Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/9IbmFFHgGlLRJUsBwdMXqZYUTp8.roa
File: 9IbmFFHgGlLRJUsBwdMXqZYUTp8.roa (raw, json)
Hash identifier: Wg4uHmTVyB4HG7CQ1bONXOLgvy7WQyNLp2FbEzeWG7s=
Subject key identifier: F4:86:E6:14:51:E0:1A:52:D1:25:4B:01:C1:D3:17:A9:96:14:4E:9F
Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial: 0BA3
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/9IbmFFHgGlLRJUsBwdMXqZYUTp8.roa
Signing time: Fri 01 Sep 2023 10:01:08 +0000
ROA not before: Fri 01 Sep 2023 10:01:08 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18049
IP address blocks: 61.60.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2979 (0xba3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Validity
Not Before: Sep 1 10:01:08 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F486E61451E01A52D1254B01C1D317A996144E9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:50:8c:ba:1f:f8:b3:4d:0c:44:af:4c:3a:1c:
f1:17:e4:85:06:d1:bd:33:6c:df:a9:77:3d:db:d7:
91:6c:08:ce:93:f7:52:9f:e7:c1:7b:50:b3:b4:f5:
10:21:34:11:03:de:f6:70:04:6c:6f:bb:73:db:a9:
45:97:9d:f8:f7:b5:1d:97:9c:fa:0a:e6:05:08:e8:
ab:74:bf:be:19:29:0c:3a:32:9e:f4:d7:3d:a0:22:
2f:24:a6:92:d7:4e:95:66:c3:6e:0f:db:f8:2c:9c:
34:58:e4:cb:c8:c3:69:55:2e:5b:28:e2:ba:7f:00:
2a:e0:58:35:18:37:82:b1:07:77:64:d5:bb:93:7c:
58:20:6c:2c:84:2b:33:50:3d:be:b4:c0:56:96:5a:
f2:09:e6:fe:03:be:2a:c3:c4:8f:84:15:1c:5d:a0:
d6:4a:c7:12:7b:a7:b8:7d:43:58:3f:99:1a:fd:8e:
05:9c:bd:00:9a:ad:70:61:11:64:16:d2:09:37:38:
4d:9b:59:1f:be:9c:c4:5e:5b:6d:67:f5:12:1a:0f:
a6:49:f1:c5:71:df:58:7b:af:5d:87:ea:6b:05:91:
ae:c3:ac:12:51:d5:60:f6:f5:8f:1b:87:19:75:62:
b7:d2:b7:a9:b0:e2:d3:2f:a7:7d:c9:92:2e:c3:1c:
b4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:86:E6:14:51:E0:1A:52:D1:25:4B:01:C1:D3:17:A9:96:14:4E:9F
X509v3 Authority Key Identifier:
keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/9IbmFFHgGlLRJUsBwdMXqZYUTp8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.224.0/20
Signature Algorithm: sha256WithRSAEncryption
88:83:6b:54:26:83:48:11:af:91:93:f0:44:64:7b:b0:1d:de:
1b:f4:e3:11:19:f2:78:5b:07:cb:76:45:62:91:ab:3f:bb:db:
84:9b:5f:d1:b4:2e:a8:98:eb:13:29:4a:82:36:79:5a:55:f1:
c6:df:2a:f7:9c:0c:9a:47:cd:1c:8e:7c:a4:d9:35:64:ed:55:
91:e4:be:e4:ca:45:b9:ee:fe:85:6d:87:da:99:90:0b:13:51:
8a:91:42:76:3c:41:bd:d0:34:15:8a:db:c4:4a:a8:c1:e8:3a:
2d:20:a6:ca:58:d5:71:18:a1:90:bc:af:b6:78:65:9c:04:0b:
55:72:c8:a2:e9:6e:70:d0:4e:07:1c:43:3f:2f:da:c9:ea:8d:
98:39:bd:72:cc:b8:01:f1:b7:4f:5c:7a:1d:35:dd:f0:64:e6:
f7:19:6a:a1:ef:30:18:9f:cc:02:af:0f:75:ef:72:d8:72:7a:
fd:df:39:5c:3b:6b:4b:56:bc:a3:94:38:61:6c:90:4e:9a:9f:
b9:dc:06:65:fa:26:24:2c:c2:c0:f3:41:c0:bd:9f:ca:a5:68:
50:33:6d:15:a6:c5:b1:be:e2:86:45:df:23:85:85:cc:10:22:
f7:74:03:2f:50:1f:e0:2c:9d:87:d9:a6:7b:c0:b7:a0:5c:bb:
3b:09:c0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org