Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/J22BlhgRZmxWs5HCwkYVOTDsDpE.roa
File: J22BlhgRZmxWs5HCwkYVOTDsDpE.roa (raw, json)
Hash identifier: ffdqe2skkofWVQpv1OaSschMtB2LK4otYIMSrFCPmi8=
Subject key identifier: 27:6D:81:96:18:11:66:6C:56:B3:91:C2:C2:46:15:39:30:EC:0E:91
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0C1A
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/J22BlhgRZmxWs5HCwkYVOTDsDpE.roa
Signing time: Fri 01 Sep 2023 09:13:58 +0000
ROA not before: Fri 01 Sep 2023 09:13:58 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4780
IP address blocks: 61.61.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3098 (0xc1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 1 09:13:58 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=276D81961811666C56B391C2C246153930EC0E91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7c:bc:e5:34:d1:88:77:3d:55:78:a8:bc:02:
25:f2:1b:2f:fb:24:49:c6:16:9f:fc:b2:86:23:60:
07:bb:59:2e:0f:55:4a:a5:44:7c:60:23:36:15:50:
63:1c:a9:6d:e0:62:ed:99:81:fe:55:43:b8:eb:d5:
17:e2:fe:f1:24:78:cc:7a:3a:cc:42:4e:3c:c3:03:
c0:d3:96:98:33:29:99:ce:98:88:8d:e1:7a:b1:db:
75:94:b8:b6:37:e9:5d:33:4b:af:9c:7b:72:3d:4b:
3a:76:99:28:79:2a:77:19:51:6c:4c:21:3c:4c:08:
1b:7a:98:57:ab:ef:b7:86:20:0f:9d:7d:08:80:1d:
f9:cf:eb:42:23:6e:db:bc:7b:7e:d9:f0:52:5d:44:
15:82:aa:5e:e5:d4:5b:ea:5e:94:33:e3:89:96:26:
e1:c3:ee:46:3e:e2:b6:3a:43:cb:d1:3d:de:2a:3c:
33:91:a7:4f:ec:a3:39:14:95:ee:61:a9:fc:28:a5:
a5:d8:73:50:d2:bb:22:79:04:da:da:a1:81:48:60:
68:5a:4b:90:8f:1d:63:fc:c1:d8:e5:f2:e4:2b:8e:
3e:bf:24:63:06:4d:d0:55:50:db:87:3e:c6:6a:05:
7f:de:ad:c6:d2:71:a3:5a:3c:9a:89:a2:46:49:98:
89:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6D:81:96:18:11:66:6C:56:B3:91:C2:C2:46:15:39:30:EC:0E:91
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/J22BlhgRZmxWs5HCwkYVOTDsDpE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.128.0/18
Signature Algorithm: sha256WithRSAEncryption
38:d2:5a:83:4b:e5:8d:76:b8:28:d0:d4:90:21:12:e4:20:50:
a0:68:de:f6:eb:fd:a3:cf:f6:f2:6e:9d:e0:85:30:95:e9:85:
14:c3:2c:3c:10:95:28:12:97:b7:e8:b4:7c:24:8c:6d:68:b2:
2c:59:1e:78:15:a2:8f:33:7a:a8:a0:6e:14:e5:ba:16:6a:8d:
5c:1c:ee:a0:2e:42:cb:52:2f:e7:2f:95:45:7d:e4:39:33:74:
56:34:f2:57:b8:e3:4f:83:ae:26:5d:df:44:bd:bc:f2:b6:e6:
e6:a3:68:dc:ce:bb:00:ab:b7:27:93:4b:44:fc:a3:6b:01:66:
08:53:3b:e6:d2:42:72:08:98:07:d2:2e:72:98:7a:e7:4f:5c:
38:81:ac:d0:10:bb:bf:dd:41:1f:10:8f:88:e3:23:dd:9b:60:
8c:d7:21:96:12:d9:fe:14:98:e9:d0:7a:b5:e8:b0:b5:0b:71:
9a:9f:86:41:dc:4c:c0:5d:20:5f:7b:4e:08:68:3f:c2:0b:96:
a6:c3:d0:d7:b9:50:92:f2:86:53:ac:ed:4d:ae:e9:6d:27:d1:
be:f7:67:8e:55:c9:73:5d:ed:c8:97:0e:d3:e4:52:dd:1b:52:
ec:68:20:f6:28:e9:bd:0c:c6:34:40:2a:c9:be:e1:b9:f9:bd:
a4:75:0b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:21 2024 by rpki-client on console-fra.rpki-client.org