Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIH/B42SBWxWNtSpatrRVMPdQwOqu8I.roa
File: B42SBWxWNtSpatrRVMPdQwOqu8I.roa (raw, json)
Hash identifier: sstPiLiFoJTDCdAZBEN58o5G/+rEOD7oIjGuOmiFYfo=
Subject key identifier: 07:8D:92:05:6C:56:36:D4:A9:6A:DA:D1:54:C3:DD:43:03:AA:BB:C2
Certificate issuer: /CN=2D7204617354D70523B6F65A270712B6B19D815E
Certificate serial: 0C44
Authority key identifier: 2D:72:04:61:73:54:D7:05:23:B6:F6:5A:27:07:12:B6:B1:9D:81:5E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/B42SBWxWNtSpatrRVMPdQwOqu8I.roa
Signing time: Thu 15 Aug 2024 16:36:30 +0000
ROA not before: Thu 15 Aug 2024 16:36:30 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38254
IP address blocks: 2403:7f40:e001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3140 (0xc44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D7204617354D70523B6F65A270712B6B19D815E
Validity
Not Before: Aug 15 16:36:30 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=078D92056C5636D4A96ADAD154C3DD4303AABBC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1e:f6:41:c2:f6:7c:43:66:9b:8f:ea:c7:c2:
05:a5:0e:b3:ab:5b:1a:1b:67:23:53:ed:f6:24:0b:
ec:b4:db:e1:a4:5c:f7:81:7d:67:4a:bb:c9:47:70:
cb:d8:56:6b:f9:8d:2e:e7:f1:98:f7:a3:9c:66:27:
64:8a:b8:65:f4:56:9d:12:cc:b6:89:01:4c:fb:15:
bc:2c:77:68:8c:06:52:fd:18:2e:06:42:7a:e9:b3:
9c:ba:b8:3a:8c:eb:f0:78:e2:9e:c7:d2:9c:a8:a7:
e1:5f:56:21:99:b0:d9:ad:17:eb:7a:52:e8:de:1f:
af:e8:5a:d1:4e:af:13:ad:75:bf:e2:83:28:df:2b:
05:0b:29:32:65:32:d5:fc:c4:13:bd:6b:5d:61:34:
f2:d6:65:16:f5:4d:c4:f1:c7:8b:6c:0c:5e:00:9e:
0c:ff:b5:39:ed:c5:58:05:25:f9:07:0d:56:fb:7b:
a0:87:d1:4a:49:49:59:01:16:4e:28:54:d7:0f:3f:
9d:c6:e4:7a:36:df:3f:a0:c0:e8:7d:27:dc:eb:c4:
7b:0f:50:ee:18:57:40:70:ff:f5:85:2a:be:33:36:
8d:98:91:bf:9e:1f:7b:7a:de:f1:56:29:7b:a7:f4:
b9:78:29:b4:cd:f1:2d:b8:7b:ea:e0:ff:02:97:2b:
b2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8D:92:05:6C:56:36:D4:A9:6A:DA:D1:54:C3:DD:43:03:AA:BB:C2
X509v3 Authority Key Identifier:
keyid:2D:72:04:61:73:54:D7:05:23:B6:F6:5A:27:07:12:B6:B1:9D:81:5E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/LXIEYXNU1wUjtvZaJwcStrGdgV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/B42SBWxWNtSpatrRVMPdQwOqu8I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:7f40:e001::/48
Signature Algorithm: sha256WithRSAEncryption
7b:49:29:05:60:cd:b7:99:5f:f9:50:d7:5a:87:b4:f3:bf:01:
a2:27:65:d5:c5:89:25:9c:17:d4:12:71:ea:93:c9:76:f6:57:
46:ff:42:2b:41:4f:03:41:6f:27:18:82:ce:4c:41:0f:3a:3d:
3c:29:2f:b3:f4:7c:c8:11:3f:e0:55:b4:5a:4b:e2:30:3c:0c:
fd:bf:8d:57:5e:73:38:4d:1e:52:d2:13:0a:5d:71:72:3a:b3:
b3:9a:63:da:03:be:81:a1:aa:82:5a:fe:c0:95:1f:8f:f7:d4:
ad:4d:02:7a:34:81:a8:d3:a0:8a:e4:93:99:c7:6c:97:20:d8:
e4:d6:47:6b:f7:28:fe:cc:d4:b7:d4:8a:69:75:a9:96:07:d4:
24:4b:69:06:e2:16:41:b9:87:88:f2:11:f4:89:fb:a3:94:d5:
29:1a:d6:ab:98:f3:de:83:8f:31:0d:2f:cb:20:21:75:69:f9:
26:34:ef:ea:ee:9d:2b:20:9e:93:b0:23:a2:b1:11:c3:ec:96:
14:ae:26:e6:69:ed:08:97:d8:87:8c:d8:93:96:99:73:de:fa:
24:1d:0c:35:2c:58:77:b0:d0:26:66:de:1a:05:0f:f9:cf:ee:
e6:35:c2:80:cd:9c:4b:a7:9e:d2:ca:34:9c:f3:e4:cb:27:2e:
12:d1:97:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org