Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/QUEWU/3bmoHHKDVXs7SPyg3p9sHaid5cw.roa
File: 3bmoHHKDVXs7SPyg3p9sHaid5cw.roa (raw, json)
Hash identifier: bfsejgorqz4l4v7ZMCScz05XPaT95TckxGLm7EpOmuk=
Subject key identifier: DD:B9:A8:1C:72:83:55:7B:3B:48:FC:A0:DE:9F:6C:1D:A8:9D:E5:CC
Certificate issuer: /CN=9D3F68C726F59B288631AFF37EA4ED76BC2A9EC7
Certificate serial: 06
Authority key identifier: 9D:3F:68:C7:26:F5:9B:28:86:31:AF:F3:7E:A4:ED:76:BC:2A:9E:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/nT9oxyb1myiGMa_zfqTtdrwqnsc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/QUEWU/3bmoHHKDVXs7SPyg3p9sHaid5cw.roa
Signing time: Fri 08 Sep 2023 12:08:55 +0000
ROA not before: Fri 08 Sep 2023 12:08:55 +0000
ROA not after: Thu 05 Sep 2024 08:24:58 +0000
asID: 131642
IP address blocks: 2401:30a0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D3F68C726F59B288631AFF37EA4ED76BC2A9EC7
Validity
Not Before: Sep 8 12:08:55 2023 GMT
Not After : Sep 5 08:24:58 2024 GMT
Subject: CN=DDB9A81C7283557B3B48FCA0DE9F6C1DA89DE5CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bc:d0:59:36:42:21:e0:f9:03:05:43:9e:af:
9a:42:05:44:1b:06:dc:ce:3c:63:e8:3c:49:99:66:
b3:9e:77:91:5a:11:25:72:82:45:e7:c2:9f:1a:ab:
b8:aa:50:78:09:29:08:2d:12:32:15:d5:72:59:e9:
2a:66:bc:59:0d:4e:05:84:8b:3d:b6:5d:d6:f9:7e:
4f:4a:8c:16:06:0c:b9:c9:b8:26:f3:4e:36:57:6d:
ad:82:59:73:ba:13:3c:08:12:49:28:d8:5a:2b:b3:
5f:b5:5d:db:a8:49:84:67:20:28:c7:37:7a:0b:a9:
c5:7c:69:a1:dd:4a:f8:a3:10:97:c5:4b:45:54:89:
95:87:b3:47:8f:6a:98:f2:df:80:83:34:7e:53:ed:
cb:97:cf:f3:e3:c2:e3:22:63:f1:52:71:82:fc:a7:
a4:70:76:15:6f:52:15:57:78:6b:cf:bc:83:de:3c:
25:af:d3:e2:a0:1b:4a:40:13:41:ab:ca:bf:ee:01:
81:58:c6:f0:a3:04:29:cf:05:bb:9b:ad:76:33:f6:
33:6f:79:0a:62:69:31:70:fb:24:68:cb:34:b2:22:
e3:ba:09:9d:96:d9:1e:9d:78:db:9d:14:04:dc:b9:
ae:0b:61:e2:9e:60:04:80:0f:ef:58:63:1d:62:33:
3c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B9:A8:1C:72:83:55:7B:3B:48:FC:A0:DE:9F:6C:1D:A8:9D:E5:CC
X509v3 Authority Key Identifier:
keyid:9D:3F:68:C7:26:F5:9B:28:86:31:AF:F3:7E:A4:ED:76:BC:2A:9E:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QUEWU/nT9oxyb1myiGMa_zfqTtdrwqnsc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nT9oxyb1myiGMa_zfqTtdrwqnsc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QUEWU/3bmoHHKDVXs7SPyg3p9sHaid5cw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:30a0::/32
Signature Algorithm: sha256WithRSAEncryption
4a:af:4e:cc:8f:2b:ee:59:3d:85:b5:35:37:d0:76:fd:1c:21:
d5:cc:39:59:f9:c0:c0:ff:83:15:e0:ac:3b:55:ce:6a:61:a1:
b0:4b:69:c7:43:9c:e4:4a:43:45:a3:dc:6c:62:91:d9:38:d7:
94:d4:ff:71:7c:b4:69:08:43:c9:d8:7d:15:4b:49:84:9d:be:
f2:f3:b2:80:e9:26:3a:02:70:38:e6:17:02:a8:11:84:52:51:
f3:0b:9d:92:81:53:67:68:fd:d5:02:11:3a:f6:54:37:9f:60:
0d:5e:3c:90:d0:64:6e:56:43:ad:68:a8:06:ac:e6:76:b8:b3:
77:dc:42:cc:b3:bd:e2:dc:d9:f7:ce:21:b2:1e:fc:fc:5d:54:
10:12:d8:67:f4:a5:05:81:93:1c:dc:07:ae:66:2b:a5:4c:43:
2b:b3:bd:13:68:2e:19:c2:16:cc:26:c6:cb:a0:ce:43:dc:47:
2c:46:44:3b:ab:69:bd:15:f6:db:9c:7c:77:dc:f7:99:71:94:
fa:92:6a:71:7f:75:8f:56:47:72:65:22:03:f1:1b:78:71:1b:
d3:72:f1:fd:59:e6:ae:5d:22:86:2f:ca:a9:85:16:b6:79:9e:
fc:7b:db:19:9a:22:01:e4:b8:fe:21:51:25:14:e4:12:f9:2c:
74:37:5a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org