Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/WWvd0CdvqrRx2eEIhNwv6FtOeOA.roa
File: WWvd0CdvqrRx2eEIhNwv6FtOeOA.roa (raw, json)
Hash identifier: S2dhXj/Ni55/AQqwJBx8LWucPrw94D0x9cRkhOLACWM=
Subject key identifier: 59:6B:DD:D0:27:6F:AA:B4:71:D9:E1:08:84:DC:2F:E8:5B:4E:78:E0
Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Certificate serial: 056B
Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/WWvd0CdvqrRx2eEIhNwv6FtOeOA.roa
Signing time: Fri 01 Sep 2023 09:00:33 +0000
ROA not before: Fri 01 Sep 2023 09:00:33 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 206729
IP address blocks: 2401:95c0:f001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1387 (0x56b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Validity
Not Before: Sep 1 09:00:33 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=596BDDD0276FAAB471D9E10884DC2FE85B4E78E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:36:41:c1:a7:4f:bb:26:3a:00:3e:5c:8b:4e:
e8:c7:42:92:55:8c:b3:99:e4:5a:c4:ef:f1:f1:3e:
fb:58:e4:74:2f:42:fb:ab:0c:72:fb:ec:29:68:7e:
9f:aa:ee:6b:16:36:ca:a9:bc:4c:a4:db:6a:28:50:
6c:41:84:83:36:77:c8:44:2e:88:f7:39:16:1b:68:
ed:d7:ac:32:61:e0:f5:35:7e:e5:1f:97:ce:d0:13:
48:a8:2d:0a:c9:70:d9:3e:66:a2:e8:34:ae:da:40:
cc:79:1e:f5:4e:79:93:08:c5:0b:af:a6:7e:5b:43:
1b:30:98:fb:52:fd:89:2f:f1:c5:39:58:1c:ad:18:
10:02:a9:bf:2e:ab:28:04:08:92:ac:8e:fe:57:7f:
fc:d0:c2:88:15:49:2c:43:f9:a0:75:a0:f5:67:ed:
67:a3:7e:ee:62:48:1a:1f:52:49:54:58:f9:01:2b:
44:1a:03:63:6b:41:63:c0:a8:5b:29:da:b7:97:dd:
67:62:c1:bf:57:9f:5a:87:3e:26:c3:62:d7:e9:f9:
26:dd:7f:d3:96:05:98:40:4d:8a:28:9b:2a:19:13:
cf:d2:f7:cc:7f:c9:98:22:c2:e9:8a:2b:c5:8f:2f:
7b:fc:14:91:3b:06:e4:8d:35:23:80:38:09:e1:8d:
4f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6B:DD:D0:27:6F:AA:B4:71:D9:E1:08:84:DC:2F:E8:5B:4E:78:E0
X509v3 Authority Key Identifier:
keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/WWvd0CdvqrRx2eEIhNwv6FtOeOA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:95c0:f001::/48
Signature Algorithm: sha256WithRSAEncryption
c5:68:15:1c:dd:a9:12:2c:d9:4d:15:06:81:54:ae:80:90:9e:
d2:11:33:a4:78:4f:7c:07:75:da:c2:d9:24:45:94:05:39:ab:
20:32:a2:8d:a4:de:a8:2c:7b:99:be:5e:14:01:ec:3f:59:27:
c5:a3:2b:d5:5f:e8:da:3c:6d:bc:ed:c4:d8:ec:d9:0a:3e:e9:
e6:69:f6:a9:79:12:17:06:df:46:52:5b:70:a0:4b:09:84:2f:
45:72:c8:81:be:d6:72:76:d6:7c:98:25:94:d4:ef:ca:e7:7c:
bf:a7:6f:c4:42:85:68:e3:36:b1:b3:c1:86:db:37:08:ae:e6:
75:53:9d:90:f7:fa:97:b3:d0:26:8b:78:2d:21:e2:15:53:a6:
8b:02:9c:cb:17:39:85:53:7c:0e:f7:83:c5:24:48:15:91:a9:
62:16:ff:da:ab:ea:9d:cf:7b:19:ff:88:98:44:b6:3d:3a:72:
81:a4:bd:86:f1:a3:ce:1d:dc:35:02:80:50:65:d3:f9:a0:aa:
b1:8b:1c:e3:79:94:d7:cc:4a:3e:65:df:e9:d4:d1:66:bb:e6:
e6:a3:ea:ee:67:f8:64:6d:b9:a9:92:d5:4e:39:db:16:b6:26:
03:ad:b9:5f:e2:36:86:c6:57:29:e6:be:cf:29:ce:ad:70:2b:
af:ef:57:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org