Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EBT/bV4UYjW0NriBZ2L9BtpU1PK97iM.roa
File: bV4UYjW0NriBZ2L9BtpU1PK97iM.roa (raw, json)
Hash identifier: SRZoDOpudoM3D9yoCSkKhoIjOISzu4Z48SYVJoTCy+0=
Subject key identifier: 6D:5E:14:62:35:B4:36:B8:81:67:62:FD:06:DA:54:D4:F2:BD:EE:23
Certificate issuer: /CN=2D84CA269320E256216A2DEE2EA381A304526AB4
Certificate serial: 0A3F
Authority key identifier: 2D:84:CA:26:93:20:E2:56:21:6A:2D:EE:2E:A3:81:A3:04:52:6A:B4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LYTKJpMg4lYhai3uLqOBowRSarQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EBT/bV4UYjW0NriBZ2L9BtpU1PK97iM.roa
Signing time: Thu 15 Sep 2022 02:44:31 +0000
ROA not before: Thu 15 Sep 2022 02:44:31 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 211.76.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2623 (0xa3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D84CA269320E256216A2DEE2EA381A304526AB4
Validity
Not Before: Sep 15 02:44:31 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6D5E146235B436B8816762FD06DA54D4F2BDEE23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:71:2a:b2:e0:93:89:a1:de:c4:6f:02:65:b8:
77:c0:3e:24:dc:4e:41:79:cc:f0:45:5a:4d:0e:18:
e0:7f:99:d9:aa:e5:04:a8:47:23:a6:67:d4:d5:03:
b0:48:91:69:dc:33:5a:9d:28:8a:51:a8:51:77:06:
66:e4:14:96:9b:b3:90:1a:fd:d4:8d:c8:71:64:c3:
50:70:f4:2c:ff:7a:d6:2c:48:d2:92:22:27:ff:1c:
86:7e:39:a5:7e:b7:0b:a5:7d:a5:de:14:9f:c7:e3:
2e:e5:bf:60:53:03:b7:3f:c9:f7:a6:48:82:af:a4:
d8:14:93:96:67:4f:74:f1:5d:36:06:9b:d7:65:72:
ec:cb:f0:44:d3:45:da:81:a4:8a:1b:60:84:a2:06:
3c:25:86:3a:0f:b4:47:f5:c3:b4:55:06:f8:7f:e5:
f0:03:11:5e:8c:bf:3f:ce:1f:81:6f:21:16:65:0c:
0b:ad:fe:db:fc:a0:89:31:33:7a:4d:53:b7:9b:6a:
c9:ee:59:b4:b4:7e:b8:2e:58:01:9a:ae:bd:e5:80:
35:f2:9f:cc:a5:3b:0b:34:a2:05:33:39:4d:6f:36:
77:3c:88:2d:d0:f9:03:bc:10:53:04:2a:1f:97:ad:
8e:15:c5:9b:c9:88:33:47:40:5b:42:96:c7:1e:8a:
ae:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5E:14:62:35:B4:36:B8:81:67:62:FD:06:DA:54:D4:F2:BD:EE:23
X509v3 Authority Key Identifier:
keyid:2D:84:CA:26:93:20:E2:56:21:6A:2D:EE:2E:A3:81:A3:04:52:6A:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EBT/LYTKJpMg4lYhai3uLqOBowRSarQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LYTKJpMg4lYhai3uLqOBowRSarQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EBT/bV4UYjW0NriBZ2L9BtpU1PK97iM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.96.0/20
Signature Algorithm: sha256WithRSAEncryption
57:f1:c0:06:da:58:c5:8d:4e:de:59:5e:87:2d:71:43:08:c3:
e9:63:bb:0f:f8:90:07:1b:f4:28:ec:90:c2:1d:f7:44:36:71:
38:5a:3e:4e:63:5a:69:a8:52:59:1a:17:26:bf:ca:ed:08:f1:
69:b8:f5:b5:25:a7:8c:05:35:b4:47:d5:d1:c3:fd:9f:1b:4e:
aa:04:95:41:50:ed:2a:5d:5c:61:9f:13:3c:40:9a:32:09:12:
e6:6b:eb:d0:54:40:a4:48:80:74:4f:3c:1b:fa:08:bf:40:c6:
4a:13:1b:81:b3:b8:d4:d7:5a:60:8f:20:5a:e5:f4:6b:8d:ed:
0d:74:ad:8a:43:dc:39:b4:f7:34:d7:1f:87:9d:ee:e4:76:7e:
ad:b9:44:fb:68:c3:22:c6:47:71:a1:aa:28:db:6a:c2:b1:7c:
cf:45:69:96:ce:37:0d:4b:8c:f6:b3:57:7a:a5:f6:28:f5:38:
9c:4b:78:ce:86:40:cb:25:d6:b4:f9:c3:8f:9c:74:27:bd:72:
fb:8c:9b:35:40:a0:3d:97:0e:2a:fd:4c:d4:2b:4b:4a:46:72:
0f:84:b1:f7:7a:76:c0:88:51:f3:8d:f2:f5:e5:79:9a:47:e0:
e4:6e:0d:d0:53:53:5f:c9:0e:47:3a:ab:5a:b3:db:bd:47:a4:
ef:20:4b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org