Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSNET/GyG_xsqaj6m34OnltZPxjeAt6Xk.roa
File: GyG_xsqaj6m34OnltZPxjeAt6Xk.roa (raw, json)
Hash identifier: qg256P8tuL3sMze/FFF+gVY0tplZ8GMV9F3tLSsLzZ8=
Subject key identifier: 1B:21:BF:C6:CA:9A:8F:A9:B7:E0:E9:E5:B5:93:F1:8D:E0:2D:E9:79
Certificate issuer: /CN=4C47DF748EC0FF16912283CEC10EC10ED32D244F
Certificate serial: 0B21
Authority key identifier: 4C:47:DF:74:8E:C0:FF:16:91:22:83:CE:C1:0E:C1:0E:D3:2D:24:4F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TEffdI7A_xaRIoPOwQ7BDtMtJE8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSNET/GyG_xsqaj6m34OnltZPxjeAt6Xk.roa
Signing time: Fri 01 Sep 2023 08:55:02 +0000
ROA not before: Fri 01 Sep 2023 08:55:02 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38837
IP address blocks: 211.78.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2849 (0xb21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C47DF748EC0FF16912283CEC10EC10ED32D244F
Validity
Not Before: Sep 1 08:55:02 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1B21BFC6CA9A8FA9B7E0E9E5B593F18DE02DE979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:3d:ec:05:e2:73:b4:60:fa:fd:72:7e:fa:
7c:82:3f:a5:90:72:e4:76:48:7f:c2:b2:c4:c8:04:
dc:cc:4a:f1:bf:2f:a1:76:60:21:3a:89:e8:fd:57:
37:a6:e4:65:93:ee:9d:44:e4:98:7c:87:79:f1:1c:
89:ff:fc:f3:d3:1e:8a:4e:4c:e5:16:ee:bd:38:9b:
de:28:94:c0:78:b1:b0:75:68:6d:ea:64:42:44:9b:
d6:08:82:2a:7c:07:0e:32:38:5a:c3:aa:1c:3e:5d:
63:55:4c:f3:84:26:91:9a:ce:b4:30:14:ad:2c:83:
f9:2e:2f:98:20:b8:52:4a:1a:3b:98:3e:e6:4b:f5:
85:ec:3e:d6:48:e0:f4:4b:e5:34:4c:ed:4c:a5:f5:
0d:00:ad:59:93:7e:8c:98:61:6a:e8:44:e3:cd:3c:
f3:8e:73:b2:7c:13:51:68:ec:4e:61:20:c4:96:8e:
63:74:0b:77:8c:34:1c:18:5d:ed:4a:10:91:e7:ef:
b9:d8:9b:0c:77:f1:dc:db:be:82:e5:69:7b:00:87:
9b:e8:3e:9a:bb:07:61:64:54:f8:1a:e7:c4:cd:d7:
3c:80:da:ae:e2:26:34:97:a7:5e:23:ab:46:5b:07:
ab:7f:3f:79:89:55:e1:68:2b:13:b9:96:3f:c9:05:
25:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:21:BF:C6:CA:9A:8F:A9:B7:E0:E9:E5:B5:93:F1:8D:E0:2D:E9:79
X509v3 Authority Key Identifier:
keyid:4C:47:DF:74:8E:C0:FF:16:91:22:83:CE:C1:0E:C1:0E:D3:2D:24:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSNET/TEffdI7A_xaRIoPOwQ7BDtMtJE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TEffdI7A_xaRIoPOwQ7BDtMtJE8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSNET/GyG_xsqaj6m34OnltZPxjeAt6Xk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.78.64.0/20
Signature Algorithm: sha256WithRSAEncryption
ae:dc:e0:20:51:94:27:32:d8:32:3d:74:20:4a:b1:b1:c7:09:
db:aa:cc:29:29:4a:a9:7d:06:cb:1f:99:0c:df:64:91:73:16:
0f:3c:ab:90:98:9c:57:f5:7a:aa:f3:53:a4:d3:9f:1c:62:07:
bf:ff:42:f4:f9:ba:e3:c1:f6:94:1b:9b:2f:c1:76:21:62:2a:
32:f2:f2:75:79:a5:e9:1f:f2:59:9c:e4:c9:59:20:bc:c0:2d:
e3:65:93:eb:6a:7e:b6:82:3e:9a:19:b8:85:4e:fe:b8:25:cf:
67:9a:b4:76:a1:94:80:9b:1f:ff:e2:a4:5a:5d:a8:5b:4d:a4:
68:db:96:bb:6f:5a:57:dc:59:c1:0b:b2:b5:51:b8:74:9b:c9:
ff:2f:ea:3d:2c:ff:c2:62:fd:d3:9b:59:45:d7:d9:97:00:9f:
16:e0:f1:01:8d:c3:bd:bb:bd:5e:6a:0d:55:58:e3:9f:fd:ba:
c6:bd:7f:a4:6c:4e:ef:a2:ea:c6:96:df:fc:ff:f7:e3:54:39:
e5:4b:e9:3a:cc:98:cd:85:48:1d:75:6a:8d:e3:1f:c2:c9:ca:
7e:31:60:ed:61:24:27:94:a4:49:81:e5:d9:42:6e:c4:a4:0b:
4a:22:52:82:04:7e:f7:97:29:08:dd:09:98:6f:b3:5c:2f:3e:
90:f2:7c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org