Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IPV6PO/9DPTyUu0ZnyCWw6pPEnGkQlsjcg.roa
File: 9DPTyUu0ZnyCWw6pPEnGkQlsjcg.roa (raw, json)
Hash identifier: J6PiueD+kFvhtqjAcKMKpUtkzibCDHDxrAnva+8uFXA=
Subject key identifier: F4:33:D3:C9:4B:B4:66:7C:82:5B:0E:A9:3C:49:C6:91:09:6C:8D:C8
Certificate issuer: /CN=26ACC815CBE617AC450064E3680B4F823BCCACA2
Certificate serial: 03
Authority key identifier: 26:AC:C8:15:CB:E6:17:AC:45:00:64:E3:68:0B:4F:82:3B:CC:AC:A2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JqzIFcvmF6xFAGTjaAtPgjvMrKI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IPV6PO/9DPTyUu0ZnyCWw6pPEnGkQlsjcg.roa
Signing time: Tue 02 Jan 2024 02:56:17 +0000
ROA not before: Tue 02 Jan 2024 02:56:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18180
IP address blocks: 119.75.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26ACC815CBE617AC450064E3680B4F823BCCACA2
Validity
Not Before: Jan 2 02:56:17 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F433D3C94BB4667C825B0EA93C49C691096C8DC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:20:ac:8a:6b:da:66:35:d1:a2:96:a4:7e:7d:
06:5b:ec:46:9f:5d:87:7d:2e:ec:72:1f:fb:89:82:
75:76:b9:de:b7:f9:f7:b4:23:ba:5e:c1:90:f7:16:
87:17:e9:07:3d:ea:ad:76:56:4b:f2:79:ba:5e:43:
f8:be:c4:c6:f5:8c:54:bf:94:e8:cb:fe:61:07:a6:
25:9e:49:ee:17:94:14:0b:d9:18:30:ce:21:9d:06:
1c:63:cc:bb:38:e9:9f:3a:fb:c2:34:f3:fc:e9:d2:
33:b0:25:8b:5b:c4:e1:74:a0:42:aa:25:1e:b1:6d:
86:be:7e:d5:48:cd:ec:7e:54:c6:fd:b6:84:e0:30:
ca:e8:bd:db:41:bb:80:16:ae:40:8e:0a:5e:a4:b0:
aa:ad:27:50:e6:33:5d:4a:2d:e8:c7:25:2d:f5:a9:
6d:d0:c0:dd:8e:cc:15:93:5c:3c:4f:55:ad:b0:3e:
63:da:bf:ab:e2:13:7e:13:61:e4:33:33:ef:d3:c2:
d5:16:db:b2:ea:4b:ce:b1:4b:53:83:32:8f:97:c4:
78:06:7f:2e:65:f2:52:98:69:99:4b:b6:94:2d:0c:
e2:00:a6:13:27:ab:e4:b0:92:31:09:2a:d4:ca:1c:
40:20:87:3c:22:78:5e:cf:27:1a:11:10:f8:c7:2c:
62:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:33:D3:C9:4B:B4:66:7C:82:5B:0E:A9:3C:49:C6:91:09:6C:8D:C8
X509v3 Authority Key Identifier:
keyid:26:AC:C8:15:CB:E6:17:AC:45:00:64:E3:68:0B:4F:82:3B:CC:AC:A2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IPV6PO/JqzIFcvmF6xFAGTjaAtPgjvMrKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JqzIFcvmF6xFAGTjaAtPgjvMrKI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IPV6PO/9DPTyUu0ZnyCWw6pPEnGkQlsjcg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.75.245.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:02:41:98:c2:cf:b5:14:00:35:e0:11:84:c6:3d:38:ba:ec:
12:58:55:9d:6c:8d:c5:8d:ce:3d:21:d3:34:6c:a7:f6:a9:76:
2d:3b:1c:72:58:67:7e:53:5b:45:bd:d7:05:53:27:23:3d:13:
35:76:40:cc:db:d0:85:c9:20:31:23:ff:01:e5:82:d7:7b:78:
69:41:0a:65:ad:6a:6b:91:61:34:4e:3f:9e:6c:05:7a:23:d7:
09:6c:29:39:e9:3f:7d:4b:8c:7c:34:35:a3:e0:d1:28:3c:6c:
05:97:eb:31:2b:d9:4f:c3:25:f8:3e:8b:72:bb:26:e8:83:5c:
87:e6:bb:d2:81:36:a1:db:0e:73:2b:11:28:e5:3c:51:b1:54:
24:0f:ec:3b:53:14:ea:ef:49:d6:26:1c:72:9e:bb:1e:80:cc:
eb:76:71:6b:58:97:bc:de:f0:7d:e6:c4:97:db:d6:73:66:f0:
28:80:52:e1:57:1d:02:13:44:5b:08:ed:04:14:e8:fe:40:12:
10:8a:40:59:48:ec:f6:f0:7b:1a:36:c0:3e:60:d7:57:2a:76:
d9:1b:39:3f:a2:5c:ba:4a:29:9e:2f:a4:25:81:6c:ff:8a:d7:
6c:9c:3d:83:10:a3:37:55:35:c7:24:83:22:03:56:89:0f:d4:
91:8a:a3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org