Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/y2l0YOENpnopUkW6FekQvfiv7Gg.roa
File: y2l0YOENpnopUkW6FekQvfiv7Gg.roa (raw, json)
Hash identifier: dGYh6wUDP1Zcp0Taeb1Fg9JMpThshWnKUt3ozfsQctM=
Subject key identifier: CB:69:74:60:E1:0D:A6:7A:29:52:45:BA:15:E9:10:BD:F8:AF:EC:68
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0C0A
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/y2l0YOENpnopUkW6FekQvfiv7Gg.roa
Signing time: Fri 01 Sep 2023 09:13:54 +0000
ROA not before: Fri 01 Sep 2023 09:13:54 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9922
IP address blocks: 61.61.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3082 (0xc0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 1 09:13:54 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=CB697460E10DA67A295245BA15E910BDF8AFEC68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9a:b9:19:ee:1a:c4:06:ee:f7:b9:30:8c:81:
02:c3:e1:66:16:00:b2:49:88:03:2b:86:bb:52:9e:
d5:d0:bd:4e:c2:ec:6a:28:00:6d:d6:31:fd:d9:d8:
fa:fd:62:39:84:7e:7f:00:d4:8a:fa:8a:fb:4e:f6:
22:c6:36:a3:59:9c:c4:64:29:f6:ef:1c:81:03:ab:
03:73:40:4a:9d:7b:bb:5e:83:7e:71:f1:af:8a:07:
82:ba:bb:59:59:ee:19:7a:7e:d6:38:d4:49:43:4a:
ab:d0:da:f3:e3:b3:e4:5b:54:42:81:2a:42:ba:4e:
67:85:de:e1:ce:07:9d:b7:45:ca:3e:7e:21:8a:13:
24:a1:a0:5e:a8:d5:79:34:c4:9b:a6:db:16:50:2f:
e3:30:d5:15:2d:33:df:99:ba:44:3a:14:24:f5:50:
88:12:1d:f3:15:d1:8b:2a:e5:d8:23:65:e8:22:5f:
cf:ed:b2:ff:57:cf:b5:55:00:68:e2:ca:b6:dc:1e:
89:f8:b4:b3:39:b9:59:d0:ac:43:b3:07:6f:15:58:
bb:98:3c:91:b6:dd:d6:1b:b0:c5:c5:03:3b:f2:0e:
48:b6:4d:e5:c0:76:7d:f3:8a:20:5f:e3:91:0b:a8:
df:7c:a1:e0:2a:46:83:9c:80:82:d0:ae:77:82:d0:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:69:74:60:E1:0D:A6:7A:29:52:45:BA:15:E9:10:BD:F8:AF:EC:68
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/y2l0YOENpnopUkW6FekQvfiv7Gg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.152.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:a7:58:53:6d:71:0c:a4:50:ef:63:79:55:6e:88:aa:33:d9:
40:63:28:5c:78:d6:06:32:ac:b0:9e:b0:14:5b:80:66:50:98:
22:3e:00:a8:58:98:a2:ed:42:9e:fd:6c:19:41:97:97:e2:8a:
c6:09:8e:84:a2:2d:5d:7c:fb:29:76:1b:8d:cc:b3:07:dd:f3:
f5:4d:30:85:7c:e3:70:c5:6f:70:a4:a5:54:73:a2:68:d3:ad:
a9:24:18:7c:9e:b4:38:fd:9d:d1:a3:e2:e6:19:4d:1d:73:c9:
38:b8:d7:42:e7:fe:5a:08:80:bf:24:34:25:dc:eb:8b:0c:02:
d4:57:a6:18:e8:cd:e9:a3:77:ee:97:de:79:ff:09:62:df:aa:
ef:85:9c:aa:46:36:fa:d6:dc:11:28:7a:2d:58:28:68:31:fb:
9e:f3:85:85:b0:84:8f:0a:42:b5:04:52:e1:5e:18:b6:09:40:
b4:9a:4d:e9:52:42:17:02:de:1c:57:22:3f:c3:78:69:52:0e:
9a:c5:64:77:d8:53:b1:c7:08:13:e6:b1:3f:f6:56:2a:c9:65:
b3:ae:3c:5c:51:68:ca:a1:58:4b:df:fc:61:da:42:cd:db:29:
c5:31:01:c9:84:cb:d2:15:b7:52:4e:94:d4:c8:a6:de:7d:87:
93:18:ff:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org