Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/YMjE-nNsS1TbFv4pnSynCEe2Ptc.roa
File: YMjE-nNsS1TbFv4pnSynCEe2Ptc.roa (raw, json)
Hash identifier: qVt4oTOksAQ6H4NeuKw+HSQZ08bRDD2Y2z4qnFgzmV0=
Subject key identifier: 60:C8:C4:FA:73:6C:4B:54:DB:16:FE:29:9D:2C:A7:08:47:B6:3E:D7
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0C30
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/YMjE-nNsS1TbFv4pnSynCEe2Ptc.roa
Signing time: Fri 01 Sep 2023 09:14:04 +0000
ROA not before: Fri 01 Sep 2023 09:14:04 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18049
IP address blocks: 61.61.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3120 (0xc30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 1 09:14:04 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=60C8C4FA736C4B54DB16FE299D2CA70847B63ED7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:e3:47:d6:93:ed:76:e7:ac:c6:71:99:c1:
da:84:e4:a4:b0:c9:17:d8:fc:c4:2d:e3:2c:69:8d:
fa:db:98:82:f8:9e:93:09:87:f9:33:04:30:d1:72:
de:35:a5:5c:31:85:04:7c:3d:d7:0f:27:f3:24:08:
ef:06:15:99:db:ce:54:92:d3:d8:bd:77:cd:06:07:
8e:03:cf:19:2e:85:c8:a0:fa:60:0e:cb:7a:4f:43:
a3:42:65:c4:36:f4:fb:33:0b:11:84:bc:a4:09:4a:
60:4a:6e:31:cc:ff:50:d7:49:e2:f4:c2:17:4a:22:
80:ce:6a:10:e3:05:9e:fb:b9:76:cd:4e:ac:d4:ba:
b5:13:2f:5d:05:5a:28:d3:85:23:2e:6b:b0:27:bb:
b3:90:ba:23:ac:5a:e2:0e:ee:8a:49:90:2a:ac:c1:
78:e8:c3:cd:b1:69:b1:c8:be:1b:4b:af:34:03:2b:
2a:cf:af:cf:15:17:90:85:e1:63:af:75:9f:41:dc:
69:88:d3:01:6c:6b:0a:d9:6e:69:d8:17:da:1b:f3:
dd:da:7d:a7:ba:d0:e2:35:dd:98:83:2e:ea:aa:c6:
5f:57:5a:e5:59:fe:bd:a9:89:00:93:d8:d9:1a:98:
cb:86:68:1e:a2:2c:ea:0b:f2:af:f8:5e:00:3f:6b:
96:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C8:C4:FA:73:6C:4B:54:DB:16:FE:29:9D:2C:A7:08:47:B6:3E:D7
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/YMjE-nNsS1TbFv4pnSynCEe2Ptc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.16.0/20
Signature Algorithm: sha256WithRSAEncryption
20:af:55:aa:5d:2b:0f:a8:33:2e:41:2f:d3:90:b3:35:40:9c:
3e:15:3e:bf:32:0e:54:52:78:b8:23:a6:2a:01:c2:b8:e3:d0:
fb:13:e4:76:13:0e:b3:d5:23:f7:6b:88:8a:f7:42:f2:06:39:
b4:78:19:00:2d:2b:ed:3c:42:28:bb:e0:a2:3d:a4:ea:08:75:
33:17:c7:a3:6c:db:b3:65:2c:9c:cc:0e:f7:a9:f5:9c:df:ba:
a3:98:fa:f2:78:fb:4f:d8:50:35:ce:19:88:3d:b8:42:08:f1:
d7:41:d5:86:47:39:95:47:0d:c7:4a:0f:30:4c:71:d2:88:27:
d2:a1:ee:80:e8:ba:2c:31:cc:77:20:35:37:7f:40:b2:84:59:
42:72:4c:e5:d0:e3:f2:5f:85:00:ea:d7:2d:50:8d:89:ed:ee:
44:f6:af:af:d3:db:bb:4a:0e:14:c6:ba:84:59:83:8b:44:21:
ba:24:5b:bb:62:8f:79:30:48:c9:dc:92:98:bb:85:d1:ef:43:
01:6e:4b:a5:a8:9e:f9:c3:9f:f6:db:77:5a:18:7d:e0:b8:db:
fc:f9:19:15:27:24:a9:fb:cd:6f:01:18:ee:7b:d8:fb:c9:c9:
34:92:f8:5d:a6:d4:5d:1f:68:36:dc:2c:d4:8c:63:ee:7c:4d:
1c:5e:2c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org