Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/DFfVUs9mA_ofqhJrA_DNOyLm_jQ.roa
File: DFfVUs9mA_ofqhJrA_DNOyLm_jQ.roa (raw, json)
Hash identifier: Kuz2GwvAXEOASu2Zpafl7gcKtozX52RELzXLzEUS1mE=
Subject key identifier: 0C:57:D5:52:CF:66:03:FA:1F:AA:12:6B:03:F0:CD:3B:22:E6:FE:34
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 0C67
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/DFfVUs9mA_ofqhJrA_DNOyLm_jQ.roa
Signing time: Mon 17 Jun 2024 08:54:19 +0000
ROA not before: Mon 17 Jun 2024 08:54:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 61.58.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3175 (0xc67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Jun 17 08:54:19 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0C57D552CF6603FA1FAA126B03F0CD3B22E6FE34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4d:63:50:be:fd:6b:85:e2:90:6d:c5:5e:39:
fd:f4:97:30:be:2e:fc:5e:ea:08:9f:20:da:75:04:
ae:db:a9:50:07:80:86:eb:37:0d:a8:17:19:1f:02:
b2:41:05:91:7f:be:d7:f9:00:89:87:36:c0:44:7f:
78:bf:da:fd:3d:bb:d0:0f:24:01:61:e0:17:37:9b:
8f:51:d3:b6:c5:90:79:db:b9:f9:06:dc:40:b3:c8:
1f:16:a3:04:1f:4f:fd:f0:d5:86:f7:66:92:0e:bb:
6a:61:5e:6e:81:3d:83:e6:fc:db:74:a1:bb:01:c0:
ad:95:5f:85:52:3b:86:84:48:f0:0a:b9:ce:ce:15:
75:29:e0:df:06:30:38:53:16:73:98:f6:00:e1:9a:
06:ca:71:e9:fd:62:de:1b:8a:a3:c6:d6:7c:e7:f8:
ed:0b:98:b9:19:1c:56:4d:14:a7:90:46:05:81:3b:
e6:ea:90:5d:fc:86:a6:64:ba:a8:9a:a2:b8:18:62:
e6:96:cd:72:5a:ad:3f:89:98:16:6e:33:4e:11:19:
a4:8f:eb:17:75:8e:d3:ec:bd:09:4a:a9:a2:01:44:
98:2e:e5:1e:93:19:2a:cb:14:d2:ae:26:57:75:74:
ab:a6:f4:2e:ba:fc:f1:35:af:ab:b6:4c:f2:40:1b:
90:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:57:D5:52:CF:66:03:FA:1F:AA:12:6B:03:F0:CD:3B:22:E6:FE:34
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/DFfVUs9mA_ofqhJrA_DNOyLm_jQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.64.0/20
Signature Algorithm: sha256WithRSAEncryption
8a:cc:fe:61:e6:51:7f:a1:77:fa:6c:bb:e3:a9:8a:7c:ed:d3:
99:11:23:d1:2f:03:dd:97:02:69:51:46:b9:54:c6:4c:f7:b2:
68:4c:6e:cc:4c:72:26:a5:ba:23:d1:cc:43:d3:f3:84:90:01:
a9:06:ea:94:71:92:e1:cf:10:f1:16:03:87:0a:e6:87:c0:c9:
8f:27:61:60:ae:d9:12:41:ed:1a:b5:30:27:c7:cf:d2:87:23:
69:f7:3e:e6:2e:29:c7:3c:ca:76:57:6b:3c:34:53:19:1d:32:
7d:73:5c:ca:98:a5:b4:5e:19:28:28:0e:fd:e9:ba:1a:d9:fd:
d3:29:00:3f:3b:0b:7b:e6:8d:32:2f:d4:4b:a4:24:b8:2a:cf:
2f:f5:f0:24:cb:86:b1:1d:cd:6e:dc:3f:20:f3:b1:49:3c:75:
26:45:ad:4f:5b:70:2e:f4:81:08:d2:d8:26:bd:cf:12:62:23:
12:5d:1b:08:bc:9d:a2:1e:3a:29:21:2c:9d:d1:84:17:a9:b5:
40:8b:fe:e4:a9:5e:43:f2:54:31:11:c6:98:b2:41:a7:5f:58:
16:77:3f:0e:a9:48:e8:bf:0b:87:57:d8:e3:40:35:37:01:bb:
e4:a6:35:21:63:14:90:88:9c:a6:07:d9:e9:6c:34:60:d0:b6:
f0:da:57:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org