Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/DCEHT7GmJ6R77epL_4J9hdh3Ey8.roa
File: DCEHT7GmJ6R77epL_4J9hdh3Ey8.roa (raw, json)
Hash identifier: QJsULHYPKtkz9ir/DAlbnZEkAWKTA5fu2yAYPG4QrDc=
Subject key identifier: 0C:21:07:4F:B1:A6:27:A4:7B:ED:EA:4B:FF:82:7D:85:D8:77:13:2F
Certificate issuer: /CN=F297B39C40002EFADBDDE272B637AD61A9F51A45
Certificate serial: 0F
Authority key identifier: F2:97:B3:9C:40:00:2E:FA:DB:DD:E2:72:B6:37:AD:61:A9:F5:1A:45
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8peznEAALvrb3eJytjetYan1GkU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/DCEHT7GmJ6R77epL_4J9hdh3Ey8.roa
Signing time: Fri 11 Oct 2024 06:13:24 +0000
ROA not before: Fri 11 Oct 2024 06:13:24 +0000
ROA not after: Wed 08 Oct 2025 15:30:28 +0000
asID: 38047
IP address blocks: 2401:cae0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F297B39C40002EFADBDDE272B637AD61A9F51A45
Validity
Not Before: Oct 11 06:13:24 2024 GMT
Not After : Oct 8 15:30:28 2025 GMT
Subject: CN=0C21074FB1A627A47BEDEA4BFF827D85D877132F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:98:b6:b4:18:b6:61:00:40:e1:11:26:da:7a:
ae:da:ab:c6:eb:1f:72:4c:0d:47:1c:0b:eb:19:a4:
95:7d:9e:74:9d:05:a6:1d:1f:c8:81:d4:d0:df:d8:
30:e5:62:3b:0f:0f:4c:ed:56:d9:4f:20:68:02:a0:
ce:09:66:1a:98:ad:4f:82:22:03:e9:e6:dd:3b:8b:
63:36:1b:95:c7:aa:c4:70:2b:a2:89:55:2a:9b:b2:
c8:b5:b6:e3:ef:14:70:49:b2:a9:66:4c:b8:0b:1c:
a7:ae:46:e3:d9:c4:54:ea:6f:23:53:4b:9e:82:89:
13:11:cd:9e:34:57:cf:3e:4f:9a:be:c5:b0:bf:77:
c7:9c:33:37:50:9e:c8:5f:59:ca:78:7f:04:f5:46:
59:65:87:12:8c:ce:ba:39:91:5e:8f:55:5c:e6:06:
4c:7b:11:0b:72:eb:27:54:7e:30:c0:cd:96:08:bf:
3e:4a:8b:8e:37:18:bc:1f:ee:5d:f3:e4:96:84:32:
a4:9f:07:04:2b:1d:79:57:3d:8e:0f:4d:a7:31:51:
d6:d5:69:6e:34:09:1a:8c:f0:f4:d2:39:54:38:9a:
7c:f9:fa:12:8f:9b:94:82:74:a4:f7:ae:96:eb:b5:
83:96:47:b2:53:28:4e:69:13:bb:cf:99:21:41:76:
09:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:21:07:4F:B1:A6:27:A4:7B:ED:EA:4B:FF:82:7D:85:D8:77:13:2F
X509v3 Authority Key Identifier:
keyid:F2:97:B3:9C:40:00:2E:FA:DB:DD:E2:72:B6:37:AD:61:A9:F5:1A:45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/8peznEAALvrb3eJytjetYan1GkU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8peznEAALvrb3eJytjetYan1GkU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWAN_NO1/DCEHT7GmJ6R77epL_4J9hdh3Ey8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:cae0::/32
Signature Algorithm: sha256WithRSAEncryption
21:7d:b9:ab:c0:3f:0b:82:53:90:9c:7d:7f:9f:d3:14:99:66:
87:4a:ed:86:91:24:86:50:b9:56:7e:3c:56:84:cc:6c:d6:ae:
cd:6a:5d:17:a6:cb:c8:af:04:43:31:97:50:16:a3:65:34:a3:
f0:60:f5:59:33:eb:3f:d7:d5:e0:eb:4a:35:18:1b:53:8b:51:
ee:20:2c:4b:37:98:83:68:51:6a:a1:ea:50:c3:41:21:c4:07:
3f:a1:41:21:2f:9f:33:d1:1c:35:2d:ab:81:73:7b:2a:2a:b7:
dd:a9:d8:ec:0e:09:13:94:f3:25:69:b3:86:6b:d7:19:d6:7e:
ae:af:a1:a4:b1:b7:15:f1:a0:f1:c0:ba:82:89:c6:2b:ae:eb:
54:c2:e1:88:7c:16:9e:57:08:69:9d:8f:14:85:eb:db:2d:f0:
d3:cc:1d:40:a2:60:98:0f:46:6d:a4:cb:74:c2:4b:8b:c5:32:
49:25:f3:f2:88:36:ab:78:4e:b1:ea:b5:83:10:c6:f4:e6:7c:
2c:8a:bb:66:fe:d6:95:7f:f9:42:ba:1d:2c:8b:d7:9b:ff:4d:
87:1b:dc:e0:f9:e2:0c:12:bc:d3:45:e6:a2:6e:f2:cb:09:97:
3a:60:fb:0d:df:ae:1f:ca:18:23:be:cb:a4:0c:9e:5b:9d:c9:
e5:79:c0:f3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 26 01:04:20 2024 by rpki-client on console-fra.rpki-client.org