Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/GCDUWO21ZYoMbYJMdtAb2r0BSR8.roa
File: GCDUWO21ZYoMbYJMdtAb2r0BSR8.roa (raw, json)
Hash identifier: kaMXjS/SRaOVi0C/92360sHRBoapwnNHrQor4AqwrkU=
Subject key identifier: 18:20:D4:58:ED:B5:65:8A:0C:6D:82:4C:76:D0:1B:DA:BD:01:49:1F
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0C16
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/GCDUWO21ZYoMbYJMdtAb2r0BSR8.roa
Signing time: Fri 01 Sep 2023 09:13:57 +0000
ROA not before: Fri 01 Sep 2023 09:13:57 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9919
IP address blocks: 61.61.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3094 (0xc16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 1 09:13:57 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1820D458EDB5658A0C6D824C76D01BDABD01491F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4e:17:fc:20:67:92:f4:56:8a:b8:7c:d6:f7:
e6:c7:a8:a9:e6:6b:81:89:ab:8a:0b:32:0a:9b:4e:
ad:44:05:22:3b:18:bf:98:f1:85:eb:e1:de:dd:72:
18:8f:11:a5:81:e8:b3:9f:2a:c6:39:c6:0e:c6:cb:
82:d8:d6:a7:91:c1:ac:a0:73:b8:7d:9f:1a:ea:fa:
d4:2d:94:19:2a:34:39:d1:b4:c6:88:67:75:81:18:
1c:41:32:10:49:d4:89:d5:8b:f8:a7:ec:18:a9:43:
0b:06:82:6f:da:f7:91:28:43:1e:a8:d0:e0:47:c5:
d6:a1:e4:70:bb:de:3c:ad:90:19:b3:31:47:05:19:
37:23:b7:bf:2d:eb:42:ac:ef:91:7b:c1:89:78:a0:
a5:eb:88:8a:1b:17:f9:05:92:69:6f:f6:98:d4:b0:
99:cc:2b:0a:15:f4:c8:af:75:5e:6f:ec:9f:67:75:
88:66:52:7b:ab:a5:2e:a4:bf:39:18:78:79:d4:9a:
59:cb:35:3d:48:ee:ef:20:db:24:32:bc:af:c9:3f:
e2:86:4a:42:28:3a:e9:20:38:c3:0b:c4:f1:4d:95:
6b:cb:2e:fb:18:f9:aa:31:b1:07:25:f0:35:0a:2c:
a8:1e:2e:da:e4:44:d0:9e:ec:a2:43:02:40:8b:44:
17:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:20:D4:58:ED:B5:65:8A:0C:6D:82:4C:76:D0:1B:DA:BD:01:49:1F
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/GCDUWO21ZYoMbYJMdtAb2r0BSR8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.48.0/24
Signature Algorithm: sha256WithRSAEncryption
68:c4:61:62:b8:f8:ff:74:fe:ff:75:7e:08:71:98:a4:e8:16:
c1:a2:f0:c3:d4:88:78:4c:36:d8:a9:ea:9f:0e:80:ef:0f:3d:
e8:3b:f6:27:3a:e1:24:ea:0c:1f:49:53:52:f3:87:ee:31:54:
e2:22:05:41:be:ac:40:f2:b3:d4:8c:d1:39:92:ae:67:5e:af:
09:b4:48:ea:f8:46:c8:01:5d:70:5e:d1:9b:cd:4e:c6:0d:6f:
ce:f6:c1:41:92:93:38:1c:09:21:45:16:32:87:3e:47:1c:68:
5c:f2:4a:21:16:51:10:39:b8:d4:5f:12:1f:b4:5a:18:6b:9f:
fe:83:66:cf:e3:22:c6:e6:04:a3:19:77:53:64:33:31:71:75:
43:6c:00:3b:63:e9:2f:31:5b:e4:5c:04:fd:33:a2:c8:36:fa:
46:a3:95:35:de:0e:3d:2f:c4:b2:48:4e:b3:9e:fa:66:e6:44:
ad:03:8d:1f:66:32:79:5b:d9:d0:6f:8a:93:af:fb:db:f1:1f:
de:0f:61:83:6f:3d:bc:e5:0e:56:30:dd:62:d3:a7:4c:7e:c1:
df:4e:67:07:70:42:61:3a:e4:58:47:14:7a:81:84:7f:79:c1:
74:f7:bc:97:a5:01:cc:52:8b:c7:09:7f:03:87:d9:51:96:c8:
90:ee:8c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:21 2024 by rpki-client on console-fra.rpki-client.org