Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/ZKFqmfd3wl1muyIl0j5DBcnQcb4.roa
File: ZKFqmfd3wl1muyIl0j5DBcnQcb4.roa (raw, json)
Hash identifier: vCzVRHo7TyM4Wnv62h4dwDE9YYgZQtMY/S4inlzllbg=
Subject key identifier: 64:A1:6A:99:F7:77:C2:5D:66:BB:22:25:D2:3E:43:05:C9:D0:71:BE
Certificate issuer: /CN=61E0EE79428B85EDABB5F6EB9578EFB19E63C98F
Certificate serial: 0CA3
Authority key identifier: 61:E0:EE:79:42:8B:85:ED:AB:B5:F6:EB:95:78:EF:B1:9E:63:C9:8F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YeDueUKLhe2rtfbrlXjvsZ5jyY8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/ZKFqmfd3wl1muyIl0j5DBcnQcb4.roa
Signing time: Thu 15 Sep 2022 02:42:07 +0000
ROA not before: Thu 15 Sep 2022 02:42:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 134823
IP address blocks: 2404:a3c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3235 (0xca3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61E0EE79428B85EDABB5F6EB9578EFB19E63C98F
Validity
Not Before: Sep 15 02:42:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=64A16A99F777C25D66BB2225D23E4305C9D071BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7b:ef:f8:20:59:0a:f4:a8:f8:19:dd:c2:0e:
68:d7:aa:9d:25:1f:f0:e0:b9:46:d0:14:bb:c7:a1:
be:5c:97:56:2d:99:2f:a5:6e:04:4f:21:75:ad:51:
33:c0:d1:b0:1c:6f:0d:e4:9c:bb:63:9b:ed:64:0a:
fe:a0:12:c8:a8:90:8d:ab:c7:23:17:d9:e5:f8:44:
79:a2:a7:80:f7:de:17:5b:f7:46:8c:6d:4b:84:72:
ff:11:d5:3c:7e:25:85:39:4c:97:27:10:82:bb:9f:
32:bf:b1:23:72:e7:f5:40:cb:6e:1f:33:bb:6b:e6:
fd:29:54:2d:fa:96:87:04:a1:0b:3a:ad:71:14:9f:
ba:33:70:d6:31:5c:f5:80:64:91:84:dc:02:5f:67:
84:14:1a:1e:80:bc:0c:06:f1:1f:1d:4b:22:18:12:
d1:81:a0:c3:c9:8d:8e:12:c9:69:85:0d:fb:55:42:
9b:24:f4:b0:b9:90:3d:db:e5:6c:a9:45:7f:9b:44:
3b:53:30:a4:f7:4a:8a:8b:a0:7a:9c:f8:61:b9:07:
76:d5:9e:02:6f:31:20:93:8d:de:e2:19:dc:a3:fe:
4d:39:fc:0c:06:50:d1:28:f1:15:ea:57:60:bd:b4:
30:e9:a8:6c:93:4d:07:86:a5:fe:49:9e:18:a1:93:
fc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A1:6A:99:F7:77:C2:5D:66:BB:22:25:D2:3E:43:05:C9:D0:71:BE
X509v3 Authority Key Identifier:
keyid:61:E0:EE:79:42:8B:85:ED:AB:B5:F6:EB:95:78:EF:B1:9E:63:C9:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/YeDueUKLhe2rtfbrlXjvsZ5jyY8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YeDueUKLhe2rtfbrlXjvsZ5jyY8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/ZKFqmfd3wl1muyIl0j5DBcnQcb4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:a3c0::/32
Signature Algorithm: sha256WithRSAEncryption
00:d7:c6:1f:a0:70:91:b4:96:91:ea:5e:bb:0f:95:23:ba:59:
90:37:b9:e0:71:21:df:3c:8c:7f:18:1b:c7:c4:74:14:d7:2d:
5e:f8:86:8b:39:7a:2a:5c:37:57:3d:44:17:c3:87:82:fc:c2:
43:8c:74:6e:c0:cc:a9:83:02:fd:58:d5:cd:d7:ce:89:b4:67:
91:3b:06:3c:29:3e:4a:5a:98:fe:9c:41:a4:24:f4:ee:af:a5:
cc:d7:95:b2:7b:c9:a6:ab:bf:fa:7f:3c:fb:32:23:c7:70:5b:
28:f6:d0:95:fc:ce:8d:7a:84:a5:d2:a8:cd:f4:60:26:80:29:
63:29:f2:94:01:3f:e9:9c:ef:5c:0c:94:24:9f:f8:fb:59:32:
f3:28:73:4c:1b:99:1f:61:26:cd:09:3d:10:51:b5:6a:34:d1:
47:26:dd:e0:97:1d:f3:b5:16:4f:d8:a3:09:1c:d4:4d:f6:f6:
df:18:45:8e:da:cd:3e:45:e2:48:ea:cb:96:a5:0f:08:e6:5b:
96:35:d9:cc:18:18:f3:30:a1:1f:2a:3d:38:8d:06:94:ac:2a:
f6:ee:1b:19:a1:e9:dc:1f:1b:6d:8e:a9:03:62:c0:11:ea:6b:
85:47:81:2e:26:46:61:af:f7:cd:24:7c:64:1d:1c:4f:39:58:
0d:f4:2d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:36 2025 by rpki-client