Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/WP1hJDCBhVVjsPPyZGQCtNTrbhc.roa
File: WP1hJDCBhVVjsPPyZGQCtNTrbhc.roa (raw, json)
Hash identifier: fYQGiCXzZDVHNA8TPKehuaoqghEmPDK3jmnU9wSZThc=
Subject key identifier: 58:FD:61:24:30:81:85:55:63:B0:F3:F2:64:64:02:B4:D4:EB:6E:17
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 0B8D
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/WP1hJDCBhVVjsPPyZGQCtNTrbhc.roa
Signing time: Fri 01 Sep 2023 09:59:55 +0000
ROA not before: Fri 01 Sep 2023 09:59:55 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131596
IP address blocks: 61.57.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2957 (0xb8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Sep 1 09:59:55 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=58FD61243081855563B0F3F2646402B4D4EB6E17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:50:cd:68:c9:e5:56:d7:11:38:00:29:13:bd:
1f:1d:cb:56:d2:87:f9:09:3d:da:b9:7a:6a:df:e5:
dc:a1:75:4a:00:86:5c:f5:23:a3:ae:4d:bf:69:1d:
40:0a:0e:ca:f1:bd:2b:6d:8a:a9:7e:08:65:a2:9d:
93:e5:f1:49:50:eb:11:1e:7c:8f:72:76:cf:81:1d:
8a:7f:1d:f7:91:62:fe:24:3f:8e:3e:eb:cf:8b:82:
40:13:dc:63:a5:f9:f0:38:3b:db:1a:c0:b8:10:af:
cc:a5:7a:76:0d:84:64:78:d5:a3:08:ea:e9:50:07:
e0:cc:ad:7a:7a:e7:fe:b6:59:fb:43:b2:20:a4:91:
a3:12:a3:cb:4b:20:25:d8:a2:8e:08:b7:fa:2a:42:
00:22:47:69:a8:55:ea:28:7f:91:d9:88:71:25:a9:
52:a9:3d:de:a5:e4:f3:7b:74:ad:07:89:f2:96:25:
7b:49:a6:f2:72:4e:2e:73:01:9f:ff:b8:62:28:09:
df:30:ef:63:fc:e0:45:34:88:3f:07:58:b7:f2:ae:
39:87:17:46:85:ca:d4:85:eb:64:93:ad:33:99:45:
82:9c:c1:34:b5:9e:90:bc:e1:4d:f1:07:8f:a7:73:
96:89:b4:40:e1:88:fa:86:3d:3d:63:90:7f:30:dd:
de:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FD:61:24:30:81:85:55:63:B0:F3:F2:64:64:02:B4:D4:EB:6E:17
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/WP1hJDCBhVVjsPPyZGQCtNTrbhc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.57.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1e:da:ee:d5:e3:1d:8b:fc:43:27:87:a3:14:2f:50:01:b0:e1:
99:60:1a:ac:00:f5:fd:14:1b:6f:23:63:ea:c3:b0:c7:27:6b:
b7:d4:ec:d1:39:8c:c8:7a:64:63:67:e4:c0:3b:5d:64:ba:21:
94:13:f1:6a:21:37:c2:94:ed:e7:ec:00:ed:50:bd:67:56:32:
2e:d5:23:bf:70:c3:bd:14:21:05:78:99:be:c5:e9:b0:ca:be:
3d:89:dd:95:0b:a5:0d:33:57:b3:59:b9:a1:3b:78:a4:ca:09:
93:e1:c1:3f:09:14:04:2b:49:f2:46:ea:01:ff:e4:d5:7f:63:
8d:68:52:9e:55:91:89:49:91:1d:73:87:9b:ba:ae:68:06:b4:
8a:a8:6e:28:fa:76:f7:0f:6e:ce:94:31:ba:82:83:9a:02:5b:
45:04:db:3d:51:d7:15:9f:80:c1:81:53:46:0e:9f:ee:af:39:
50:9a:a3:b3:83:4b:d1:35:bf:9d:fa:e0:9e:42:be:7f:b4:f2:
21:54:d6:b7:3e:14:07:31:7a:ce:47:81:80:00:78:1e:d3:bd:
5c:30:1f:e7:ef:45:98:1b:47:a9:b5:26:68:47:a1:da:b2:16:
e9:ed:4c:46:20:00:c2:ac:e5:a8:4a:87:10:4b:1a:b3:fa:64:
32:48:e0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org