Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/kui0NgQQ-3YwS5-1PI5oacyxH-o.roa
File: kui0NgQQ-3YwS5-1PI5oacyxH-o.roa (raw, json)
Hash identifier: YuXxoPUuIWhW6ddMUabO98rBbTFY2q9vKlDChCMbpEU=
Subject key identifier: 92:E8:B4:36:04:10:FB:76:30:4B:9F:B5:3C:8E:68:69:CC:B1:1F:EA
Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial: 0BBC
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/kui0NgQQ-3YwS5-1PI5oacyxH-o.roa
Signing time: Fri 01 Sep 2023 09:45:02 +0000
ROA not before: Fri 01 Sep 2023 09:45:02 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4780
IP address blocks: 2402:2580::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3004 (0xbbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Validity
Not Before: Sep 1 09:45:02 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=92E8B4360410FB76304B9FB53C8E6869CCB11FEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d5:9f:30:96:0e:8d:7d:3e:1d:49:fa:39:62:
3c:24:57:ef:34:5b:83:e7:c9:a9:e4:1f:c8:ee:46:
0a:9a:2e:74:d2:71:90:f2:e0:6b:46:39:2c:e3:e3:
00:62:b8:e2:62:33:dd:70:d7:d5:c2:70:1d:2b:53:
0f:66:13:96:f8:68:07:0b:49:c8:c7:86:91:9e:2c:
b4:68:d6:f6:c7:8b:2c:6a:1f:b3:db:98:61:e9:21:
4d:5f:e0:58:a4:4c:d7:cb:26:cc:8e:09:e7:af:84:
8b:45:8f:72:fe:48:ba:65:c9:51:88:ce:8b:11:a3:
ea:85:01:51:03:44:15:d2:52:ab:5c:0c:bc:53:86:
50:32:ec:ae:a6:ca:2e:b9:d5:32:16:ab:a7:e7:2a:
24:2e:65:18:32:d3:a7:a2:49:4c:ef:ff:8d:35:95:
b6:24:aa:53:89:b6:f6:df:15:a7:48:dc:45:29:45:
5e:6c:4b:77:c6:1a:c1:b3:19:28:1c:f7:78:e1:06:
c7:ff:e7:1c:36:73:ec:a4:a6:c0:c9:f9:65:b2:82:
d8:03:2e:33:7d:ba:76:9f:13:6c:91:4b:15:c4:98:
6c:f9:55:0f:06:40:e8:7f:95:65:bc:a0:6e:6d:bf:
17:72:4c:60:94:27:e3:1e:db:12:62:22:56:04:3a:
fd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E8:B4:36:04:10:FB:76:30:4B:9F:B5:3C:8E:68:69:CC:B1:1F:EA
X509v3 Authority Key Identifier:
keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/kui0NgQQ-3YwS5-1PI5oacyxH-o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:2580::/32
Signature Algorithm: sha256WithRSAEncryption
c0:ae:87:ba:c2:4b:bd:04:4b:37:3b:b1:78:8d:dd:44:22:9d:
fa:40:de:fa:6e:0d:ce:3c:6a:43:e6:7b:89:73:ef:ac:68:30:
30:58:67:76:20:46:7a:9e:91:7c:a0:9c:bc:21:f9:10:77:1b:
e7:88:b0:b4:7a:61:9f:e2:7c:b1:e4:77:f3:f6:10:7d:0b:10:
8d:35:76:62:25:af:17:37:0a:c8:06:61:ca:66:23:e0:ef:e3:
f1:6d:e2:58:e9:92:9d:b9:a7:8d:b3:fd:dc:be:ed:c4:49:c7:
f9:da:1d:1a:86:64:7d:51:75:3f:f2:43:57:fa:f8:63:ad:bd:
79:c5:2d:fa:22:50:10:91:3a:af:8c:96:6d:f2:6c:ab:58:58:
6f:92:8b:99:02:3b:4f:95:e1:c5:9a:7d:1a:cc:b6:4f:08:47:
70:f6:01:25:bc:03:a4:99:ef:60:e7:8b:7b:3e:2c:a9:b2:8e:
bd:49:29:44:2a:4d:fc:4d:7e:b3:94:3e:d9:c6:65:63:1f:05:
c3:d9:e4:8e:30:42:21:c7:7c:af:b8:36:42:11:4c:34:7c:a6:
13:e6:32:33:25:7c:7c:65:0d:93:03:05:ef:7f:10:e2:56:86:
59:91:bd:77:5a:f0:7c:5d:d7:a4:78:9f:3b:b2:77:4b:35:d1:
67:0a:d9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org