Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/__EWHzpIKPynvfATzS6RqQyqOdU.roa
File: __EWHzpIKPynvfATzS6RqQyqOdU.roa (raw, json)
Hash identifier: M4jslMAO5kqlTCIt/AMs4npJ/UuCnyreiup2eNWotKc=
Subject key identifier: FF:F1:16:1F:3A:48:28:FC:A7:BD:F0:13:CD:2E:91:A9:0C:AA:39:D5
Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Certificate serial: 0B86
Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/__EWHzpIKPynvfATzS6RqQyqOdU.roa
Signing time: Fri 01 Sep 2023 08:54:45 +0000
ROA not before: Fri 01 Sep 2023 08:54:45 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4782
IP address blocks: 61.60.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2950 (0xb86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Validity
Not Before: Sep 1 08:54:45 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FFF1161F3A4828FCA7BDF013CD2E91A90CAA39D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c6:d2:4e:3a:7b:13:f8:14:2d:1a:10:6a:4f:
c3:94:4c:df:eb:2d:51:ea:e7:c1:dc:c8:57:d2:63:
75:95:41:90:c4:37:9a:c0:59:f2:5c:0b:be:3a:ee:
4e:45:79:83:17:11:51:05:5c:d1:d8:78:92:c9:05:
65:66:9b:26:c3:bc:a9:1c:5d:ef:6b:40:86:fb:43:
d3:fe:33:04:5e:c1:7c:17:c2:bb:0f:e3:75:b0:a5:
63:d1:c8:ea:5a:57:5b:73:76:25:f0:be:c6:8a:7c:
55:52:b1:da:89:ff:39:c7:38:0f:27:c3:f4:8b:1e:
3a:19:07:8b:d6:7b:4c:c7:de:ef:96:fa:52:41:87:
f8:d2:92:ed:6a:af:d4:19:2c:08:cd:32:67:1d:23:
39:7e:7d:85:d6:9a:df:ec:a9:0c:e8:83:9f:4c:4e:
3b:09:00:b2:15:5d:3f:e0:98:73:d6:c6:f2:65:ca:
76:9c:09:d8:6e:cd:09:30:4b:16:47:99:b3:be:b3:
de:e9:ee:f8:5d:5c:43:e9:32:6f:c0:34:1b:ed:20:
04:75:96:32:7a:6c:d9:d0:b9:65:39:af:cb:cc:2b:
2b:6c:45:09:68:5e:f4:fc:1a:06:6e:f3:32:4d:d2:
d6:de:b3:6a:27:49:56:fe:a8:8a:e1:83:14:b2:79:
b0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F1:16:1F:3A:48:28:FC:A7:BD:F0:13:CD:2E:91:A9:0C:AA:39:D5
X509v3 Authority Key Identifier:
keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/__EWHzpIKPynvfATzS6RqQyqOdU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.0.0/17
Signature Algorithm: sha256WithRSAEncryption
b7:eb:2b:f5:36:0b:5c:c9:a4:53:73:f1:bf:50:08:86:ff:9c:
15:5b:16:3b:b3:c8:ee:01:b8:30:0a:30:10:d1:82:99:c7:e6:
ad:47:48:0d:f8:67:52:01:8d:85:a4:ce:bd:c7:22:6b:1a:a7:
09:b7:ba:a3:8b:84:ca:df:1a:fd:92:cc:a3:41:24:9c:e4:4c:
51:3d:dc:2c:8e:d4:c6:1d:47:d8:a3:16:de:ca:4e:ff:0a:d3:
ae:c7:54:49:87:18:85:d9:da:d2:19:f6:f5:93:91:76:23:5d:
cb:78:e5:04:68:a5:03:2c:59:80:d9:24:4c:a5:e3:73:85:69:
cb:ac:e1:c3:4b:e7:a2:90:41:6f:81:a0:dd:e8:6b:ed:21:7d:
42:7d:f7:27:af:2b:15:2a:83:2a:8c:26:c0:e9:74:82:67:8c:
45:fb:29:45:08:7d:7b:90:f6:84:03:a3:47:fc:38:4a:ae:70:
a8:8c:c4:3c:75:b0:51:3a:27:3e:53:0a:c1:dc:65:10:fc:98:
cd:90:e0:32:58:dc:26:54:84:ea:1f:b7:05:03:1c:7a:8f:40:
4e:92:db:9d:62:c6:b5:e5:e4:e9:7e:f2:4c:b2:c9:2c:2b:d9:
86:3a:4b:1f:4a:07:68:bf:8d:f8:20:e6:80:3a:45:37:a1:ac:
b2:c6:0f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org