Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PIINET/m_pk8lE4OSRWwwMWRe8iVK0Q9eY.roa
File: m_pk8lE4OSRWwwMWRe8iVK0Q9eY.roa (raw, json)
Hash identifier: of717LNKOGRqAh6yKXOAoRFeKwZQ9y73VZC+5xCFOWE=
Subject key identifier: 9B:FA:64:F2:51:38:39:24:56:C3:03:16:45:EF:22:54:AD:10:F5:E6
Certificate issuer: /CN=69797BDE8D0581FA299D8E1420ED2957C4208A07
Certificate serial: 0B13
Authority key identifier: 69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/m_pk8lE4OSRWwwMWRe8iVK0Q9eY.roa
Signing time: Fri 01 Sep 2023 09:35:53 +0000
ROA not before: Fri 01 Sep 2023 09:35:53 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17710
IP address blocks: 61.57.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2835 (0xb13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69797BDE8D0581FA299D8E1420ED2957C4208A07
Validity
Not Before: Sep 1 09:35:53 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9BFA64F25138392456C3031645EF2254AD10F5E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:3d:18:aa:51:40:79:70:11:46:0c:10:5e:
4f:12:c4:85:40:81:da:c7:f5:44:8d:27:83:94:83:
10:21:09:cf:a5:59:bf:64:05:22:7e:62:95:35:2c:
6d:7b:d6:ce:ee:58:a4:af:66:07:21:55:89:17:2e:
7a:21:d3:9f:94:1f:0d:75:6c:b3:bb:a7:11:fd:4e:
65:44:24:95:e5:58:d5:bb:cb:c5:d0:42:4d:bd:d9:
82:72:c0:a0:31:0a:be:fe:28:49:c6:19:cb:3c:64:
a9:d1:33:58:80:11:9a:d6:5e:33:85:85:9e:b1:22:
04:a9:87:d7:be:8b:c5:c5:a7:a4:5c:f5:44:26:52:
76:54:43:a9:91:0a:d8:d7:21:38:77:c6:88:03:1d:
e1:b0:7e:20:bb:da:bf:c2:99:e8:65:06:c6:79:e6:
66:a8:a8:e4:1d:50:b7:01:11:83:63:3a:b3:d2:b7:
81:63:15:9b:45:08:8d:14:d9:fa:e3:f8:df:d0:67:
66:c9:a6:57:55:40:21:5e:1f:d0:58:f9:d9:d8:25:
75:79:c9:f8:b9:6f:f3:ad:e8:5a:c8:17:70:fc:9b:
b4:c7:ee:44:b0:00:7c:54:88:d0:dc:3e:8a:2f:c7:
a2:8d:56:b2:d0:6e:a8:b7:6c:37:cc:1f:e8:64:06:
02:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FA:64:F2:51:38:39:24:56:C3:03:16:45:EF:22:54:AD:10:F5:E6
X509v3 Authority Key Identifier:
keyid:69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/m_pk8lE4OSRWwwMWRe8iVK0Q9eY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.57.224.0/20
Signature Algorithm: sha256WithRSAEncryption
02:3b:4a:f1:cc:fe:37:89:60:42:d9:f4:ec:2e:71:04:2e:b9:
78:f5:eb:51:49:15:b3:8b:22:82:80:48:4c:b7:97:34:11:17:
35:79:9c:7d:87:d8:21:bd:4d:b5:25:9a:a3:26:a7:57:23:29:
6e:60:0b:94:95:cc:15:a2:67:be:1b:8a:cb:61:44:b4:74:25:
00:be:01:db:9a:a5:55:8a:fa:43:77:51:50:29:92:cf:e8:5f:
35:18:99:c9:57:9f:8f:f4:6e:e1:83:3c:b4:9d:50:92:69:d8:
22:10:02:cb:a5:9b:87:e6:c1:a5:c2:e8:52:d5:8f:ba:ed:cd:
66:cc:3c:4f:64:79:db:bc:bb:06:27:45:e2:78:c0:0d:47:f9:
8a:22:68:ad:3f:a0:cf:3c:aa:42:fc:6f:26:a5:5f:85:9f:aa:
2f:49:26:38:e9:bc:ab:54:5a:b5:64:f4:c6:ec:9d:68:b3:fe:
2c:26:de:29:c9:c7:87:0b:3c:43:04:04:9f:78:79:33:18:69:
02:a8:3b:38:e8:fe:3e:8e:77:e9:02:19:8a:da:5b:f4:cd:92:
75:20:4b:d3:9b:3f:52:92:28:3f:65:34:0b:ef:93:a0:a9:a4:
cd:8d:8b:91:d9:f4:4f:21:16:e1:a6:10:10:9f:95:d9:10:9d:
98:66:3d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org