Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/4Ts2pIyX81jErYet392Enip_tuE.roa
File: 4Ts2pIyX81jErYet392Enip_tuE.roa (raw, json)
Hash identifier: e4Co8RjptHtAI7tNkYI7KaFx+jvfbzYP8j/sihTjpUg=
Subject key identifier: E1:3B:36:A4:8C:97:F3:58:C4:AD:87:AD:DF:DD:84:9E:2A:7F:B6:E1
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0C28
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/4Ts2pIyX81jErYet392Enip_tuE.roa
Signing time: Fri 01 Sep 2023 09:14:02 +0000
ROA not before: Fri 01 Sep 2023 09:14:02 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9922
IP address blocks: 61.61.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3112 (0xc28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 1 09:14:02 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E13B36A48C97F358C4AD87ADDFDD849E2A7FB6E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0b:91:8b:ce:ec:d5:1a:4e:33:21:62:a8:a7:
93:e2:15:1f:44:43:ae:45:82:fe:8e:74:a0:fd:3f:
f5:93:f7:89:3b:13:ba:e5:6f:63:d6:fa:d7:70:0a:
ed:16:18:c5:06:9b:e2:d2:e6:04:63:54:2c:75:c8:
fa:28:5a:7f:22:23:cc:9e:d8:a4:c6:90:e0:0f:1d:
bd:7d:d3:69:e7:b0:1a:11:96:33:eb:6c:54:d7:0b:
5d:32:81:11:76:74:88:a3:48:bf:4a:20:0f:e5:a1:
ac:0e:32:80:87:0c:d8:7d:b3:59:29:bc:38:57:c5:
c1:14:cb:05:e5:62:04:32:c9:6a:ca:5d:d9:c9:10:
5a:ef:79:d7:d3:4c:64:89:9e:a2:84:74:8c:84:c1:
32:41:94:fb:ad:ea:73:d7:0c:8a:43:7c:41:d6:4d:
93:d8:07:6d:9b:7a:3d:96:46:e9:7d:cb:a4:cb:4f:
46:3c:90:1f:1c:a8:28:33:76:3a:25:1a:36:64:da:
5f:d0:2e:47:0d:ce:4b:99:a4:f8:7f:cc:39:f7:d3:
2e:5f:db:70:a7:88:82:fa:da:72:b4:87:fe:60:41:
dc:31:b9:2c:e5:42:59:da:b4:94:30:70:38:37:9c:
ca:4b:d5:c1:c8:d9:4b:36:60:49:d3:3c:37:c9:38:
b1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3B:36:A4:8C:97:F3:58:C4:AD:87:AD:DF:DD:84:9E:2A:7F:B6:E1
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/4Ts2pIyX81jErYet392Enip_tuE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.76.0/22
Signature Algorithm: sha256WithRSAEncryption
69:18:1c:91:24:e4:1a:9f:3e:0d:ed:c6:bf:0b:1a:87:65:25:
c9:eb:9d:cf:2b:e5:dd:cc:1c:04:7e:e5:8e:57:48:5d:b4:8e:
46:0b:40:4e:7d:22:64:a0:7d:2b:4c:fd:8e:0d:9a:f4:87:4b:
56:b2:f6:1b:b0:c5:be:f1:73:09:9f:84:9a:5e:4c:a3:63:54:
f5:56:58:e4:12:2c:d3:c3:f9:54:50:3d:62:29:27:1d:5b:2e:
40:da:21:7d:92:09:ea:bb:93:ea:81:82:69:37:bf:3e:ac:c7:
4f:5b:e9:a3:a9:37:3a:c2:18:8e:db:f0:29:bb:cc:99:ba:cb:
42:44:2b:6e:c0:cd:05:36:cc:59:b8:ca:93:f6:9c:37:67:bf:
b3:f5:ea:74:3f:46:8f:ea:cb:29:e1:fd:a4:52:eb:ac:7a:fa:
79:58:11:21:ba:bb:29:35:5e:a3:17:db:28:53:9a:de:42:04:
9f:b2:e2:e9:5e:df:af:15:f3:b1:7c:f1:71:11:66:14:43:93:
34:cc:aa:dd:f3:18:0d:e4:40:74:a5:5c:79:21:a4:cc:6f:f2:
38:5b:58:7d:13:2a:61:f8:48:40:ad:76:f9:13:4c:c6:c7:ac:
15:50:c2:29:03:d6:9a:96:24:50:f7:8e:8a:b6:cc:09:5b:96:
50:a4:a9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org