Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/lOI2oFVkI6wNJwAD3pXpb3gIIFI.roa
File: lOI2oFVkI6wNJwAD3pXpb3gIIFI.roa (raw, json)
Hash identifier: AOVOQSABBbO8SMb3JKcPwbxyDOrCUIid0utmO+jbZ48=
Subject key identifier: 94:E2:36:A0:55:64:23:AC:0D:27:00:03:DE:95:E9:6F:78:08:20:52
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0C0C
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/lOI2oFVkI6wNJwAD3pXpb3gIIFI.roa
Signing time: Fri 01 Sep 2023 09:13:55 +0000
ROA not before: Fri 01 Sep 2023 09:13:55 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131602
IP address blocks: 211.78.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3084 (0xc0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 1 09:13:55 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=94E236A0556423AC0D270003DE95E96F78082052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:36:1d:88:c8:b5:47:b5:4d:14:43:a9:1c:
c3:8d:71:5b:6c:f5:da:79:97:3c:a7:b9:1b:83:32:
b5:ae:46:22:ee:a7:ab:90:1d:02:75:59:89:f4:d1:
5b:60:ff:a6:58:17:13:5a:80:e8:d6:75:03:fe:49:
4c:6a:8f:fd:b9:3a:69:41:37:b6:dc:de:a1:76:62:
1b:01:99:7c:53:96:77:fd:58:71:1b:02:ae:fa:9f:
41:fc:10:be:28:37:53:f5:f6:62:0f:b1:57:01:24:
95:28:9d:85:74:d6:4e:df:ba:ab:7c:ff:d6:fd:4e:
33:f8:fe:b2:a5:cd:0b:13:7c:eb:08:45:67:6f:4f:
a1:16:06:6b:45:c4:2b:a7:e3:81:1e:5d:70:86:34:
c2:60:94:23:2d:1a:4e:14:36:56:8f:36:84:ce:4a:
5e:a7:2d:cf:82:8b:9b:d9:cc:40:a9:55:80:8e:a7:
bb:81:5c:fa:fe:f0:fb:ae:44:fa:50:c0:2d:25:97:
d9:2c:b9:ee:e3:f4:f7:d2:66:c3:22:89:b1:8e:df:
a4:d7:0c:7c:7d:98:4b:f8:ab:7d:39:a4:48:a6:33:
83:31:3a:c6:25:64:6d:95:bf:70:8c:2a:99:d0:49:
e0:6b:c9:a2:39:f3:ae:9b:57:cc:7b:eb:29:c2:c2:
ff:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E2:36:A0:55:64:23:AC:0D:27:00:03:DE:95:E9:6F:78:08:20:52
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/lOI2oFVkI6wNJwAD3pXpb3gIIFI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.78.8.0/22
Signature Algorithm: sha256WithRSAEncryption
99:09:4c:3a:19:58:41:0e:50:00:e9:91:76:55:15:23:f9:12:
2c:af:b7:e0:9b:ee:1d:36:87:71:03:f8:8c:c9:07:22:2a:b8:
32:9a:12:6c:c3:3e:af:9a:3b:55:68:da:fe:91:69:ef:c9:42:
55:1c:10:55:e8:ed:a5:f5:b1:39:68:0f:c6:07:a4:c9:b9:25:
29:13:64:43:6f:47:3d:e5:29:58:ca:54:96:53:be:1b:7b:a9:
91:3a:2c:29:c7:31:ce:57:1c:bb:25:82:6c:cf:e1:d7:51:d5:
69:8f:63:a0:da:42:85:cd:d4:de:4e:40:71:1e:d3:93:86:fe:
62:39:16:15:57:46:8b:af:7f:41:09:44:1e:40:1e:f2:79:36:
1b:9d:47:f4:15:5f:12:85:9d:f5:3e:98:e4:59:44:76:59:70:
40:bc:1c:f7:5f:ea:0e:c7:4d:5c:99:21:c2:90:7a:75:f4:ee:
bc:d1:08:c2:07:23:b0:10:6f:49:15:a4:be:a3:c9:80:d3:90:
e9:31:6e:31:30:40:5f:7b:2f:8f:ca:0f:66:de:4b:8d:43:8a:
6c:59:a2:d7:2f:80:7c:17:0d:88:e5:64:3e:1b:38:d0:70:27:
7b:d9:fe:bd:f4:85:21:ab:5c:07:f6:7a:4d:e4:74:ef:d7:f4:
8d:88:8c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org