Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ISHISH/ZccAojrjkGZVLuIkKOoc_SEGtug.roa
File: ZccAojrjkGZVLuIkKOoc_SEGtug.roa (raw, json)
Hash identifier: 3Z9ur2Dir2rNyGsWh8Cq+csRbuYPmi1Be98khHa10AI=
Subject key identifier: 65:C7:00:A2:3A:E3:90:66:55:2E:E2:24:28:EA:1C:FD:21:06:B6:E8
Certificate issuer: /CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF
Certificate serial: 0183
Authority key identifier: 7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/ZccAojrjkGZVLuIkKOoc_SEGtug.roa
Signing time: Fri 01 Sep 2023 09:04:19 +0000
ROA not before: Fri 01 Sep 2023 09:04:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38047
IP address blocks: 2400:5ea0:852a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF
Validity
Not Before: Sep 1 09:04:19 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=65C700A23AE39066552EE22428EA1CFD2106B6E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:15:dc:54:3a:d9:15:17:e4:a4:bf:e4:5e:53:
e9:c5:09:74:69:76:5d:1f:00:d5:00:42:29:b7:46:
1c:1f:a6:4a:ee:c8:34:ca:c9:2e:47:92:dd:11:78:
e4:26:0b:7a:18:df:10:dc:a5:63:0e:b8:4f:ae:76:
92:be:0d:5f:c7:77:83:25:bb:7f:bf:de:bc:75:5b:
4e:c2:8a:10:b2:b1:c6:da:f4:88:ea:78:0d:8a:4d:
ef:98:2e:81:41:19:90:c9:6d:70:aa:b4:19:34:50:
d1:6e:86:8f:9d:f5:2b:d9:8a:46:38:3c:df:85:4b:
00:f3:fd:31:d8:05:05:ac:0a:21:f3:0d:23:0d:f8:
6e:77:74:c8:22:8c:fa:2e:c0:1b:0b:46:a7:ca:84:
2d:f4:26:b9:87:be:84:a5:0e:6a:69:56:50:a4:aa:
80:b0:be:e2:d7:e8:1e:36:16:7c:97:38:c9:06:f6:
0f:64:4f:b9:6f:15:5c:a7:36:e5:a5:24:fc:81:28:
e0:2c:59:e6:59:c5:26:01:f3:ba:d4:a5:97:fa:06:
6d:65:4a:e8:22:a0:42:7b:78:96:b5:fb:01:5a:23:
43:45:cc:ec:0e:e2:58:69:ca:cd:b7:33:de:0a:79:
8f:bb:33:63:f3:be:65:f9:ff:b7:b3:c4:7b:25:2a:
03:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C7:00:A2:3A:E3:90:66:55:2E:E2:24:28:EA:1C:FD:21:06:B6:E8
X509v3 Authority Key Identifier:
keyid:7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/ZccAojrjkGZVLuIkKOoc_SEGtug.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:5ea0:852a::/48
Signature Algorithm: sha256WithRSAEncryption
4b:7a:20:3b:fc:87:ad:35:3b:00:01:9e:f7:3d:9b:87:70:82:
61:00:44:bb:76:29:4f:af:99:89:75:9c:f3:db:0a:00:51:89:
a9:28:0e:fd:f4:19:04:92:54:b6:68:f3:f2:90:c1:dd:da:89:
c1:3b:d1:0c:80:d1:24:64:52:0c:0b:6d:95:5b:e6:c8:05:31:
eb:50:bd:9c:2b:51:9f:11:84:e8:e7:1b:29:9f:fa:d7:8e:be:
57:64:ea:8b:01:c2:99:91:ba:4b:41:a7:ec:88:ee:7c:95:dd:
5b:13:2c:48:f3:9e:6c:6e:20:aa:56:8c:b2:de:31:57:5d:eb:
37:df:a4:4f:77:21:ec:7e:01:c1:5e:e6:8d:99:2b:2c:e4:dd:
ea:ec:fe:83:56:06:8d:1f:9b:ac:f0:4c:db:22:20:5a:bf:df:
67:1e:7f:9d:4d:e6:c3:03:60:c5:d9:ae:7b:15:32:bd:83:5a:
50:f3:bd:81:13:65:24:19:2a:9b:95:41:20:3b:64:a2:b4:ec:
b1:dc:98:bd:4f:e6:10:c1:df:f7:44:fe:f5:4b:05:34:0a:3b:
7c:36:1b:f8:1a:33:16:ae:ce:4e:53:67:17:72:76:e7:44:8c:
ce:59:f5:04:12:4a:a7:8c:c1:4d:ae:32:69:92:19:5b:03:78:
b8:d9:7e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org