Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/lJTmzZKynbKYwbaxaAXJUty_eIw.roa
File: lJTmzZKynbKYwbaxaAXJUty_eIw.roa (raw, json)
Hash identifier: /UGT3yWbLR8GlcTP7qR3U0XF5dPQekbqVgPdawzMO10=
Subject key identifier: 94:94:E6:CD:92:B2:9D:B2:98:C1:B6:B1:68:05:C9:52:DC:BF:78:8C
Certificate issuer: /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Certificate serial: 0BA7
Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/lJTmzZKynbKYwbaxaAXJUty_eIw.roa
Signing time: Fri 01 Sep 2023 09:11:32 +0000
ROA not before: Fri 01 Sep 2023 09:11:32 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18042
IP address blocks: 61.63.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2983 (0xba7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Validity
Not Before: Sep 1 09:11:32 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9494E6CD92B29DB298C1B6B16805C952DCBF788C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ef:7d:e7:e7:94:64:cb:33:50:f4:ba:3a:07:
c4:ee:2e:f6:29:bd:98:81:a3:b6:ff:e1:3f:f5:eb:
7b:70:51:c1:83:8d:05:a3:45:2c:7c:b2:e4:51:1f:
ca:3d:6e:dd:ce:a5:38:13:a2:65:ad:b2:86:28:6c:
18:78:25:5d:ce:86:80:ce:b3:10:1a:fb:82:b0:ec:
f6:45:7a:a8:f3:9d:75:64:cf:a5:65:57:5a:f2:d2:
06:c9:5e:e5:a2:5a:b7:24:d2:c1:e9:d2:f9:3f:59:
a4:6e:ca:3f:79:49:c1:ec:72:7e:fa:bd:3b:ab:8f:
66:29:3e:e1:ab:78:b6:6e:69:3c:21:0b:99:f7:5f:
3d:1b:62:de:de:bf:4e:b7:5e:4c:92:ee:f9:42:75:
4c:36:a8:ed:53:54:31:cf:0c:6c:6e:03:90:6b:7a:
41:d9:25:07:3f:b3:b0:f9:e8:df:cf:d1:cc:73:af:
6f:c0:7d:f7:91:61:3b:24:93:d7:50:5e:7a:53:01:
c5:ef:c1:51:1b:59:48:dd:a0:50:f6:45:4f:ac:a3:
38:03:30:cd:a6:ff:34:8c:6a:23:93:9f:06:9a:6a:
ab:49:b4:a5:2d:50:d3:8d:c1:f2:56:14:90:7f:71:
8f:e3:91:88:e0:7b:40:5c:ca:44:5b:fa:1e:46:d7:
99:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:94:E6:CD:92:B2:9D:B2:98:C1:B6:B1:68:05:C9:52:DC:BF:78:8C
X509v3 Authority Key Identifier:
keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/lJTmzZKynbKYwbaxaAXJUty_eIw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.63.0.0/19
Signature Algorithm: sha256WithRSAEncryption
c0:57:3c:7e:de:ca:ae:ae:d4:c0:8d:ea:4e:83:9b:55:77:43:
5b:2e:1c:ee:4c:ff:03:c3:30:9d:86:e0:96:ac:4b:d7:f9:cc:
c9:53:07:49:04:ed:10:3d:99:33:d1:9a:cb:ba:01:f9:cb:ca:
c7:da:1f:7d:52:11:4b:0c:ca:ad:d8:8a:c0:78:33:16:7c:5a:
1c:4c:35:1a:fe:a9:92:21:96:1d:da:51:8c:dd:b8:d7:e8:7f:
0e:dc:20:96:ef:15:72:5a:4c:fb:08:e6:13:b9:a2:13:6c:6e:
6e:3e:44:24:25:f8:59:a0:15:49:d8:8e:f8:2b:73:c1:9e:c6:
ec:0b:c0:61:93:7d:99:5c:92:16:80:35:a2:cc:53:67:3a:30:
63:ed:85:9d:91:e9:96:75:c5:bc:ae:a2:54:a9:16:48:6d:dc:
ec:e9:65:5f:44:92:90:48:0e:50:f5:14:82:6a:e8:58:1e:8b:
f6:21:94:39:88:dc:ef:9b:ea:fd:a5:96:63:a3:a5:58:2c:df:
c8:99:d4:91:9b:3d:2a:f5:fb:0a:c8:8b:5a:76:2b:95:0b:27:
bf:39:7d:de:ed:a4:4e:fc:8a:4f:f8:7f:60:6e:bf:b7:ce:e2:
db:d1:22:1c:73:c9:c9:10:9d:15:3f:44:21:32:57:f0:24:0e:
a4:3e:fd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org