Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/d7qlDkV9FRqnXqEv8aMp79JyDPw.roa
File: d7qlDkV9FRqnXqEv8aMp79JyDPw.roa (raw, json)
Hash identifier: HLgv8gQ/e/HiNZ0N5Q9pxOIuLXXsEeIzQfmpYb9Kdng=
Subject key identifier: 77:BA:A5:0E:45:7D:15:1A:A7:5E:A1:2F:F1:A3:29:EF:D2:72:0C:FC
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0D20
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/d7qlDkV9FRqnXqEv8aMp79JyDPw.roa
Signing time: Mon 15 Jan 2024 21:24:51 +0000
ROA not before: Mon 15 Jan 2024 21:24:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131591
IP address blocks: 2404:0:8000::/36 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3360 (0xd20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:24:51 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=77BAA50E457D151AA75EA12FF1A329EFD2720CFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:64:0e:82:c6:3f:c9:96:f6:04:88:51:dc:
fd:e5:f2:b4:a3:6e:df:57:4b:01:b0:39:31:6e:53:
13:c0:9f:84:fc:4a:32:03:6a:3b:71:aa:9c:32:cf:
b5:a0:3f:5e:69:bc:90:19:f6:00:22:db:dc:fa:9c:
db:9d:72:98:b3:1f:4c:94:2b:b8:e9:96:e9:55:7a:
f4:b4:76:60:5a:e9:bd:0a:76:4a:7b:ab:fd:10:52:
16:3a:f2:a8:a5:60:13:39:a1:f1:96:8a:5b:96:23:
0e:d1:0b:9e:47:5c:84:69:b3:02:52:95:ac:30:b0:
32:a3:43:14:ad:32:54:1d:57:e3:3c:5b:e3:cb:14:
25:3c:36:48:82:c0:24:e3:b5:bc:40:1b:4d:61:db:
49:b8:3e:97:b1:77:19:d0:d8:96:dd:54:89:69:9a:
62:65:f4:28:f2:3c:bc:20:9f:ec:15:e7:4e:5b:20:
2a:f5:32:5e:5a:7f:5e:ab:0b:9d:88:ce:16:7b:76:
c6:3b:cf:2f:4d:f8:53:65:94:96:d8:5c:89:30:85:
41:3b:aa:53:8b:8c:66:33:20:5a:f5:d3:02:3a:2c:
49:42:c3:58:fe:b5:3b:54:73:ff:a7:54:aa:7c:50:
7e:f4:e5:c4:62:da:c8:a3:2f:8b:1c:a8:51:a5:16:
e5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BA:A5:0E:45:7D:15:1A:A7:5E:A1:2F:F1:A3:29:EF:D2:72:0C:FC
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/d7qlDkV9FRqnXqEv8aMp79JyDPw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:0:8000::/36
Signature Algorithm: sha256WithRSAEncryption
05:a5:5d:71:d1:a9:f6:21:1a:bd:34:ed:22:1c:79:0d:a3:e4:
48:9e:7c:ba:62:c3:d3:27:7b:c7:dd:62:72:37:77:cb:08:c7:
92:a6:e8:c8:4f:3a:1c:fe:fd:55:eb:34:e0:e1:d9:c8:50:c3:
01:89:51:1c:93:6b:4b:97:b1:ef:af:91:49:02:d4:e8:ce:fb:
45:00:9b:f7:a0:d0:2c:9a:52:a2:bc:9f:19:7d:cc:c2:11:a4:
0e:42:20:e1:a7:16:61:88:09:2f:75:a7:0c:53:70:94:9d:bc:
6b:ac:ed:74:a7:31:8e:0d:62:26:b7:2d:70:c1:03:27:95:6e:
da:b9:9c:1d:21:ee:51:d7:17:d8:85:f1:8c:a3:d6:cf:53:be:
3d:e0:b4:2c:55:9a:37:6b:b9:c4:eb:2a:ae:1b:5f:32:94:72:
a3:88:e9:75:61:7c:85:99:26:c2:e8:98:1a:7e:12:f1:f2:88:
37:7b:68:84:19:77:80:eb:79:0b:c4:59:ec:be:5e:34:f8:f1:
86:e9:bc:de:2b:fe:70:88:21:8e:aa:dc:c5:1f:a4:e8:49:d6:
04:66:a5:79:0c:0f:cc:1d:99:40:b1:05:da:a8:a7:4c:b8:4e:
13:2e:e5:b5:d4:fb:6c:6a:74:03:dd:85:06:11:bf:20:72:f3:
fc:bd:70:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org