Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ISHISH/XecLnOSyCA0iVKVhXDpVihvdBrE.roa
File: XecLnOSyCA0iVKVhXDpVihvdBrE.roa (raw, json)
Hash identifier: aDRL707B4JeaxOHe8i60BxhaGQhY/giaROg2shS81po=
Subject key identifier: 5D:E7:0B:9C:E4:B2:08:0D:22:54:A5:61:5C:3A:55:8A:1B:DD:06:B1
Certificate issuer: /CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF
Certificate serial: 0185
Authority key identifier: 7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/XecLnOSyCA0iVKVhXDpVihvdBrE.roa
Signing time: Fri 01 Sep 2023 09:04:20 +0000
ROA not before: Fri 01 Sep 2023 09:04:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38047
IP address blocks: 2400:5ea0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF
Validity
Not Before: Sep 1 09:04:20 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5DE70B9CE4B2080D2254A5615C3A558A1BDD06B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:7a:84:a8:41:3d:ce:04:25:61:f9:5c:84:
32:11:8d:47:e6:75:42:86:db:0c:bf:7a:69:6d:47:
5c:63:b8:32:e2:57:c9:08:d1:dc:12:2b:93:ac:6c:
b3:ab:66:88:68:9a:bf:0d:24:2b:5f:d7:c3:a4:dc:
b2:b3:f2:55:ac:16:e4:89:87:63:5c:35:29:f4:0e:
fd:27:b7:c3:20:43:91:2b:ee:49:6b:2c:d7:a9:c7:
72:d5:af:eb:42:29:d2:57:5b:4d:0e:26:2a:a6:48:
f8:3b:91:8b:f1:01:b6:2a:80:69:d1:2d:60:93:08:
12:ee:89:a1:6e:d4:29:a4:75:3e:60:d4:02:6a:50:
17:fa:7e:f1:d7:ab:d6:fc:46:2f:02:1e:47:d6:93:
00:ac:e4:91:b1:69:3f:d8:da:3f:26:10:b5:f1:32:
a0:40:dc:72:3d:1e:82:6a:cc:4f:74:df:a3:74:f1:
7d:f9:b4:ee:80:d3:cb:62:da:7c:6b:f5:87:47:8e:
f8:54:ed:98:ef:f3:48:72:4c:84:c9:da:94:73:85:
5a:b2:4f:d2:77:59:0a:26:c1:2c:69:8f:7f:a7:8b:
94:dd:a1:03:12:5a:88:e5:c2:a2:c0:e8:df:04:f8:
30:fe:72:95:53:07:ce:42:27:4c:62:5d:5b:b9:1a:
64:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E7:0B:9C:E4:B2:08:0D:22:54:A5:61:5C:3A:55:8A:1B:DD:06:B1
X509v3 Authority Key Identifier:
keyid:7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/XecLnOSyCA0iVKVhXDpVihvdBrE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:5ea0::/32
Signature Algorithm: sha256WithRSAEncryption
21:96:c8:e0:0f:eb:72:48:b8:c4:8c:0b:e6:4e:7a:a4:aa:93:
ba:c0:35:02:00:02:b3:06:af:d9:15:b9:49:43:fc:87:aa:23:
a4:e9:27:c1:51:48:f9:8d:d0:f9:6f:3c:5e:0f:ac:f5:61:27:
8c:db:4a:d3:47:1c:0b:33:e2:b0:1f:7a:e7:08:43:82:0f:97:
2d:d2:9c:3e:79:16:dd:4c:53:61:1c:6a:98:15:e4:c3:5e:57:
42:0a:d8:78:8c:29:31:7f:fb:30:a5:53:5e:a0:fa:11:8e:fc:
01:b7:e2:ad:29:98:26:96:05:33:eb:c8:83:95:21:b0:0f:5c:
21:5d:93:72:df:d7:08:84:88:ee:1b:35:a2:df:02:48:48:cd:
c2:3f:6a:82:fb:c4:b4:9f:bd:c4:ae:bb:6c:4e:bc:c6:48:f2:
3b:42:50:75:50:fb:7b:e0:13:52:8f:72:4b:38:cb:64:0e:23:
db:c2:5a:ab:b4:8f:b7:5e:09:9c:fa:f0:84:a5:db:00:f8:9f:
f3:67:5f:54:4c:d6:ac:f4:3e:01:07:9f:36:cb:e0:f3:38:52:
de:14:33:40:97:c6:1c:03:59:1c:c1:19:ee:74:a3:50:ae:ac:
2e:07:56:85:0c:0e:65:e6:93:5c:a6:5b:b0:a1:2c:c4:7b:b9:
3f:f8:cd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org