Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IPV6PO/j9Lfa8cUGkWc0NX791q-stIPEDs.roa
File: j9Lfa8cUGkWc0NX791q-stIPEDs.roa (raw, json)
Hash identifier: A3/Lrd65sM0MRF8F4Umshiw8yqgJ680o/3BW8PVU8eY=
Subject key identifier: 8F:D2:DF:6B:C7:14:1A:45:9C:D0:D5:FB:F7:5A:BE:B2:D2:0F:10:3B
Certificate issuer: /CN=931FFD22F0D53451D2C91569196A8973A767F8EE
Certificate serial: 03
Authority key identifier: 93:1F:FD:22:F0:D5:34:51:D2:C9:15:69:19:6A:89:73:A7:67:F8:EE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/kx_9IvDVNFHSyRVpGWqJc6dn-O4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IPV6PO/j9Lfa8cUGkWc0NX791q-stIPEDs.roa
Signing time: Thu 28 Dec 2023 08:37:41 +0000
ROA not before: Thu 28 Dec 2023 08:37:41 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18180
IP address blocks: 119.75.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931FFD22F0D53451D2C91569196A8973A767F8EE
Validity
Not Before: Dec 28 08:37:41 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8FD2DF6BC7141A459CD0D5FBF75ABEB2D20F103B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:a6:c8:4a:b9:d0:15:df:84:1c:db:cb:13:
f9:5f:b7:59:30:1a:85:06:86:3b:13:18:81:40:01:
b9:4c:68:2d:81:67:4a:cc:52:8e:8e:52:0e:1b:d5:
6f:9f:a4:fd:c3:bd:82:21:16:9c:ef:e9:aa:90:19:
ae:34:62:d2:ba:97:d0:05:25:be:19:75:12:fc:4c:
df:cc:82:1a:b5:82:0d:c4:6e:a8:bd:80:ae:64:e1:
8c:27:9b:98:13:8b:6d:d1:89:7f:0c:9c:0b:41:c8:
54:1e:b4:ec:f9:28:33:a3:8b:e7:ce:a6:88:b4:b3:
01:e9:1b:35:ce:66:1d:b3:bd:9f:0f:52:6b:8c:3f:
4f:a8:4d:80:b9:28:48:db:bb:9c:63:a7:43:81:a4:
23:7d:9c:e2:b3:81:9f:61:38:44:74:2d:fa:f4:a3:
f6:2d:49:cd:df:71:d8:14:0c:86:91:b3:38:dd:29:
d6:1b:52:61:d3:f9:2e:78:00:50:a9:c8:95:20:b3:
47:35:ae:93:be:65:f0:1b:7a:10:22:dd:c6:fe:48:
60:4d:91:63:44:8d:36:fe:08:9a:f9:f5:4e:87:8d:
8d:de:92:b6:18:bd:ed:06:b6:26:1d:84:cd:2f:a6:
12:2c:27:66:e3:f7:c5:3f:9e:a1:1c:65:82:1e:a4:
2d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D2:DF:6B:C7:14:1A:45:9C:D0:D5:FB:F7:5A:BE:B2:D2:0F:10:3B
X509v3 Authority Key Identifier:
keyid:93:1F:FD:22:F0:D5:34:51:D2:C9:15:69:19:6A:89:73:A7:67:F8:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IPV6PO/kx_9IvDVNFHSyRVpGWqJc6dn-O4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kx_9IvDVNFHSyRVpGWqJc6dn-O4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IPV6PO/j9Lfa8cUGkWc0NX791q-stIPEDs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.75.245.0/24
Signature Algorithm: sha256WithRSAEncryption
53:59:4e:31:45:c3:b5:41:f8:08:08:b5:0f:3f:29:0d:bf:3f:
ab:6f:de:8a:5b:e7:3c:46:be:fe:44:83:9c:20:ff:77:3a:c2:
31:84:46:b6:98:da:c9:03:d5:c0:35:a5:80:13:c9:91:d4:06:
29:ec:a4:d7:35:64:8b:00:0d:13:c1:c0:7c:bb:7b:69:ab:60:
a0:85:ec:5b:03:ec:a4:96:1d:49:36:7f:f0:64:14:ec:91:ca:
9e:ea:00:69:52:8d:c6:fe:8d:46:07:88:df:5a:81:8b:d3:c9:
30:12:22:27:94:a9:d7:6f:ec:66:b0:72:2f:17:fb:b7:a9:95:
59:ef:a5:dc:03:42:36:46:e3:16:f1:8d:97:a2:5a:f1:07:ec:
47:08:0d:6b:e6:65:dd:0f:df:2a:88:ad:ed:ff:17:d9:74:e9:
db:ac:26:a1:15:15:97:9f:37:9f:fe:ca:a1:7c:64:27:e6:3f:
dc:e4:cd:44:31:e1:05:5e:94:7a:8d:42:73:32:8b:26:b9:bd:
39:d0:46:d2:f3:4d:5b:f2:23:17:e7:10:4d:10:dc:8c:8a:84:
00:47:12:49:d0:10:ef:04:f6:47:c3:59:32:23:84:c7:ea:7f:
35:1a:20:ad:8f:5d:eb:73:3b:f4:1c:ad:ba:57:17:1f:cf:d1:
4f:e6:6d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org