Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/iX87KZbuVWOimwLtjyoRMUEhbGs.roa
File: iX87KZbuVWOimwLtjyoRMUEhbGs.roa (raw, json)
Hash identifier: trCVNHQHNzk3G5Cumd2MWgJwEoAsOsoOxU+NH5FVc4s=
Subject key identifier: 89:7F:3B:29:96:EE:55:63:A2:9B:02:ED:8F:2A:11:31:41:21:6C:6B
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 0C61
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/iX87KZbuVWOimwLtjyoRMUEhbGs.roa
Signing time: Mon 17 Jun 2024 08:53:25 +0000
ROA not before: Mon 17 Jun 2024 08:53:25 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 59.102.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3169 (0xc61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Jun 17 08:53:25 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=897F3B2996EE5563A29B02ED8F2A113141216C6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:98:2e:2d:86:24:31:19:f8:da:1f:22:04:
7f:ca:19:c4:9d:96:b6:5c:3c:f5:4b:ca:42:ac:25:
6a:29:d0:12:f2:c9:23:35:a4:52:2a:85:3b:b1:88:
19:9b:5e:86:d3:a8:49:34:4d:c1:c7:f1:63:95:94:
5c:6b:69:f4:31:c9:54:6a:d0:58:b4:e0:0f:7e:db:
a2:57:11:29:30:52:28:4f:e9:c1:68:ed:13:57:4d:
8e:5b:c0:6a:49:b7:20:de:56:f0:f6:af:2f:3a:55:
63:85:08:e6:55:a4:2f:17:96:96:20:63:70:ef:26:
e8:e8:d1:68:8f:5b:76:55:13:34:ca:c8:d5:69:d9:
f1:c8:9a:34:a8:82:ae:18:55:49:31:39:0f:38:0c:
28:9f:c2:e9:ec:00:ac:9a:64:af:06:92:cb:63:d2:
60:9e:b6:ff:97:28:92:3c:0f:d3:ac:d8:c9:5a:a6:
3c:b2:3e:ce:54:db:e0:91:d7:dd:28:99:f1:dc:fb:
9e:5c:e5:02:07:bd:59:18:d9:59:32:ed:ce:3c:00:
1c:41:f9:42:bb:d8:42:54:9b:78:fb:4e:1c:7c:37:
e5:fe:79:a0:dd:31:be:b9:7d:0d:6e:5b:19:bc:7d:
26:bd:68:30:6c:84:2a:b1:59:5b:b6:69:fa:a8:12:
da:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7F:3B:29:96:EE:55:63:A2:9B:02:ED:8F:2A:11:31:41:21:6C:6B
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/iX87KZbuVWOimwLtjyoRMUEhbGs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.102.128.0/22
Signature Algorithm: sha256WithRSAEncryption
09:86:c6:73:5b:af:b1:88:33:bf:66:f4:13:3c:da:90:ab:e4:
91:a8:29:f6:5f:35:4b:24:0d:9e:ac:de:8c:ec:c4:28:40:65:
61:ab:30:46:8a:f7:bf:6c:87:e1:64:1f:62:51:5c:eb:62:86:
16:5e:51:55:04:c2:1d:5e:77:19:56:a7:31:c3:fb:e0:c3:c8:
a8:95:dd:d7:5d:5c:da:35:90:ae:98:16:b7:0c:6b:c9:86:40:
77:a4:44:17:96:2b:bd:4b:9e:88:af:aa:8c:49:c5:a6:05:9d:
de:58:04:26:e2:06:cb:97:ab:7f:30:87:7c:7a:23:2d:69:ca:
4c:bf:69:de:9b:6a:f2:b4:4a:40:82:04:1b:b8:7c:e3:a8:18:
66:9f:50:ae:d9:1b:fb:08:20:32:fa:d1:c6:3b:33:ec:44:35:
b6:b3:8c:bd:5e:ad:5c:40:c2:7f:65:12:3e:af:ff:b3:3c:28:
ea:31:37:a1:d4:43:3b:81:55:32:f4:9f:be:a4:10:fe:d2:77:
d9:10:59:05:9b:7d:ac:25:c8:53:c4:cc:a0:1b:0d:43:64:1d:
fe:1b:89:0a:4e:3c:9d:67:3f:28:b6:9d:6d:69:ea:ba:78:f2:
34:bd:98:bf:e9:98:3b:e2:d8:6a:df:64:87:da:e0:cf:74:c9:
58:68:00:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org