Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/WvFpAS0kf2lpquVjbGclSnrbnQo.roa
File: WvFpAS0kf2lpquVjbGclSnrbnQo.roa (raw, json)
Hash identifier: 3hT+rBPt7iWczTxBfytC8o9SzHQvra0GaHvl62jqvxI=
Subject key identifier: 5A:F1:69:01:2D:24:7F:69:69:AA:E5:63:6C:67:25:4A:7A:DB:9D:0A
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0C15
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/WvFpAS0kf2lpquVjbGclSnrbnQo.roa
Signing time: Fri 01 Sep 2023 09:13:57 +0000
ROA not before: Fri 01 Sep 2023 09:13:57 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131627
IP address blocks: 61.61.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3093 (0xc15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 1 09:13:57 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5AF169012D247F6969AAE5636C67254A7ADB9D0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f4:e4:27:d9:24:e8:fc:79:fc:fb:63:80:9b:
9f:0a:e4:15:15:ed:16:f0:34:37:45:f6:87:a1:5e:
23:9f:43:8c:a8:db:6a:df:ad:03:7f:c7:df:d2:f1:
7c:b0:3c:12:e3:09:5b:8d:05:8d:ff:23:73:c1:a1:
af:f4:02:0d:86:a9:a7:ef:03:47:b3:c7:4a:ac:67:
f0:e7:23:3f:71:0b:a4:89:2f:b3:52:e6:17:b7:38:
46:31:aa:65:80:92:8a:e0:42:c9:23:aa:90:63:24:
1a:44:81:86:d8:3e:8f:3b:f2:67:c4:95:c2:bc:d8:
d1:10:67:b3:17:91:4c:1b:b4:d6:0a:e2:00:65:60:
03:ab:bb:a1:e1:fe:43:ad:b7:90:7b:e9:8f:37:98:
e9:36:2e:e5:6d:f7:6d:81:46:a5:2b:f1:90:2b:a9:
28:d5:ae:59:d6:25:f3:92:6a:ed:82:00:e3:76:dc:
b8:7b:17:16:5a:ea:b7:e4:af:6c:f3:89:98:a5:41:
25:e4:72:b5:5e:a8:b4:eb:c5:aa:be:51:aa:d6:43:
40:ed:93:ed:dc:92:66:5b:20:48:61:97:95:84:9d:
e8:3a:c3:b0:62:ab:8a:95:51:19:6e:d7:9d:63:5b:
e3:16:50:03:d0:9f:ce:20:76:bc:16:b0:d5:e4:e1:
5d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F1:69:01:2D:24:7F:69:69:AA:E5:63:6C:67:25:4A:7A:DB:9D:0A
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/WvFpAS0kf2lpquVjbGclSnrbnQo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.69.0/24
Signature Algorithm: sha256WithRSAEncryption
09:31:d4:ef:9a:16:e5:ac:81:cf:20:c7:80:6d:a5:5e:72:76:
b0:91:70:1a:84:e3:f6:90:b1:73:e5:5b:d4:b1:59:fb:96:ab:
42:cd:63:81:45:55:a7:14:67:71:1a:8f:b5:59:ed:76:94:6e:
ab:43:4b:4c:80:95:f9:f8:e7:5a:c9:3a:d6:8e:1a:f9:07:f0:
04:9f:6a:9e:1d:c0:01:b7:d8:7f:4e:fc:33:a3:cb:c7:0d:44:
98:0d:f6:99:eb:e6:f1:bf:6d:72:fe:49:42:ce:ac:c5:b1:40:
81:8d:4d:93:75:5d:05:a7:a3:8d:d9:d8:e5:5f:30:32:07:b9:
6f:23:ba:75:ea:2c:e2:b6:6c:83:4a:78:f8:c6:2e:62:33:4c:
27:7c:17:ca:81:97:87:13:34:6e:2c:88:5a:39:13:98:d1:67:
c2:8a:d8:91:8b:fe:ea:3c:52:d4:03:a4:2e:2f:68:07:77:03:
00:28:86:5f:fc:e2:97:f0:a7:b0:e7:b9:60:d9:ae:32:32:c7:
a4:51:20:bc:70:b4:f5:e5:a7:dc:da:aa:fa:05:32:10:83:a6:
62:70:04:3e:79:f1:14:ec:58:ef:d1:5f:79:78:9c:43:72:7a:
ec:3c:f1:63:ff:fb:5c:3e:d6:3b:cf:d3:05:25:1c:b3:b5:a2:
54:93:b0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:21 2024 by rpki-client on console-fra.rpki-client.org