Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/lHIubFaIzbyX8Yth_l6F78afYM4.roa
File: lHIubFaIzbyX8Yth_l6F78afYM4.roa (raw, json)
Hash identifier: odUl8BckTo9VliGRYGs1PHgB1hYvdTcYWnqVM9bfCYs=
Subject key identifier: 94:72:2E:6C:56:88:CD:BC:97:F1:8B:61:FE:5E:85:EF:C6:9F:60:CE
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0C20
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/lHIubFaIzbyX8Yth_l6F78afYM4.roa
Signing time: Fri 01 Sep 2023 09:14:01 +0000
ROA not before: Fri 01 Sep 2023 09:14:01 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131627
IP address blocks: 61.61.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3104 (0xc20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 1 09:14:01 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=94722E6C5688CDBC97F18B61FE5E85EFC69F60CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ff:84:36:4a:66:c3:5c:4e:11:ae:ca:8d:53:
11:ab:81:f1:57:bd:1c:2f:59:8f:e3:8a:69:e5:14:
3f:95:03:9b:bb:24:ab:c7:6c:d4:9f:49:2a:dd:3d:
e6:79:74:8e:e2:b9:da:6c:2c:15:0f:07:c3:9e:85:
49:bc:9f:3d:a1:71:ee:f9:3f:15:a3:2e:45:82:aa:
c6:a0:4a:69:d9:73:a2:e0:29:18:64:d2:7d:36:d2:
b7:37:a9:a1:72:26:6e:f3:54:e8:9a:bb:ba:93:05:
30:a1:9a:f4:d1:5c:c8:f1:25:94:54:88:b5:ce:60:
01:0d:9e:f6:7c:15:1a:ae:30:b5:22:c0:3f:a1:a6:
bb:e7:66:87:90:ed:a0:dd:f9:e5:98:38:23:00:8d:
c7:c2:2d:67:00:fa:8d:1f:49:cf:64:af:c7:e0:7c:
dd:9e:fc:cf:b9:4f:4f:3d:e2:ed:8d:f7:7a:b2:74:
4c:3f:41:da:17:30:9c:c5:5f:20:3d:22:5f:ef:2f:
9e:29:7f:c4:53:9d:03:29:bb:81:79:3a:39:e9:50:
0a:e3:d1:f4:74:c7:06:87:25:9e:66:8a:27:fb:8b:
40:4e:40:46:44:12:e5:de:f4:f3:1d:a7:1a:7e:9b:
7a:17:7a:15:50:36:34:7b:50:a0:cd:7b:b6:d1:10:
a4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:72:2E:6C:56:88:CD:BC:97:F1:8B:61:FE:5E:85:EF:C6:9F:60:CE
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/lHIubFaIzbyX8Yth_l6F78afYM4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.70.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:d5:10:47:c3:af:09:8f:bc:6e:8c:72:96:2e:48:bb:87:14:
85:aa:de:d0:fb:b7:25:20:bf:40:5c:8c:71:13:09:7e:8e:77:
36:17:11:c7:6e:1d:1b:6d:6e:1a:02:8d:f8:2f:9a:19:c5:c6:
d6:e3:44:c2:df:64:0e:c2:13:72:74:19:b3:5b:32:50:27:ad:
86:67:0e:86:cf:92:25:d4:c4:a6:ff:71:8a:36:ed:85:5d:9b:
dd:09:91:fd:be:58:7f:04:8f:8f:70:e7:e9:62:a2:1f:d9:67:
f2:94:57:9c:1d:d8:8a:dc:e4:72:30:cc:3a:2d:89:b1:a0:0b:
4f:b7:e3:03:96:c3:7b:85:6c:13:58:27:a2:f1:8e:a5:23:4f:
2a:bf:23:28:af:cd:db:b6:b1:03:0d:00:6b:51:d8:f2:2a:b1:
c3:7d:52:13:11:c0:27:1e:6b:8b:ee:e2:b1:e3:74:a4:b4:45:
bb:0b:c8:1e:b3:7b:e2:9a:bf:e4:37:3f:35:4c:33:75:1f:0f:
58:34:c2:b8:55:58:41:7e:83:98:76:5c:c3:ca:44:7c:1a:02:
ed:75:1c:4c:25:0b:0f:0e:9f:86:f2:ac:f5:67:ef:a0:c7:11:
8e:9e:1d:77:30:aa:ed:6e:bd:a7:b8:6d:8e:0c:ec:35:58:1d:
24:3b:1c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:21 2024 by rpki-client on console-fra.rpki-client.org