Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/cab9WcAC5dFPCK7RS_kG2G3-uFs.roa
File: cab9WcAC5dFPCK7RS_kG2G3-uFs.roa (raw, json)
Hash identifier: N1gRN+9tdgDGvNVrohMiACYJfZqieYYqgiBDZ8BjiI0=
Subject key identifier: 71:A6:FD:59:C0:02:E5:D1:4F:08:AE:D1:4B:F9:06:D8:6D:FE:B8:5B
Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial: 0BA1
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/cab9WcAC5dFPCK7RS_kG2G3-uFs.roa
Signing time: Fri 01 Sep 2023 09:44:03 +0000
ROA not before: Fri 01 Sep 2023 09:44:03 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38047
IP address blocks: 2402:c340:55::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2977 (0xba1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Validity
Not Before: Sep 1 09:44:03 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=71A6FD59C002E5D14F08AED14BF906D86DFEB85B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:e2:fa:4f:5e:ab:a5:16:65:9d:7a:ef:5e:
44:a9:01:80:47:ad:a0:9c:93:15:b2:4a:9c:93:df:
ce:f1:34:3d:56:ab:9d:87:5f:a7:bd:24:f5:8f:34:
1a:12:b6:dd:b8:41:62:aa:e3:93:55:19:ba:bc:9b:
d2:d3:45:bd:66:8f:00:ff:fa:5c:fc:07:13:16:99:
31:d1:20:33:ca:e0:df:42:a1:c8:19:92:a4:24:ab:
7b:e1:61:5b:f3:8b:3c:a9:aa:69:d0:6d:19:57:ca:
16:df:6b:ed:11:ff:90:32:a0:8d:4c:a3:f6:f9:c3:
b2:07:53:80:72:c9:2a:2c:0b:dd:29:b8:31:2a:77:
60:3c:b4:68:2c:33:a6:e7:ed:e9:38:ee:ec:7b:41:
e3:8f:5e:d3:23:f0:03:1e:4c:6c:20:f3:e0:70:d7:
72:4f:23:34:3f:25:24:73:97:dc:d3:d4:00:46:36:
80:aa:6a:78:19:c5:11:f0:c5:10:46:ac:46:d5:99:
bb:45:e5:f0:f8:2f:07:12:42:30:48:61:90:c5:5e:
47:14:27:e2:fb:eb:74:4d:e1:fd:5e:4a:0f:d0:f2:
9c:8b:0d:b2:e0:59:41:8d:e7:db:48:e2:20:31:e2:
1f:c9:2c:0a:16:4e:4b:d5:73:95:7f:41:75:0f:1a:
02:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A6:FD:59:C0:02:E5:D1:4F:08:AE:D1:4B:F9:06:D8:6D:FE:B8:5B
X509v3 Authority Key Identifier:
keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/cab9WcAC5dFPCK7RS_kG2G3-uFs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:c340:55::/48
Signature Algorithm: sha256WithRSAEncryption
35:8b:e8:6b:ef:4b:31:f7:70:dd:2f:6b:41:9c:e1:3c:68:d7:
6e:c9:41:ab:9f:3e:2b:2f:dc:2f:94:12:27:bb:a0:51:d0:1d:
cd:c1:bf:5d:50:f6:9a:13:3c:da:b1:0e:da:6d:cd:a6:5f:63:
dc:09:a4:8d:61:5f:44:95:5c:80:87:3e:c7:a0:20:18:b9:60:
43:d3:e9:05:8b:84:e6:2f:95:e5:07:2e:7d:3d:d6:0d:42:80:
c1:db:1d:83:d8:36:7b:42:6c:eb:c7:c0:f5:5d:7c:81:e9:59:
7d:5b:53:ec:91:b3:63:44:dd:39:22:d9:8f:94:e9:93:99:38:
bf:16:fc:c6:07:c0:54:c0:a6:d4:3f:6a:3f:c0:e5:67:24:fc:
c9:87:09:05:a7:12:b2:ba:0a:72:de:46:89:79:dc:2c:54:2a:
5c:63:d5:f2:5c:89:03:5c:16:aa:cc:69:9a:f6:70:85:ea:0f:
83:14:50:31:e6:d9:b4:4f:50:d1:bb:e1:e4:5a:90:d6:db:53:
8f:23:2e:6f:e9:4a:92:01:20:d0:01:32:ca:43:90:ab:06:bb:
2a:e2:23:08:43:04:64:4f:ac:3f:a2:6b:2e:b9:cd:53:24:0d:
36:9b:28:11:a9:16:d7:64:37:24:58:4d:4d:b3:30:bc:b7:eb:
eb:33:a1:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org