Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EBT/vYvtKu8STn6qZ_OYt_3jDEoBpZk.roa
File: vYvtKu8STn6qZ_OYt_3jDEoBpZk.roa (raw, json)
Hash identifier: CcHsQzPOkdsIkzQ+UVWmEoDgmYe9TITUjnNO26e73KE=
Subject key identifier: BD:8B:ED:2A:EF:12:4E:7E:AA:67:F3:98:B7:FD:E3:0C:4A:01:A5:99
Certificate issuer: /CN=2D84CA269320E256216A2DEE2EA381A304526AB4
Certificate serial: 0774
Authority key identifier: 2D:84:CA:26:93:20:E2:56:21:6A:2D:EE:2E:A3:81:A3:04:52:6A:B4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LYTKJpMg4lYhai3uLqOBowRSarQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EBT/vYvtKu8STn6qZ_OYt_3jDEoBpZk.roa
Signing time: Tue 29 Sep 2020 09:51:32 +0000
ROA not before: Tue 29 Sep 2020 09:51:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 211.76.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1908 (0x774)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D84CA269320E256216A2DEE2EA381A304526AB4
Validity
Not Before: Sep 29 09:51:32 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BD8BED2AEF124E7EAA67F398B7FDE30C4A01A599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1d:e5:e3:81:5c:a4:0f:fa:2f:60:a9:aa:cd:
56:4d:dd:11:a8:57:09:2e:96:dc:50:18:4d:1a:6d:
7b:b7:ee:91:e7:40:98:4f:f5:b8:42:26:09:fe:22:
c2:93:c8:0f:16:3a:33:87:12:ff:24:57:08:19:81:
f0:fd:a4:36:9e:ed:af:96:5d:42:ea:53:a7:f3:34:
23:cb:7e:06:f0:5e:e3:cf:99:e6:7b:22:c3:b2:e2:
ef:a8:04:7f:1c:2a:5b:08:07:dc:8c:d4:ec:ca:f2:
8b:98:76:62:91:6e:f6:f3:4e:13:d2:52:a6:75:54:
07:d7:3b:6e:d8:bb:54:8a:af:4b:f1:63:55:fe:c1:
1f:f8:41:d9:46:bf:86:77:50:d9:84:b9:e0:67:f8:
58:7e:2a:d8:ae:06:65:fe:a5:be:a1:6a:fb:10:34:
53:5a:4d:a2:ac:0b:65:7f:45:e0:c7:f2:b2:7f:f7:
ed:b0:39:fd:65:4b:e9:85:f0:77:46:2e:e0:57:78:
b3:ad:b6:9c:b5:da:8b:6a:ff:d5:48:37:1f:83:57:
35:d3:65:cd:e7:26:11:52:f7:18:58:aa:32:14:c4:
db:0a:66:ea:e4:3b:7b:68:a9:29:68:69:27:85:d5:
6b:14:53:49:a5:db:87:f2:7d:0c:4a:7f:c6:17:f9:
fa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8B:ED:2A:EF:12:4E:7E:AA:67:F3:98:B7:FD:E3:0C:4A:01:A5:99
X509v3 Authority Key Identifier:
keyid:2D:84:CA:26:93:20:E2:56:21:6A:2D:EE:2E:A3:81:A3:04:52:6A:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EBT/LYTKJpMg4lYhai3uLqOBowRSarQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LYTKJpMg4lYhai3uLqOBowRSarQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EBT/vYvtKu8STn6qZ_OYt_3jDEoBpZk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.96.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:bf:db:57:14:63:3f:e3:0a:4d:fd:81:08:24:20:6c:d3:92:
f9:94:41:c1:c5:8f:82:7e:88:47:06:2e:fd:a8:0e:d6:b7:ac:
bf:73:f8:fa:03:6e:49:e8:7b:5d:90:a8:9b:65:3d:27:37:61:
c3:f6:a4:09:21:bf:43:05:c8:93:ba:16:e6:db:fb:0f:8a:9c:
ff:ec:bc:5b:5f:bd:ab:42:28:50:d6:44:e0:e5:47:d3:b6:5b:
68:a9:3a:be:84:4c:91:5a:c4:4c:56:3e:65:f5:df:f9:41:06:
af:96:c8:d1:db:c1:1d:dd:90:1d:b3:7f:4f:af:ff:5f:f4:4d:
21:41:5d:99:e0:89:d4:0e:aa:61:80:aa:aa:d9:6a:d4:c9:df:
d8:f3:1a:c7:57:eb:3d:fa:aa:c0:23:48:49:5e:b7:b0:36:44:
aa:f8:ac:32:b8:cf:a5:cb:44:a2:8d:9c:5c:70:cb:e4:9e:35:
e0:c4:f3:be:cb:19:dd:ef:4f:3b:79:27:96:57:fc:26:7c:13:
6f:7d:e7:12:dd:43:fc:c3:5f:99:03:c9:ad:50:9d:5e:71:44:
8c:1c:81:d8:81:59:20:89:c9:a4:24:6f:0a:bd:02:02:e4:10:
27:ba:28:c8:6f:12:62:16:59:b3:3b:68:f5:8e:0a:cf:ec:17:
fb:05:0a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org