Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/cDgBnMY6CkQb2xY0wt9WjvLR60o.roa
File: cDgBnMY6CkQb2xY0wt9WjvLR60o.roa (raw, json)
Hash identifier: YxgxX2RfXb+NQtkH7Dqaj5v539EggsdT0Q0KSULOG2U=
Subject key identifier: 70:38:01:9C:C6:3A:0A:44:1B:DB:16:34:C2:DF:56:8E:F2:D1:EB:4A
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0C1C
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/cDgBnMY6CkQb2xY0wt9WjvLR60o.roa
Signing time: Fri 01 Sep 2023 09:13:59 +0000
ROA not before: Fri 01 Sep 2023 09:13:59 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18049
IP address blocks: 61.61.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3100 (0xc1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 1 09:13:59 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7038019CC63A0A441BDB1634C2DF568EF2D1EB4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:38:15:bd:16:a5:4e:ed:1b:d8:e0:72:be:36:
22:c4:ce:d2:ed:ab:99:d0:f0:df:bd:93:c5:ac:66:
5f:3c:66:9e:54:dc:c2:48:fa:ca:d2:14:41:5b:f6:
d3:7c:f5:fd:ea:7f:3a:1e:ed:8e:ba:21:61:77:25:
91:43:e8:08:3a:fa:0c:4b:a6:94:d9:f4:f9:41:91:
d6:a0:a4:07:af:a1:a7:80:79:e4:ef:98:7f:cb:5d:
42:40:b4:5c:9f:ca:6d:e8:fa:30:e4:bf:b4:99:29:
0e:cc:9f:5e:43:28:70:56:12:96:53:77:03:01:32:
b7:af:00:3e:b9:5e:d8:43:f9:d4:e1:ae:fa:2a:19:
e2:ca:3c:41:c6:08:09:b4:73:3d:0b:47:58:53:61:
f4:61:a9:52:57:4f:d4:87:f0:08:5c:71:73:8d:01:
0f:b5:d1:3d:8c:da:83:c3:59:be:d1:09:8f:03:bf:
8d:b9:5e:59:4b:a0:70:b4:40:7a:25:fc:c6:11:00:
a4:1f:d4:7f:e4:3a:30:97:33:fb:c7:7f:c1:cb:53:
b0:61:0b:ff:d4:fa:c8:38:20:b7:62:8a:64:01:cb:
76:bd:fa:a9:21:a3:1a:9c:5a:22:10:15:77:5e:40:
b4:09:d6:27:a1:db:79:32:92:f2:73:1b:61:42:a0:
0f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:38:01:9C:C6:3A:0A:44:1B:DB:16:34:C2:DF:56:8E:F2:D1:EB:4A
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/cDgBnMY6CkQb2xY0wt9WjvLR60o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.64.0/22
Signature Algorithm: sha256WithRSAEncryption
43:22:68:ce:ef:b6:19:2a:16:37:97:e1:aa:a1:e9:6d:40:92:
d0:6b:d7:66:f8:26:a0:16:4a:86:f9:e4:67:d3:f9:17:e4:86:
b8:e4:a1:8e:64:ea:42:3a:21:88:d3:5b:da:69:f8:cc:ba:1f:
9a:2d:e5:ff:03:07:b2:c7:24:c4:45:16:fb:09:61:7a:a6:74:
d1:63:74:72:c0:f3:3c:e4:b1:65:b5:4c:67:48:e3:73:11:5b:
40:d9:7e:f1:c1:08:62:d0:46:2a:17:b8:de:a2:da:10:08:1c:
96:06:f2:e5:5c:97:ec:db:57:47:1e:c9:ff:d0:a4:20:61:ef:
d3:89:eb:34:05:29:f3:7f:b4:7b:e3:dd:48:2a:ff:eb:39:1f:
14:d0:fd:d4:61:70:93:bb:b0:43:d9:34:83:96:01:80:dd:51:
65:ac:8c:14:32:61:a7:c9:a5:c2:86:0b:d8:ed:78:c4:67:69:
39:38:4c:2e:e4:b7:18:ad:19:21:6e:43:3f:4b:2c:e4:3f:8f:
c7:3a:b6:c9:8e:21:92:16:ab:c4:10:b5:89:67:d1:38:71:70:
12:d5:5f:64:d1:16:9e:ae:30:0b:c5:d1:2b:ea:38:70:fb:fd:
6f:c9:bb:7b:18:9c:d8:8b:e0:7e:62:f2:14:d0:16:3a:07:87:
0b:22:0d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:21 2024 by rpki-client on console-fra.rpki-client.org