Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/A8oCjdRrIoJ6BXq8U_PkmwtVY_8.roa
File: A8oCjdRrIoJ6BXq8U_PkmwtVY_8.roa (raw, json)
Hash identifier: S83iHrTt8IVEMVIya5LQY4h8TL0jizpTGCXOE4vGHHM=
Subject key identifier: 03:CA:02:8D:D4:6B:22:82:7A:05:7A:BC:53:F3:E4:9B:0B:55:63:FF
Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial: 0B6D
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/A8oCjdRrIoJ6BXq8U_PkmwtVY_8.roa
Signing time: Fri 01 Sep 2023 09:45:58 +0000
ROA not before: Fri 01 Sep 2023 09:45:58 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18182
IP address blocks: 61.64.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2925 (0xb6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Validity
Not Before: Sep 1 09:45:58 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=03CA028DD46B22827A057ABC53F3E49B0B5563FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:62:ea:3c:f1:9c:26:3f:43:f6:4a:ef:0b:f0:
71:28:04:c7:15:e1:27:a8:a5:21:79:68:81:98:51:
9a:e8:e3:f9:25:60:76:a2:e4:92:9a:a4:0f:52:ec:
84:02:04:72:78:12:c8:ac:e3:23:88:8c:2c:12:ba:
9d:2b:ad:ce:59:a7:ac:ae:c0:10:e7:6d:3f:93:e9:
1b:df:ee:62:ed:b1:a2:43:c2:ee:1d:16:1d:f6:d0:
d5:0a:6b:14:72:3f:ba:58:0b:1b:07:94:ce:25:5d:
72:53:68:76:38:b6:12:44:cb:7a:f7:9d:56:3e:21:
cc:c4:f2:da:4c:47:8a:1f:c5:ba:1c:c2:fc:ad:97:
75:1b:cc:b4:42:e7:0c:1a:a8:e9:a0:55:31:41:b5:
6e:5c:6f:62:38:d2:bb:a4:9f:1c:58:dc:3e:4c:a8:
ec:a3:83:88:1e:ca:28:3a:24:51:ef:fd:aa:f7:38:
48:ea:05:45:bc:2c:01:c3:5a:6b:54:ff:37:98:af:
6a:3c:9a:7e:f9:1e:5c:74:f9:b2:79:31:d1:7e:76:
24:b5:bd:6c:ed:44:ef:3d:9a:8e:e6:5d:c6:a6:48:
78:f0:38:5d:37:25:2c:f7:4a:d5:49:3f:a4:b2:e3:
77:80:30:aa:f3:8a:cb:00:68:b1:7a:91:68:46:a3:
d4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CA:02:8D:D4:6B:22:82:7A:05:7A:BC:53:F3:E4:9B:0B:55:63:FF
X509v3 Authority Key Identifier:
keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/A8oCjdRrIoJ6BXq8U_PkmwtVY_8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9b:3c:aa:ae:8a:1a:79:bf:d6:a9:46:b2:a4:46:72:aa:4f:68:
f5:20:e9:ba:97:1c:35:ab:03:d1:a7:7a:ca:78:cf:d1:84:72:
59:2c:54:f7:49:df:cb:d8:b4:46:46:bb:30:97:9d:87:c3:f5:
a0:a9:1e:4e:5d:3a:6e:fa:0d:ff:34:37:c3:e5:a8:07:e7:e4:
3e:71:50:68:b3:c9:65:0b:35:35:90:d3:58:52:b7:01:80:b0:
5e:a0:ff:69:87:d2:3c:fc:1a:bc:10:9f:e8:69:d9:ef:09:01:
7f:75:65:b7:47:96:f3:5b:57:ef:3a:ad:f2:fb:da:88:e6:7f:
d9:41:42:c3:ce:e4:b4:4b:88:4f:e1:ee:d6:64:57:85:15:09:
f9:6c:44:bd:3f:0d:78:8f:d9:41:3a:68:b5:c5:32:3b:5b:3c:
9d:b3:16:c1:7b:58:65:2d:b8:04:7d:cd:ca:3a:83:ac:ba:89:
45:5b:09:31:69:72:1a:45:01:55:7a:94:10:b4:da:a0:15:be:
e0:ca:5f:8a:42:e9:98:82:82:d4:93:90:ed:d7:9a:cf:12:92:
53:c9:af:1d:15:30:ed:80:dc:2c:37:fa:1b:12:0d:4f:51:6a:
6e:f7:84:6c:8f:cd:ad:3c:dc:8c:71:16:b2:ec:9b:69:d6:de:
87:08:d0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org