Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IPV6PO/Ot1DUqjBO22rA3homubLg8Smzgo.roa
File: Ot1DUqjBO22rA3homubLg8Smzgo.roa (raw, json)
Hash identifier: Mg5eP1IDAl+iBGDxmTcrBS8edrbFVWkADVLC2KLzEOY=
Subject key identifier: 3A:DD:43:52:A8:C1:3B:6D:AB:03:78:68:9A:E6:CB:83:C4:A6:CE:0A
Certificate issuer: /CN=26ACC815CBE617AC450064E3680B4F823BCCACA2
Certificate serial: 04
Authority key identifier: 26:AC:C8:15:CB:E6:17:AC:45:00:64:E3:68:0B:4F:82:3B:CC:AC:A2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JqzIFcvmF6xFAGTjaAtPgjvMrKI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IPV6PO/Ot1DUqjBO22rA3homubLg8Smzgo.roa
Signing time: Tue 02 Jan 2024 02:56:17 +0000
ROA not before: Tue 02 Jan 2024 02:56:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18417
IP address blocks: 119.75.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26ACC815CBE617AC450064E3680B4F823BCCACA2
Validity
Not Before: Jan 2 02:56:17 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3ADD4352A8C13B6DAB0378689AE6CB83C4A6CE0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5b:89:6b:d6:9e:1f:93:9e:09:da:84:3f:15:
02:f6:e8:49:a7:bd:c6:2c:01:fa:55:a3:5c:7d:da:
ce:f4:22:29:6a:e1:5a:4d:b7:2d:a6:85:58:8b:ca:
f0:11:08:92:8c:92:1f:2b:19:ab:ae:5e:30:44:07:
af:a5:12:da:b2:a4:9f:d4:c1:da:ba:25:32:4d:5c:
a6:29:57:ad:ed:9b:59:65:26:f4:ed:e6:5a:2a:49:
69:86:fa:95:16:bc:75:f6:c0:49:dd:53:99:d5:a2:
d0:5a:47:1b:8b:95:27:8d:a6:d7:b6:d3:9c:e8:b2:
69:b3:d3:10:d6:91:27:ed:14:1b:04:8c:20:ef:f4:
fe:78:2e:23:8b:b6:a6:9c:76:cc:4f:10:7f:fe:a8:
f4:a7:a2:e8:8f:01:35:1f:2c:db:4a:fe:02:58:81:
79:d5:23:36:df:53:49:c4:7a:0e:a9:15:c0:f4:89:
d2:2d:96:26:74:71:96:68:dd:32:7d:08:62:77:94:
16:8b:d5:59:b6:1f:db:ca:08:c9:fc:de:db:69:df:
76:55:a3:5c:1d:76:84:8d:93:b2:af:ce:41:6e:21:
74:36:63:a6:9c:6f:05:66:74:6a:e4:f5:a1:5e:fe:
7e:11:a2:1c:88:91:1b:5a:29:62:97:20:a9:c4:2a:
6f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DD:43:52:A8:C1:3B:6D:AB:03:78:68:9A:E6:CB:83:C4:A6:CE:0A
X509v3 Authority Key Identifier:
keyid:26:AC:C8:15:CB:E6:17:AC:45:00:64:E3:68:0B:4F:82:3B:CC:AC:A2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IPV6PO/JqzIFcvmF6xFAGTjaAtPgjvMrKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JqzIFcvmF6xFAGTjaAtPgjvMrKI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IPV6PO/Ot1DUqjBO22rA3homubLg8Smzgo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.75.245.0/24
Signature Algorithm: sha256WithRSAEncryption
25:63:40:a5:1d:32:31:4c:16:7e:dd:60:69:7f:28:8a:df:a9:
f4:47:14:44:21:b2:ea:60:d7:3b:4c:5e:1e:e8:65:1a:0c:f7:
2d:96:c4:8d:cb:24:ec:ab:23:76:00:9c:78:62:c9:45:bd:e1:
0f:4a:4a:f1:9a:83:72:9c:dc:74:a7:ae:d0:d9:9b:55:23:df:
ab:7c:de:cd:c7:9d:31:c4:a9:a9:9d:ad:29:17:34:39:4e:f0:
7d:fb:ee:bb:6d:71:8e:c5:5e:47:3b:4e:5f:0c:66:1c:f3:12:
ce:c0:82:66:7a:2b:5b:18:40:9e:2d:bf:6f:27:84:a2:a3:29:
88:5d:a2:e1:05:a7:fe:52:cb:70:ae:25:58:40:ef:70:0e:1d:
24:a9:16:2e:1e:93:a9:7f:c3:36:15:a4:ee:77:fa:19:67:15:
b0:40:78:30:4d:f6:08:74:63:46:71:bc:74:8a:27:01:cf:d0:
9c:51:83:06:e0:e0:f8:80:38:51:5f:95:42:e8:c7:e9:b0:fd:
15:06:9b:ac:0c:b9:8f:65:8d:ad:8e:52:8d:39:1a:65:d0:ed:
7d:3d:93:cd:ec:e0:26:8b:a1:ec:a3:84:5e:7f:35:4d:f7:b4:
f5:a3:f5:92:a2:1d:39:0f:8e:5a:dc:53:8b:06:34:d7:be:e7:
8d:9f:78:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:36:17 2024 by rpki-client on console-ams.rpki-client.org