Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/LBPMYRUTwWjiUJF5QDwg3uWNIOo.roa
File: LBPMYRUTwWjiUJF5QDwg3uWNIOo.roa (raw, json)
Hash identifier: gslcBY9od8NmkUf466Kzg6IicaC+3u1/CR27E5iu8HI=
Subject key identifier: 2C:13:CC:61:15:13:C1:68:E2:50:91:79:40:3C:20:DE:E5:8D:20:EA
Certificate issuer: /CN=3730D9A195AB710286722CE5CCA467CFBA5BD494
Certificate serial: 06
Authority key identifier: 37:30:D9:A1:95:AB:71:02:86:72:2C:E5:CC:A4:67:CF:BA:5B:D4:94
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NzDZoZWrcQKGcizlzKRnz7pb1JQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/LBPMYRUTwWjiUJF5QDwg3uWNIOo.roa
Signing time: Wed 13 Dec 2023 04:02:03 +0000
ROA not before: Wed 13 Dec 2023 04:02:03 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 31972
IP address blocks: 64.78.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3730D9A195AB710286722CE5CCA467CFBA5BD494
Validity
Not Before: Dec 13 04:02:03 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2C13CC611513C168E2509179403C20DEE58D20EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b6:3b:91:07:8b:e0:f4:16:a5:2b:e2:14:dc:
ea:38:5f:fa:01:77:f8:a7:26:29:5c:ef:9a:a0:84:
04:8d:8c:48:f0:19:f5:3c:f2:ec:95:64:c1:d3:2e:
58:94:54:c0:b9:97:2e:07:77:3d:a7:58:31:79:a9:
20:44:78:38:83:19:d8:ab:db:7c:ad:1a:d1:be:6e:
a3:a2:58:29:1e:6c:26:f4:32:07:c1:59:78:5c:7b:
72:c5:63:27:ed:a7:df:aa:1b:53:85:2b:8f:a0:26:
39:ff:50:40:c0:9a:90:9d:a7:d3:a0:cb:6a:5b:6a:
5e:a0:f2:01:cf:cd:4a:84:3f:c6:a3:1a:02:23:73:
13:6e:b3:19:2a:d6:83:ec:92:fd:18:5b:5d:13:8f:
71:f7:fe:72:d7:88:03:ff:86:d7:ee:7f:7f:5e:11:
28:04:c6:b2:46:99:a6:17:41:4d:f5:57:c9:70:df:
dc:48:9f:1e:48:ee:bb:d9:ad:31:6e:c2:db:36:3d:
cc:a7:8e:b0:b3:a9:04:dc:c6:ae:b9:8c:8f:d0:69:
9b:77:15:53:0e:6f:9b:aa:a1:18:66:0c:3c:2d:96:
72:65:76:76:23:d6:72:3f:a5:a2:a1:eb:eb:8f:87:
70:8c:0d:9f:fa:7b:58:ac:fc:92:83:65:f5:b7:73:
45:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:13:CC:61:15:13:C1:68:E2:50:91:79:40:3C:20:DE:E5:8D:20:EA
X509v3 Authority Key Identifier:
keyid:37:30:D9:A1:95:AB:71:02:86:72:2C:E5:CC:A4:67:CF:BA:5B:D4:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/NzDZoZWrcQKGcizlzKRnz7pb1JQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NzDZoZWrcQKGcizlzKRnz7pb1JQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/LBPMYRUTwWjiUJF5QDwg3uWNIOo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
64.78.160.0/20
Signature Algorithm: sha256WithRSAEncryption
77:b3:18:d8:02:ef:20:f1:4b:36:ff:e6:45:f0:8e:20:cb:49:
ce:77:13:b7:23:9d:78:1b:fc:44:7d:5f:8c:9f:f7:1b:b1:95:
ea:f2:6a:72:7a:27:15:dd:f8:25:19:2f:e3:fe:ac:7a:b3:b0:
83:ca:15:75:e9:97:41:f4:4a:d0:21:7d:06:b0:db:39:20:fb:
0d:73:ee:88:d2:df:61:e9:d5:96:55:b4:df:83:b8:08:61:ac:
f4:cc:2a:9c:b0:fb:df:d4:d1:17:ce:ce:4a:5d:60:38:2c:65:
8a:23:f6:27:5e:3c:ff:23:0a:ec:45:26:f0:77:20:27:2a:cf:
41:d5:45:d4:8c:21:c7:83:e5:2b:fa:70:d9:ef:93:7c:4d:38:
63:f1:bd:90:6c:53:f9:8c:f7:9b:4b:08:d2:14:2d:79:88:a0:
91:06:1c:a9:2f:cf:4b:a2:cf:37:bf:09:ac:f0:1b:f1:58:5a:
73:c3:93:06:89:0f:cf:8d:bd:ac:75:52:be:2b:b1:58:90:10:
f9:f7:cf:be:47:2e:bb:50:59:2e:6a:f0:c3:45:b7:e2:c9:db:
87:fb:0e:40:50:5a:71:19:71:04:59:30:04:28:55:45:c3:3e:
90:e4:ca:86:58:78:de:10:47:04:66:6f:4f:96:a1:e8:bc:ce:
0d:08:53:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org