Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/WFNWwB5MvYydfeOCBQfmvai5T1U.roa
File: WFNWwB5MvYydfeOCBQfmvai5T1U.roa (raw, json)
Hash identifier: o8QEj1jQ9zBAiPoOcWjbUzm+5BhAn1w1tht0pg6+o5s=
Subject key identifier: 58:53:56:C0:1E:4C:BD:8C:9D:7D:E3:82:05:07:E6:BD:A8:B9:4F:55
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0C12
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/WFNWwB5MvYydfeOCBQfmvai5T1U.roa
Signing time: Fri 01 Sep 2023 09:13:56 +0000
ROA not before: Fri 01 Sep 2023 09:13:56 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131627
IP address blocks: 61.61.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3090 (0xc12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 1 09:13:56 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=585356C01E4CBD8C9D7DE3820507E6BDA8B94F55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ce:2b:01:ca:1d:11:37:ae:94:43:d1:78:6e:
6b:13:0b:ff:3f:b4:cd:f3:f6:f7:1f:2e:49:97:6d:
68:8d:0a:93:9f:e4:5b:0e:70:d9:8c:5a:d0:9a:3c:
85:36:8d:23:8b:c3:a2:24:09:83:f9:b1:cb:f1:bc:
26:e2:27:cb:54:12:9a:a1:19:68:a6:6a:54:98:bc:
0a:50:23:2f:34:5e:96:6e:16:5b:74:b2:d1:69:cb:
9c:39:4b:43:3b:0f:00:d8:d2:52:89:5b:4e:ff:77:
87:ad:24:2d:18:8c:1e:c4:ed:3d:19:b9:da:21:b6:
7a:35:8c:ba:37:c7:09:a5:fc:72:67:ff:1d:62:ff:
2a:f4:f3:31:8c:a8:d1:0f:a1:03:4d:38:da:7d:26:
f0:36:12:ba:53:ce:6a:66:fc:9a:4b:e7:e7:74:48:
0c:6b:29:f3:d7:56:42:8c:61:b7:59:f7:dc:94:6a:
fd:72:4a:5c:ca:78:af:a6:a1:f0:f4:d2:d5:6b:c8:
ec:58:9a:a0:88:56:08:05:5e:bd:bb:50:95:48:04:
63:f0:a4:e7:9a:b7:b3:b2:fe:e2:5b:64:59:2b:62:
95:3b:36:ee:b1:3f:e6:06:2b:7f:1b:be:e8:19:2b:
de:7d:d9:b0:24:ad:35:76:09:f6:a0:b0:22:31:da:
c5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:53:56:C0:1E:4C:BD:8C:9D:7D:E3:82:05:07:E6:BD:A8:B9:4F:55
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/WFNWwB5MvYydfeOCBQfmvai5T1U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.144.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:d8:de:46:7c:3f:e7:34:d5:0e:05:b8:8a:55:d1:f9:b3:2c:
06:07:07:01:6d:ad:c8:e1:82:9b:78:ef:69:f3:ea:d0:b9:04:
98:b4:5a:2b:5d:16:06:e3:14:b0:a8:8d:31:b7:e2:c5:17:fc:
af:e2:5a:95:ad:bf:07:1d:94:16:83:80:f3:03:eb:09:21:c2:
cb:3a:c9:29:f9:af:7b:a8:e5:f2:28:72:c5:b2:3b:c5:b5:f2:
26:b6:7a:0c:2e:2c:17:ec:b8:d7:f4:c7:38:94:a3:43:00:97:
15:c3:74:3d:72:d6:c3:00:6d:ba:bc:d9:77:d7:7a:68:92:3a:
f6:e0:54:37:0f:fe:50:4d:e1:f2:8a:6f:33:ee:1e:7d:1a:a5:
c3:14:91:9d:8d:4b:c3:a9:60:82:bd:d0:3b:5f:a8:dd:51:b1:
ef:d4:bf:9b:cb:6c:a2:34:a5:e4:9a:63:db:93:25:e5:de:87:
09:12:41:bf:92:54:03:39:87:8a:0b:a5:8b:77:a6:13:12:7a:
74:9e:33:57:1f:01:76:c7:84:7c:b6:62:bf:b5:f3:2c:c6:03:
79:5b:23:5d:8a:da:1d:60:9c:60:81:37:98:37:b2:5f:78:3f:
fc:f2:47:03:1d:a4:50:12:70:93:a1:36:fd:9b:78:33:f8:8e:
a4:6e:7c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:21 2024 by rpki-client on console-fra.rpki-client.org