Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/IO-A_tOdRJjCTRJkZjBHeSJEMW0.roa
File: IO-A_tOdRJjCTRJkZjBHeSJEMW0.roa (raw, json)
Hash identifier: Ftix0Whrck6gR5JBHrrCCfym/G28exyjfIdGETZ3RBg=
Subject key identifier: 20:EF:80:FE:D3:9D:44:98:C2:4D:12:64:66:30:47:79:22:44:31:6D
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0C11
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/IO-A_tOdRJjCTRJkZjBHeSJEMW0.roa
Signing time: Fri 01 Sep 2023 09:13:56 +0000
ROA not before: Fri 01 Sep 2023 09:13:56 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9922
IP address blocks: 61.61.4.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3089 (0xc11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 1 09:13:56 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=20EF80FED39D4498C24D1264663047792244316D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:2c:3e:ab:be:11:fe:35:2e:05:49:61:1a:
ea:ef:01:36:25:a5:67:8e:ff:70:b4:ed:8c:46:24:
36:0b:3d:98:b6:63:9c:2c:2e:56:35:27:a2:37:0b:
f3:ba:54:99:46:49:2c:ed:a1:bc:1f:0f:3e:16:fb:
1f:cd:bf:18:95:8a:39:23:be:22:d2:33:ca:79:8d:
2f:da:2f:55:4b:4d:d2:1c:f8:80:9e:fa:2f:ea:fb:
8d:96:95:d1:d7:7e:d0:1c:d3:61:10:7b:d8:b5:32:
a0:f6:f7:f4:08:c0:c2:0f:9c:98:14:71:9c:a1:e6:
52:1f:55:97:56:33:d2:c0:0d:e4:20:0a:60:de:bb:
19:6c:a3:f2:86:b8:c4:56:c4:f4:34:c3:2d:ff:43:
4e:ae:c2:c6:be:0e:03:f6:ae:27:3e:05:96:51:30:
f8:10:cc:23:9c:a0:cb:d2:64:f2:1b:91:dd:4b:1a:
11:71:7d:86:6a:0f:ca:c9:e2:ec:64:c3:b7:af:ba:
3a:28:36:4e:a1:eb:30:66:1b:e5:36:5b:ea:7f:7a:
96:f1:d2:05:69:43:15:a9:c5:e7:a7:3b:fb:8c:80:
3a:03:b9:0f:1f:f8:17:0f:7a:78:a2:1a:41:d0:88:
1e:2a:a6:47:21:e9:b2:9b:19:09:b4:ea:6f:28:ee:
79:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EF:80:FE:D3:9D:44:98:C2:4D:12:64:66:30:47:79:22:44:31:6D
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/IO-A_tOdRJjCTRJkZjBHeSJEMW0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.4.0/23
Signature Algorithm: sha256WithRSAEncryption
24:6b:b5:10:de:b9:8e:3b:19:3a:29:5c:5f:36:27:b5:31:1c:
2e:4c:02:48:a8:28:57:e6:db:42:47:9d:5f:63:b2:c2:a6:83:
55:ac:3c:07:07:92:d7:98:e1:55:76:90:66:13:ea:09:f9:37:
00:22:b2:a5:ad:7d:91:2b:5f:ef:95:13:81:20:1a:7f:92:36:
93:68:16:49:24:ba:7c:2d:ea:24:0e:cc:e1:5d:4e:85:52:b9:
10:2f:c3:85:bf:de:a0:63:36:31:04:43:5e:38:e0:82:dc:8d:
ae:93:b9:1f:b4:ad:fc:80:9e:09:10:e4:3d:ee:74:27:10:05:
87:a2:c4:3c:99:09:0e:a2:e1:a3:43:0c:3c:9d:4c:36:2e:99:
56:37:92:9e:01:41:c3:7a:fa:d7:96:f8:2e:ab:f1:92:7a:bf:
30:3e:ab:94:16:bf:23:8c:62:64:42:af:06:71:a4:e8:78:14:
c6:4e:0f:ad:e3:7b:16:10:6a:28:5b:0a:e9:f3:8c:19:5b:cf:
b9:9a:80:c6:e8:e7:6a:ec:23:d2:55:bb:29:a4:44:5d:7f:d7:
fd:64:9f:0b:b1:70:8c:42:f4:0e:65:ef:b8:8e:18:6e:e4:31:
a9:65:7c:e4:27:9b:cb:55:f2:db:47:fd:c1:ef:92:5d:b6:22:
b0:2c:cd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org