Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/c3d8USvBlZl99v8y1omToAJ_k10.roa
File: c3d8USvBlZl99v8y1omToAJ_k10.roa (raw, json)
Hash identifier: 9bOYr+4VzPEmARdh6Vz19s39Nu7f1W2IYRbQNN1Lq18=
Subject key identifier: 73:77:7C:51:2B:C1:95:99:7D:F6:FF:32:D6:89:93:A0:02:7F:93:5D
Certificate issuer: /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial: 0B57
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/c3d8USvBlZl99v8y1omToAJ_k10.roa
Signing time: Fri 01 Sep 2023 09:35:26 +0000
ROA not before: Fri 01 Sep 2023 09:35:26 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131593
IP address blocks: 43.251.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2903 (0xb57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Validity
Not Before: Sep 1 09:35:26 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=73777C512BC195997DF6FF32D68993A0027F935D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:f2:50:1a:4f:ad:e6:32:18:36:88:52:46:
cc:db:7f:78:6c:9b:f9:cc:73:e1:1a:6a:d7:ce:93:
2b:59:06:fd:16:1f:65:c2:2d:9c:6c:4c:61:55:d6:
17:d2:8f:28:78:7a:07:f0:ca:3e:00:d9:91:bd:03:
cf:80:9d:b5:ed:11:ef:5c:2e:5e:db:d3:e0:f3:3d:
e6:e1:1d:a0:8a:1c:5d:39:18:74:22:d9:db:11:a7:
c2:86:60:3d:b0:14:f3:00:a2:ed:63:0f:e1:03:2d:
df:a0:74:bf:4f:46:bb:46:dc:e7:4a:71:ba:99:61:
d4:9a:33:00:1d:6a:ae:33:66:a0:f7:f0:00:cc:56:
6a:4a:3e:74:35:c5:53:94:b1:cc:de:33:b7:c9:c6:
d9:0a:5c:24:01:42:99:2f:ce:41:1d:18:f6:df:50:
97:2d:34:36:2f:52:16:f0:8a:b1:58:63:fa:b7:c1:
7f:78:4e:cd:3e:70:a8:87:3e:8a:8e:9f:da:f5:ef:
13:3a:db:d0:f4:78:46:71:db:b5:65:5b:24:21:4c:
38:30:4d:d0:d7:5a:ce:89:4b:76:cb:54:b2:c3:23:
29:78:d3:ff:30:bc:9f:6e:b1:79:82:45:1b:8f:20:
a7:5e:04:a5:43:51:55:a7:de:a6:4b:15:77:0d:e5:
d0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:77:7C:51:2B:C1:95:99:7D:F6:FF:32:D6:89:93:A0:02:7F:93:5D
X509v3 Authority Key Identifier:
keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/c3d8USvBlZl99v8y1omToAJ_k10.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.61.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:93:77:65:1a:bd:ed:01:8a:05:d6:f8:7c:df:2c:cd:6b:73:
e2:b8:9c:20:cd:f6:ce:a1:df:3a:53:f0:a1:ef:56:d6:31:d5:
92:a3:c9:5c:42:02:5d:0e:8a:86:00:45:3e:6f:07:74:22:07:
1d:b8:d7:03:0f:c8:74:20:82:c9:ff:de:5e:ee:45:65:3e:5a:
0f:02:22:a7:b8:1a:06:d6:4b:ee:49:19:62:ef:20:ca:e2:18:
30:b7:a1:06:9c:98:5a:02:b1:81:b2:a0:84:8d:93:e2:83:0f:
ec:18:4d:8b:e3:1a:41:9c:27:96:c6:66:e5:44:ed:52:f2:d6:
e2:79:35:62:0d:e8:dc:a3:bd:34:79:8d:f0:89:b4:04:17:4f:
7e:48:6f:d5:0f:fc:b8:9b:39:9e:42:44:52:e8:81:7e:92:13:
5e:47:66:6f:80:87:f0:bc:cd:ff:f9:73:cb:79:ec:fa:cb:ed:
1d:e1:4c:28:2c:1d:3d:ce:2b:c5:6f:ec:e0:ab:e6:9e:21:e9:
15:87:e5:35:19:e2:5a:79:b7:ca:51:5d:9f:f0:a6:67:a9:f4:
e7:24:fe:cd:a1:3e:60:df:cb:47:ee:bd:6a:af:3a:06:c6:e8:
ee:1f:bc:1d:40:32:99:b8:cd:a6:31:8e:92:4e:a4:f1:16:55:
cc:f0:b0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org