Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/nIEnaFlDuetlcMo-Zd1gbxF7Wds.roa
File: nIEnaFlDuetlcMo-Zd1gbxF7Wds.roa (raw, json)
Hash identifier: oevmgyeZrjJW3CX0p3MVupxvXXGBe4YtRUq9FFCgCm8=
Subject key identifier: 9C:81:27:68:59:43:B9:EB:65:70:CA:3E:65:DD:60:6F:11:7B:59:DB
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0C29
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/nIEnaFlDuetlcMo-Zd1gbxF7Wds.roa
Signing time: Fri 01 Sep 2023 09:14:03 +0000
ROA not before: Fri 01 Sep 2023 09:14:03 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18049
IP address blocks: 61.61.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3113 (0xc29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 1 09:14:03 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9C8127685943B9EB6570CA3E65DD606F117B59DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ba:8d:20:9a:52:95:20:46:d7:49:25:a8:27:
1d:19:9d:5b:1e:df:02:27:8b:4b:56:36:c2:cc:10:
d4:23:4c:a8:34:17:58:d1:31:e9:1a:c5:b6:48:e2:
49:7d:11:79:68:88:0e:19:b1:37:f5:b5:95:6d:74:
83:e2:e7:bf:9f:b7:f6:5c:b1:38:eb:7a:12:29:46:
63:38:f4:2b:1b:57:83:d2:31:04:56:cc:93:8a:e9:
b2:cb:a1:74:33:d7:07:69:c2:b6:af:b1:26:53:bb:
94:ac:32:fc:54:96:6f:34:e9:68:22:d5:5b:fe:10:
8a:51:19:2e:60:e7:16:35:91:c5:2f:ed:59:47:c9:
96:26:84:1a:cb:f5:0e:49:c8:af:67:6d:63:bd:fc:
10:4d:78:2a:b7:cd:33:4c:9a:44:1e:bc:f9:7b:41:
5b:46:51:5c:6c:e7:ad:a9:d9:76:09:9d:2c:37:72:
f5:e7:34:40:e8:cc:bc:4f:ef:c9:e6:27:44:fc:b0:
1b:05:48:69:51:4f:54:c4:52:b0:11:4a:db:b3:62:
60:73:b0:37:88:1e:d3:91:51:4d:1b:d2:9a:41:d7:
54:4d:7d:3b:81:23:16:61:a1:b1:8a:30:c4:49:5e:
8b:93:d0:24:42:2d:68:01:10:24:10:6d:ae:0c:d6:
e3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:81:27:68:59:43:B9:EB:65:70:CA:3E:65:DD:60:6F:11:7B:59:DB
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/nIEnaFlDuetlcMo-Zd1gbxF7Wds.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.176.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:f6:0d:a5:12:fa:cc:60:ee:6a:9e:7f:da:2f:a5:6d:cf:3c:
0a:1a:e6:91:ad:f9:90:f1:3f:42:48:1f:c9:fb:59:2a:47:6a:
7f:97:31:63:4f:cf:b6:bd:28:8d:39:92:82:87:e6:2c:f5:51:
88:ce:a5:3d:17:93:4b:09:f1:fa:5c:c4:e1:b7:08:61:38:7f:
b5:c6:21:fe:9d:94:6c:d8:f0:3f:a3:ad:fb:0b:a6:5f:06:5d:
8f:2d:36:0a:37:ed:0f:0d:88:9f:22:4f:4f:c8:36:cd:12:bc:
15:8b:07:ef:69:e7:a0:c0:1d:f8:44:39:45:dc:70:55:16:cb:
05:64:02:c4:c7:6d:d3:c7:44:d6:e9:88:46:96:c1:60:55:5a:
29:3e:bb:7c:98:1c:76:5e:56:5e:c7:fa:78:35:74:29:a4:b9:
37:af:e4:96:df:03:db:ce:81:81:90:cd:e2:ea:7c:c8:2d:c1:
d7:c1:87:94:af:1f:8b:fa:d5:5c:6f:4c:f6:ae:99:f7:46:4e:
bb:0d:ce:b6:b2:1f:2a:02:c6:4b:96:76:23:04:15:dc:e6:2d:
3f:d2:9f:ef:34:c4:2e:45:aa:b9:ee:dc:94:c1:ad:39:ad:1c:
fc:47:08:75:0b:0b:13:7d:25:99:9e:2c:e8:97:3a:1a:5b:b0:
59:04:97:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org