Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/haIgMrKfsrMl_MC7a7CQ7TZ_mAk.roa
File: haIgMrKfsrMl_MC7a7CQ7TZ_mAk.roa (raw, json)
Hash identifier: RTNhyOjIDGc1tFVBmjxiwngsclT0zvlGOBO9QfuJAZI=
Subject key identifier: 85:A2:20:32:B2:9F:B2:B3:25:FC:C0:BB:6B:B0:90:ED:36:7F:98:09
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0C18
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/haIgMrKfsrMl_MC7a7CQ7TZ_mAk.roa
Signing time: Fri 01 Sep 2023 09:13:58 +0000
ROA not before: Fri 01 Sep 2023 09:13:58 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9919
IP address blocks: 61.61.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3096 (0xc18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 1 09:13:58 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=85A22032B29FB2B325FCC0BB6BB090ED367F9809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:af:c5:ae:34:50:4a:60:53:8d:8b:b7:14:9e:
df:47:1b:cf:33:87:8a:db:c8:b3:53:38:d3:2a:00:
81:3d:d9:45:28:f1:17:a4:c8:06:37:c8:d5:0f:7f:
ff:7d:f7:1f:b5:79:cd:55:60:79:d9:c7:16:12:5b:
5d:74:54:c3:17:09:95:4a:59:28:dd:4a:cc:94:e5:
78:8e:a2:29:12:fd:cb:9a:f7:c9:f1:97:48:e5:d1:
d4:33:8b:9e:a7:9d:87:4a:34:ad:cd:b0:e5:d1:a4:
e6:22:4c:7c:f0:c1:76:5a:fe:65:12:9a:65:80:20:
77:aa:b2:38:6c:5e:1a:c1:3e:82:df:0b:b1:ce:d7:
cd:3c:79:88:d1:dd:28:37:05:87:38:85:94:3b:38:
8b:79:f7:d0:78:77:5f:6d:a7:0f:85:38:df:da:75:
57:95:5b:03:47:8b:22:3a:7f:1c:17:b6:65:fa:19:
56:5c:36:c7:96:30:d9:d0:08:a0:78:8e:3c:e4:74:
c9:0a:94:3d:21:e7:e6:fa:71:f5:16:8d:8e:9f:fe:
2d:70:7b:e1:61:db:2a:40:30:1b:9b:31:f1:50:38:
65:73:84:d3:cb:54:6a:c0:cc:c6:6c:05:61:e0:cc:
3b:e2:f3:06:5e:bc:36:24:2d:72:19:4f:d8:3f:cd:
a4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A2:20:32:B2:9F:B2:B3:25:FC:C0:BB:6B:B0:90:ED:36:7F:98:09
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/haIgMrKfsrMl_MC7a7CQ7TZ_mAk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.128.0/18
Signature Algorithm: sha256WithRSAEncryption
3a:05:66:6d:a0:28:26:d9:9a:e1:35:ad:6d:7d:c7:92:b2:80:
94:b8:66:87:ba:e6:48:a3:c9:74:9f:30:d8:d2:df:95:33:ef:
93:5c:17:6d:24:61:f5:91:ec:16:e9:6f:8d:9b:45:64:e2:b6:
94:bc:e7:a7:58:15:3c:aa:6f:62:a4:fe:25:4e:89:fd:7a:c7:
63:90:66:ba:f2:c1:f5:67:73:75:20:14:e7:08:7c:1e:0d:92:
de:4c:6c:ba:df:94:41:f3:9d:bd:45:72:48:13:48:73:9a:70:
04:a7:5d:bd:0c:91:ef:98:63:11:69:fd:be:92:47:37:e6:a5:
82:e9:88:97:25:84:9c:0a:23:3d:c8:64:22:9f:ce:e9:94:52:
34:3d:00:cc:7c:cc:07:f4:ee:e1:72:72:05:0c:04:0d:ec:2e:
24:33:b0:b6:0c:c8:9b:c1:ea:6c:32:ea:62:33:0b:a2:5a:1e:
d6:0f:95:9d:9e:34:e6:1d:cd:5b:90:ea:8a:f0:69:b5:ef:77:
9b:f5:de:2a:4f:71:a3:d6:59:1b:7c:5b:09:43:50:79:15:e4:
c6:41:67:2e:02:1f:28:9f:91:96:11:ee:98:02:e4:ba:b5:2c:
66:fb:83:db:3a:84:aa:48:88:53:75:f4:0b:03:ca:52:8a:24:
b6:07:52:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org