Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RENREN/PAoGqsXllYBIsZc8NMELkS8-DqY.roa
File: PAoGqsXllYBIsZc8NMELkS8-DqY.roa (raw, json)
Hash identifier: PMXW9CjyTkaZSrOibmCSw9k1omfJJezmzBRlHK0Jsz0=
Subject key identifier: 3C:0A:06:AA:C5:E5:95:80:48:B1:97:3C:34:C1:0B:91:2F:3E:0E:A6
Certificate issuer: /CN=DB27F7B21D588E1F393973F41C56CA41F8099334
Certificate serial: 05
Authority key identifier: DB:27:F7:B2:1D:58:8E:1F:39:39:73:F4:1C:56:CA:41:F8:09:93:34
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2yf3sh1Yjh85OXP0HFbKQfgJkzQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RENREN/PAoGqsXllYBIsZc8NMELkS8-DqY.roa
Signing time: Wed 06 Sep 2023 05:10:44 +0000
ROA not before: Wed 06 Sep 2023 05:10:44 +0000
ROA not after: Thu 05 Sep 2024 04:02:19 +0000
asID: 131642
IP address blocks: 2401:2fa0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB27F7B21D588E1F393973F41C56CA41F8099334
Validity
Not Before: Sep 6 05:10:44 2023 GMT
Not After : Sep 5 04:02:19 2024 GMT
Subject: CN=3C0A06AAC5E5958048B1973C34C10B912F3E0EA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:d2:2b:fd:5d:ab:a2:08:1d:6d:bf:b6:ea:
38:2d:54:7a:0f:f7:0b:c5:c4:5d:73:d1:61:6e:00:
58:2e:9b:16:0e:67:b4:65:20:8d:be:72:af:d8:c3:
e9:fe:05:ee:ae:4a:f5:bd:80:d9:3e:b2:f1:a6:ff:
d7:c0:b8:e1:68:d8:14:ef:8c:22:db:67:f5:d4:f7:
dc:41:bb:7a:8d:58:78:c0:31:ce:3a:5c:27:45:5c:
b5:1d:39:06:4f:ac:4c:6c:f9:20:1d:32:49:1c:43:
8d:b6:c2:2c:50:c7:0c:06:89:21:4f:96:40:27:a9:
c9:cd:95:df:59:50:68:d5:d0:66:3e:27:b7:b5:58:
ee:56:cd:14:58:29:83:38:5f:f7:e1:0d:20:81:b2:
af:f8:4a:f6:09:5d:ae:cd:58:21:ff:bd:87:8e:e7:
83:b8:43:f5:f9:45:08:c6:cd:d8:0e:71:c2:1e:89:
ca:5e:ac:8e:0c:58:d3:8d:26:c1:29:0a:53:1e:59:
93:6c:74:f3:59:44:2e:22:88:33:10:99:e7:75:ab:
95:f9:55:c8:32:45:0a:22:b3:eb:d4:92:dc:4c:40:
d2:61:02:a9:35:e3:98:bb:40:a7:f9:1a:ef:c5:b1:
3d:25:4b:99:35:39:bc:76:10:89:bb:53:ab:c6:c2:
26:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0A:06:AA:C5:E5:95:80:48:B1:97:3C:34:C1:0B:91:2F:3E:0E:A6
X509v3 Authority Key Identifier:
keyid:DB:27:F7:B2:1D:58:8E:1F:39:39:73:F4:1C:56:CA:41:F8:09:93:34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RENREN/2yf3sh1Yjh85OXP0HFbKQfgJkzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2yf3sh1Yjh85OXP0HFbKQfgJkzQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RENREN/PAoGqsXllYBIsZc8NMELkS8-DqY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:2fa0::/32
Signature Algorithm: sha256WithRSAEncryption
d8:29:05:27:00:90:e8:be:33:19:30:4b:2a:ca:6a:fd:c9:4b:
35:03:50:62:e8:74:7b:6a:c9:7e:7c:d1:e7:e8:71:53:2e:e7:
a4:01:2b:2a:d7:b3:a4:53:eb:3c:cc:7e:9c:1c:65:85:0d:f0:
13:98:64:51:db:78:47:a8:28:e3:38:04:3e:2b:b2:77:90:db:
cb:8a:b8:be:76:be:0e:d4:09:9f:90:86:3e:91:42:c9:5d:d3:
78:bb:47:13:3c:eb:e9:c2:d7:7b:a0:4e:c1:79:24:b8:85:a3:
c5:56:dc:bc:00:6c:bd:d9:5c:37:fa:e1:c3:c9:61:77:7d:7b:
ea:99:f0:79:34:cc:4e:bd:58:1e:7b:85:65:00:47:6d:96:c0:
1c:e0:18:91:7b:4f:79:13:f7:9e:e7:19:8a:20:05:1e:fd:5d:
4e:c9:f9:8a:8a:30:48:31:6d:fb:25:e1:46:59:ec:ea:8e:fa:
37:ef:9c:ea:09:16:66:57:27:f4:35:c4:ee:1a:6e:f4:7b:8d:
0b:cf:8d:14:18:87:d3:35:9b:ee:35:5c:00:46:31:bb:c1:ca:
c2:6e:a1:87:53:77:77:52:96:87:2a:2d:c3:a9:2f:d9:80:73:
a5:6a:93:42:2a:5c:07:3e:2f:69:38:c6:92:ce:d7:87:f2:6f:
b2:35:45:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org