Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/NLZuxWPiW5CV-JzeTSFCRK_-0ow.roa
File: NLZuxWPiW5CV-JzeTSFCRK_-0ow.roa (raw, json)
Hash identifier: A1qNrh1A8Z5cvDsskYEMXT5RZrJaMGYOsT2eKmCUmQg=
Subject key identifier: 34:B6:6E:C5:63:E2:5B:90:95:F8:9C:DE:4D:21:42:44:AF:FE:D2:8C
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0C2B
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/NLZuxWPiW5CV-JzeTSFCRK_-0ow.roa
Signing time: Fri 01 Sep 2023 09:14:03 +0000
ROA not before: Fri 01 Sep 2023 09:14:03 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18049
IP address blocks: 61.61.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3115 (0xc2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 1 09:14:03 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=34B66EC563E25B9095F89CDE4D214244AFFED28C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:17:e2:4c:fe:06:4c:94:5d:86:ab:77:28:4d:
33:a0:0f:7c:f3:e1:75:35:02:eb:c8:45:76:39:38:
ee:09:ef:83:7a:c5:25:fb:c8:f8:54:6c:d7:9e:bd:
ea:3d:1f:69:b3:84:51:86:84:1b:22:52:5c:67:da:
7f:a7:4d:ca:ad:e1:ed:65:20:4a:78:a7:35:48:a4:
b9:a8:33:4b:85:23:cf:e1:41:8f:95:7b:9a:94:03:
a4:7d:96:c1:cc:0d:2c:c5:32:0b:8a:19:75:61:0d:
6f:bc:f0:4f:c0:0d:e6:b1:8c:13:f7:dc:60:31:c6:
48:62:ca:18:db:33:52:0c:57:f2:03:30:d8:10:5f:
a1:c7:7d:4a:fc:bb:31:07:a2:97:58:46:2c:2e:56:
b9:66:d3:d6:8c:de:8a:93:b5:73:d8:b0:57:f0:0f:
97:f4:67:1d:5d:36:f8:af:9a:ef:04:2d:8d:4f:07:
14:b4:53:b9:99:2b:5b:15:7b:9d:50:6b:07:24:d7:
43:38:84:13:e8:a7:80:55:16:11:ba:49:ef:f6:4d:
7a:13:5b:2c:2d:27:dc:4a:c2:83:60:be:2c:15:24:
34:29:da:4a:a5:64:9a:f8:65:20:69:b2:64:41:48:
33:17:51:52:8c:c5:29:31:de:ac:0c:21:15:98:73:
2a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B6:6E:C5:63:E2:5B:90:95:F8:9C:DE:4D:21:42:44:AF:FE:D2:8C
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/NLZuxWPiW5CV-JzeTSFCRK_-0ow.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.72.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:6a:86:aa:0f:d0:90:09:a6:ab:4f:2d:e0:59:b0:c8:9a:99:
cc:78:be:fa:78:34:cd:e3:46:b0:f6:0b:67:e3:fb:70:72:37:
d7:b1:12:1b:91:88:91:10:be:ff:51:08:e5:43:c2:8a:0b:1e:
ed:1f:54:e8:9b:8f:31:b9:cc:5d:ea:3b:8f:d5:98:60:a9:cb:
23:e5:66:eb:d3:2a:7f:ae:35:91:09:0d:fa:f4:ec:36:cc:f2:
c7:06:af:cc:c7:30:8e:f3:7e:e8:7a:56:59:fd:59:35:91:5d:
9c:46:53:02:04:98:b6:6b:06:08:34:2a:fb:0c:9b:96:52:1d:
46:bb:cd:16:d1:c2:83:4f:85:23:4d:90:b3:22:c1:60:46:c0:
e6:2a:e5:02:1e:4f:c6:14:56:cd:21:52:f3:b3:f4:2f:b7:f1:
48:ab:9e:d4:5d:d8:62:8f:73:62:6d:71:c1:7c:6e:d8:f7:e8:
99:87:24:03:e7:a5:1e:a0:be:fc:5f:7c:f7:f2:b5:76:78:3a:
25:70:78:2d:6c:76:01:24:12:82:3c:3b:80:a1:08:25:8a:7c:
94:ee:87:bc:e4:16:1e:04:1f:fe:fe:9c:3f:1c:af:ad:4c:8d:
22:ed:eb:d4:3e:2f:2e:c5:01:db:07:48:ca:9a:cd:d4:cf:fc:
be:10:b7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:21 2024 by rpki-client on console-fra.rpki-client.org