Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKTSL/v6I-Hg3238FJyMJZsIbkdN-XV_4.roa
File: v6I-Hg3238FJyMJZsIbkdN-XV_4.roa (raw, json)
Hash identifier: OmvILr2rV8tEh3sdbIYIcXF56QP33vt3U7pB0RZwV4o=
Subject key identifier: BF:A2:3E:1E:0D:F6:DF:C1:49:C8:C2:59:B0:86:E4:74:DF:97:57:FE
Certificate issuer: /CN=90EE69984840D1E0325E8C013DFFB7B2841047E4
Certificate serial: 0B45
Authority key identifier: 90:EE:69:98:48:40:D1:E0:32:5E:8C:01:3D:FF:B7:B2:84:10:47:E4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/kO5pmEhA0eAyXowBPf-3soQQR-Q.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKTSL/v6I-Hg3238FJyMJZsIbkdN-XV_4.roa
Signing time: Thu 15 Sep 2022 02:38:14 +0000
ROA not before: Thu 15 Sep 2022 02:38:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131645
IP address blocks: 2405:2a40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2885 (0xb45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90EE69984840D1E0325E8C013DFFB7B2841047E4
Validity
Not Before: Sep 15 02:38:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BFA23E1E0DF6DFC149C8C259B086E474DF9757FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:d9:bf:0b:e6:fa:ad:17:ec:22:15:c4:0c:
e7:03:dd:6f:c9:dd:e6:fc:53:a6:0f:5b:c2:c3:f7:
61:65:25:9b:b3:2b:24:c8:4c:a1:fb:28:44:59:1f:
46:33:62:f4:fd:c5:13:df:45:75:f6:66:0f:27:ae:
5f:42:18:94:16:ce:8a:d1:0f:ef:95:43:e7:ad:3c:
e4:60:08:bc:15:d4:f9:a7:a7:7f:98:ff:63:56:cc:
c5:a5:9d:3a:9d:d8:c5:c4:bb:f0:97:4a:11:ff:aa:
8f:ad:c8:3c:5d:45:ff:23:e9:45:bf:b4:1a:fd:77:
e6:e2:80:af:f6:1c:5d:8f:2c:c1:d3:b3:5d:22:54:
7c:1d:a7:68:88:e0:af:39:b9:1c:4d:26:bb:b9:3e:
a2:fb:25:73:95:e4:1c:6c:05:ee:47:dd:d8:ef:61:
84:5b:d8:a9:4b:77:79:53:2c:e9:fa:cd:78:8f:a5:
c1:dc:08:5b:b1:8e:88:ae:48:63:66:ea:b7:90:46:
ab:66:f2:86:f5:2a:e7:d4:00:4e:28:cd:57:69:ba:
20:35:83:88:0b:29:37:9c:34:59:b2:d1:7c:42:12:
25:05:33:26:f8:eb:7b:5c:f7:5b:af:5f:e7:78:25:
6a:1f:33:c4:e4:a8:90:ec:35:4e:3e:29:71:db:fd:
dd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A2:3E:1E:0D:F6:DF:C1:49:C8:C2:59:B0:86:E4:74:DF:97:57:FE
X509v3 Authority Key Identifier:
keyid:90:EE:69:98:48:40:D1:E0:32:5E:8C:01:3D:FF:B7:B2:84:10:47:E4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKTSL/kO5pmEhA0eAyXowBPf-3soQQR-Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kO5pmEhA0eAyXowBPf-3soQQR-Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKTSL/v6I-Hg3238FJyMJZsIbkdN-XV_4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:2a40::/32
Signature Algorithm: sha256WithRSAEncryption
41:e9:16:2a:5f:5a:1c:25:05:d8:f6:fe:7b:03:10:12:d8:34:
1b:fa:2a:d0:b6:6a:b4:d6:d2:ba:45:cd:ec:06:0e:83:45:10:
3d:70:88:5d:f8:52:73:7f:22:71:60:a5:1f:ab:05:b6:45:4e:
28:de:f8:93:7e:09:a2:dd:8e:fa:f0:fc:fe:da:f5:79:79:26:
21:7f:f4:eb:f8:85:4a:51:2d:49:06:03:0b:34:cf:c5:24:7f:
d7:4c:1d:e1:56:13:61:1e:e2:b7:3d:b9:aa:1c:52:3b:c9:eb:
e8:7a:50:73:0c:ad:ac:d5:bc:c1:79:98:7a:58:cb:91:4a:60:
41:88:66:2b:95:17:5c:32:9e:09:20:62:09:87:39:5a:39:8e:
25:91:be:57:03:c4:e1:b3:a7:74:6d:e7:ba:89:e3:c8:83:fc:
67:d7:2f:82:f0:1d:90:a8:00:38:9e:fc:07:f5:fc:0d:28:39:
9e:c6:9a:bc:ce:c0:4f:16:52:1e:6d:f9:e4:77:42:2b:4c:73:
06:ec:90:b8:19:1e:7e:a3:54:15:b4:7b:b3:51:f7:7e:18:67:
cb:b5:65:ae:2d:d7:a3:a4:4d:0c:7f:59:42:d4:cd:2b:50:46:
7f:0a:8a:3a:1c:2a:51:9c:a8:54:fa:2b:3d:a4:a3:d1:3d:d2:
eb:a1:93:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org