Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYSNET/KCoaoUJSr12LBtpli1mhhUy1pdM.roa
File: KCoaoUJSr12LBtpli1mhhUy1pdM.roa (raw, json)
Hash identifier: 6IYfLsb3x6O09OaqJxN76WaV0rbSxgsrrOXU0deEFP4=
Subject key identifier: 28:2A:1A:A1:42:52:AF:5D:8B:06:DA:65:8B:59:A1:85:4C:B5:A5:D3
Certificate issuer: /CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC
Certificate serial: 0B5B
Authority key identifier: 96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/KCoaoUJSr12LBtpli1mhhUy1pdM.roa
Signing time: Fri 01 Sep 2023 09:48:56 +0000
ROA not before: Fri 01 Sep 2023 09:48:56 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4783
IP address blocks: 210.67.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2907 (0xb5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC
Validity
Not Before: Sep 1 09:48:56 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=282A1AA14252AF5D8B06DA658B59A1854CB5A5D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0d:25:57:ee:ca:05:72:e2:e6:d8:80:36:87:
ed:9a:97:50:ed:d8:66:86:74:c6:9d:48:f8:30:ab:
d2:91:19:2a:75:f8:54:ec:16:68:0d:df:e0:c7:bb:
b5:a9:3a:73:75:13:35:83:a3:73:54:e9:78:72:82:
b5:68:17:bf:7c:89:0b:d0:e3:1d:3a:5d:ef:80:e7:
f9:df:3e:b1:38:eb:e9:eb:15:da:30:1b:9d:10:82:
b8:d5:ba:09:c2:35:6e:f6:1b:5e:f7:5a:fc:b0:97:
fd:76:d8:24:69:e7:3e:27:95:01:0b:60:64:a2:0f:
7d:47:fc:ed:27:53:44:4d:4a:b1:ed:d5:5a:71:4c:
58:97:16:86:39:b4:f6:0e:47:d2:c5:71:cd:22:fd:
27:20:e9:8e:53:f0:5b:f6:61:6f:de:cd:c9:2e:35:
90:8d:6c:c1:05:eb:03:84:31:22:71:28:bb:81:2d:
0e:64:47:77:f2:7b:fe:5a:66:59:2d:5a:48:65:5c:
5e:8e:e1:2c:56:aa:b7:e4:84:7c:b2:5a:63:50:b7:
bd:13:12:5d:c3:af:6f:37:77:e7:5b:34:4f:e9:b5:
75:fd:76:ce:c0:3d:e7:2e:d8:26:e1:f7:f9:30:ef:
b9:ec:ce:9f:70:6c:13:a5:22:f8:ce:75:7c:6a:5b:
db:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2A:1A:A1:42:52:AF:5D:8B:06:DA:65:8B:59:A1:85:4C:B5:A5:D3
X509v3 Authority Key Identifier:
keyid:96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/KCoaoUJSr12LBtpli1mhhUy1pdM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.67.128.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:f9:00:8d:07:c0:95:1e:8d:ee:81:64:61:f0:f9:9c:2d:48:
ca:e6:cf:b5:f6:10:29:9d:96:5a:f1:9b:35:91:78:f1:73:54:
2e:1f:40:6b:9a:54:89:c2:22:75:b6:3a:6a:d2:cd:ae:93:96:
29:69:1f:f9:60:b0:4d:a4:be:42:be:46:8e:ad:0d:b3:e5:ce:
35:c1:73:52:9a:6a:61:eb:da:6a:bc:a7:51:03:c9:b6:57:bb:
be:2a:e7:8f:36:63:d5:71:57:79:27:cf:f1:a7:6e:f7:22:77:
2b:e8:6f:a9:9c:c8:b9:eb:cc:9a:2e:ea:5e:6d:2e:2d:cf:07:
7d:90:02:af:97:15:8c:c4:ad:6e:e0:08:26:a4:67:67:88:72:
d1:d9:8a:f3:6a:d6:a1:ed:a1:6f:24:e5:6a:eb:85:0f:e0:4c:
9f:1b:96:c7:d4:2e:98:4a:14:0b:59:ce:a8:06:19:1d:76:4c:
b2:69:99:5c:3f:c0:db:15:11:bf:c4:79:d9:7c:99:99:ce:b3:
b3:75:47:db:80:37:29:b8:61:a7:98:ab:e4:e2:b5:55:e5:dc:
eb:47:40:c8:82:17:8a:88:d1:c3:ce:13:f3:f0:a3:f4:55:01:
5c:9e:32:1e:e2:90:71:13:e1:62:bb:59:52:db:95:08:51:6f:
21:58:68:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org