d3:4d:
b3:e6:57:f8:a4:c1:9b:91:01:29:d1:30:e1:45:ff:06:25:fd:
d9:48:8a:50:82:42:fb:0b:de:98:3e:60:a1:51:97:b1:94:fe:
f8:76:e4:5d:e5:ac:c9:6d:b6:1e:d0:a2:ce:73:d6:97:6b:8c:
a3:2b:3b:74:08:84:3a:34:ce:55:dd:8f:a6:8a:af:3b:cd:12:
cb:d7:60:de:83:27:cc:69:89:69:51:bf:9f:e5:44:3c:b0:a3:
87:df:b5:3b:71:bb:2b:9e:af:76:df:e4:28:b2:dc:31:6d:7a:
6e:04:be:58:cf:86:87:e8:08:5c:7d:56:7e:3f:21:82:72:05:
5c:53:63:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org