Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/Gf7lqcdzL6bBjT_33vcSXL9rHOk.roa
File: Gf7lqcdzL6bBjT_33vcSXL9rHOk.roa (raw, json)
Hash identifier: eONH9h5x2yrlT4PwEF4qT70PKs48oGtJibDEeQL/zDY=
Subject key identifier: 19:FE:E5:A9:C7:73:2F:A6:C1:8D:3F:F7:DE:F7:12:5C:BF:6B:1C:E9
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0C23
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/Gf7lqcdzL6bBjT_33vcSXL9rHOk.roa
Signing time: Fri 01 Sep 2023 09:14:02 +0000
ROA not before: Fri 01 Sep 2023 09:14:02 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9922
IP address blocks: 61.61.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3107 (0xc23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 1 09:14:02 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=19FEE5A9C7732FA6C18D3FF7DEF7125CBF6B1CE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:81:4c:c4:13:de:3a:5a:1d:ed:f5:84:01:5e:
47:5c:78:55:57:92:93:6d:4c:b5:37:1d:a0:96:f2:
24:b9:89:f7:f1:83:3c:03:b2:5a:8d:e3:f6:e1:26:
da:ee:1b:c8:2e:5d:5b:4a:2d:3e:a0:b5:49:a8:80:
76:09:e1:9a:d4:f3:66:0c:df:fa:b6:81:eb:e7:74:
d4:6d:5b:ab:bb:86:95:68:ce:2d:1c:d9:60:d1:1b:
27:37:42:4a:94:9f:4b:30:a5:d8:f7:7f:90:01:55:
41:a6:ae:08:96:44:ca:e0:89:e3:ca:81:f7:d9:2c:
d7:3e:26:0a:23:ec:6f:c2:27:8b:59:3d:5e:34:63:
6a:ac:19:cf:b7:18:02:57:dd:03:d7:87:e9:d2:d9:
97:4e:96:90:9b:a3:3d:ab:2a:4c:d8:4f:70:47:e8:
08:85:b5:fd:34:bd:8b:64:53:d2:60:a6:90:80:18:
5a:52:5f:fc:cb:de:69:eb:15:da:0a:cc:11:22:52:
32:45:62:fe:2e:8d:8c:c1:99:cd:f7:76:ea:90:2a:
d7:66:41:e4:1f:97:1c:fb:6b:9c:1c:df:35:3b:8d:
c6:d5:17:94:03:93:c1:cd:74:af:59:c8:96:41:9e:
46:66:24:a7:5a:04:43:fa:7d:3d:ba:9c:93:7c:39:
2e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FE:E5:A9:C7:73:2F:A6:C1:8D:3F:F7:DE:F7:12:5C:BF:6B:1C:E9
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/Gf7lqcdzL6bBjT_33vcSXL9rHOk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.164.0/22
Signature Algorithm: sha256WithRSAEncryption
52:0d:96:57:42:b7:a3:e9:d0:bf:d1:53:13:4c:64:0a:6f:1d:
96:7d:1a:bd:b2:d2:df:6e:59:ac:63:0a:a8:11:1a:02:d0:a0:
30:2b:28:a8:68:d2:75:84:cf:0d:d9:b1:c4:da:4f:9d:ad:e0:
57:ab:da:76:28:77:c9:0c:18:07:2c:30:28:12:a1:9a:7d:88:
8b:7c:72:1b:31:1a:5e:55:66:ca:58:69:36:2d:a3:d9:ae:1a:
a3:e7:5d:b6:1d:e6:7f:07:78:64:8f:bf:74:97:d2:25:8b:d5:
96:55:56:14:54:3d:f9:b9:9b:3e:04:70:af:1b:0d:37:9e:cc:
31:20:1a:54:14:9c:53:59:e8:b2:36:25:85:98:86:b6:ed:cd:
7a:65:d9:af:e5:82:b0:c6:d0:3f:bd:2b:35:d7:43:a7:c5:52:
6a:ab:dc:3f:e4:82:7b:f1:3f:78:5c:05:4e:11:6a:d9:42:6c:
90:ab:24:c4:bd:22:a7:96:0a:70:a0:69:6d:95:e4:60:5a:47:
90:27:8d:df:b6:54:fe:a1:05:a2:26:12:d4:f9:ca:04:ec:58:
4a:70:0e:47:8f:e7:18:c2:97:04:d9:7a:be:30:8d:70:60:c0:
20:82:bf:33:4e:40:51:4a:3e:38:e5:54:83:7e:b7:1b:14:4b:
7b:bc:ff:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:21 2024 by rpki-client on console-fra.rpki-client.org