Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/Yhd64sOaDiZCoMSEo89K1fMqhnA.roa
File: Yhd64sOaDiZCoMSEo89K1fMqhnA.roa (raw, json)
Hash identifier: KB3wyZG/ZoSM1r3vIdzMAWwP0pKZnMF5KS3FnxPO/eg=
Subject key identifier: 62:17:7A:E2:C3:9A:0E:26:42:A0:C4:84:A3:CF:4A:D5:F3:2A:86:70
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0CD1
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/Yhd64sOaDiZCoMSEo89K1fMqhnA.roa
Signing time: Fri 01 Sep 2023 09:39:48 +0000
ROA not before: Fri 01 Sep 2023 09:39:48 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38843
IP address blocks: 223.27.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3281 (0xcd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Sep 1 09:39:48 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=62177AE2C39A0E2642A0C484A3CF4AD5F32A8670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fb:87:de:d0:11:4e:cf:f5:f1:6d:e6:13:bd:
80:7b:5a:55:5b:23:e9:eb:fc:81:a2:9c:28:7e:64:
91:fe:10:d7:1b:f6:e5:0e:43:c3:b1:b3:ef:a3:1c:
9d:30:eb:2b:ec:71:99:3b:de:e7:7a:b3:2d:42:a2:
92:ea:e4:f0:41:c0:e0:6e:bd:86:6f:e6:10:7c:b2:
90:e2:7e:30:68:a3:c1:98:18:19:94:64:a9:f8:50:
72:45:a1:b0:8a:11:27:31:2a:5d:81:7f:71:98:0f:
ff:34:d4:59:18:48:dd:99:91:01:8a:b6:5f:32:64:
2c:5a:25:cb:22:38:21:62:9b:a0:af:6a:7b:7e:a0:
79:80:0f:53:bd:b3:79:de:40:a4:28:bf:2b:38:18:
c3:7f:4a:7f:7f:cc:92:b5:3d:59:f0:76:11:71:dd:
ba:db:87:c0:ce:6d:d4:6e:f9:a7:5b:31:68:60:48:
2a:ea:50:6d:2e:3a:31:05:00:4e:72:67:68:3a:21:
66:54:2b:73:c0:6b:39:72:d1:ac:f7:bb:49:43:de:
1e:6c:99:1c:d3:0b:19:77:c2:a3:05:b8:8f:b6:de:
6d:70:ae:c6:ad:68:1d:e8:9e:1e:de:f3:85:22:f0:
e4:1a:30:db:47:fe:8c:c6:84:f8:7e:9c:84:54:9b:
d3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:17:7A:E2:C3:9A:0E:26:42:A0:C4:84:A3:CF:4A:D5:F3:2A:86:70
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/Yhd64sOaDiZCoMSEo89K1fMqhnA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.45.0/24
Signature Algorithm: sha256WithRSAEncryption
81:20:0b:0b:9e:76:8a:3c:42:8b:01:66:92:64:75:65:67:27:
72:0c:10:75:1a:71:30:a9:51:fa:65:3e:5d:2b:de:13:ba:38:
b1:1e:05:48:81:05:32:ab:96:ea:2a:7e:08:5f:76:4d:2b:89:
0c:d1:17:ae:fc:26:18:6b:0a:e9:78:12:db:e2:ad:9d:c4:8e:
71:36:44:e1:b9:a3:b5:20:ec:84:07:5e:b4:07:d1:ce:4e:be:
71:a7:04:a2:f2:52:d9:80:ad:c2:2e:22:77:82:e9:d5:0b:cd:
08:03:29:f1:6f:40:c5:50:ae:41:65:da:d3:4c:ae:60:d0:0c:
0b:d8:6f:e8:4c:05:b4:a9:16:7e:f6:7f:3d:4c:c7:ff:a2:b9:
b6:46:5f:5b:5c:b9:aa:70:33:d6:f8:ae:f7:58:36:49:21:39:
40:41:07:bc:4e:30:2e:3b:98:87:39:a2:d0:3e:36:93:24:b6:
3b:0f:93:ce:16:e2:3d:b8:52:eb:47:09:f3:96:92:ff:79:ac:
2d:4d:61:bb:fd:87:4c:51:c2:09:09:1f:a0:c5:e9:4a:46:6d:
f1:9a:2d:f2:ab:14:0d:b9:f1:8e:cc:df:0a:24:3c:48:33:c9:
4c:74:18:9c:92:15:82:ec:5a:5e:70:f5:6e:11:f0:59:69:f0:
01:71:a3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org