Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/54gPM0kcozPSOf772oPxII4HCgU.roa
File: 54gPM0kcozPSOf772oPxII4HCgU.roa (raw, json)
Hash identifier: SARB8PiVkb8raEfNhzR/MNVHw4O7tinNR5YLwX10xg4=
Subject key identifier: E7:88:0F:33:49:1C:A3:33:D2:39:FE:FB:DA:83:F1:20:8E:07:0A:05
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2952
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/54gPM0kcozPSOf772oPxII4HCgU.roa
Signing time: Fri 01 Sep 2023 10:06:23 +0000
ROA not before: Fri 01 Sep 2023 10:06:23 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 2407:4d00:ff03::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10578 (0x2952)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:23 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E7880F33491CA333D239FEFBDA83F1208E070A05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:cb:9c:32:63:67:f7:6a:7b:af:c1:4e:91:
a9:87:4b:2a:d1:af:c7:1c:d0:5a:f4:b5:62:cf:98:
43:df:26:64:91:10:5b:c1:db:02:7e:5b:07:78:08:
fe:10:ed:01:48:66:13:d9:ef:9d:ad:01:17:ad:45:
81:4f:98:be:5c:c5:52:03:07:42:58:8c:c8:96:c2:
23:a9:c6:44:27:c7:f8:84:b7:be:d4:8d:2f:bb:2d:
0e:26:51:ce:72:ee:c7:da:92:cf:f4:e0:50:3a:59:
7a:53:ca:9c:0f:d6:0f:72:ae:34:9d:b0:47:6c:ab:
c0:d6:1c:12:21:e7:d3:ca:4d:b7:d1:74:2c:b7:fe:
d7:b1:39:f9:da:12:c4:05:ce:15:3b:2d:d8:0f:c0:
57:72:67:fe:d7:b1:74:3a:c0:6f:2e:95:e0:d3:df:
e9:03:88:74:b1:be:6d:a8:2d:d5:02:0b:81:d5:5d:
1a:f2:2a:19:65:2f:12:c3:d3:aa:e7:15:52:a8:c7:
7f:13:10:3c:17:cb:1e:b6:3e:17:5c:15:f0:04:02:
36:01:f9:81:e1:52:84:1a:0d:db:b3:e0:5d:15:9e:
40:a1:0c:24:7d:79:90:fd:c2:01:23:e2:06:69:69:
04:7d:69:1a:bb:9e:5d:76:a8:c5:cb:5d:2c:7b:95:
12:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:88:0F:33:49:1C:A3:33:D2:39:FE:FB:DA:83:F1:20:8E:07:0A:05
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/54gPM0kcozPSOf772oPxII4HCgU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4d00:ff03::/48
Signature Algorithm: sha256WithRSAEncryption
02:e1:08:36:3c:3f:38:5d:49:90:37:64:a9:d3:c2:8b:68:e0:
1a:a8:a9:da:bf:79:5c:ce:3b:a6:62:35:00:35:f8:f1:62:f7:
40:14:96:2d:78:5b:de:4e:22:26:44:49:9e:86:bd:4a:4a:c1:
a9:2a:c9:d3:a1:8e:68:5f:18:37:83:9b:9a:15:cb:e7:4d:ea:
66:6a:7d:89:d2:35:20:15:7f:98:48:cc:7d:2e:f8:a7:5c:5d:
57:5d:0d:6d:9f:fa:b1:c1:ab:73:ba:6a:f6:52:31:33:56:71:
eb:fc:11:59:c0:89:88:73:5e:ca:29:9f:55:db:34:7b:3a:25:
06:e8:45:fc:92:d9:14:af:97:1d:38:df:05:79:e0:2e:c0:51:
80:9c:9d:c9:7b:e2:dd:74:a1:61:8d:ef:12:7c:db:4a:b4:01:
77:2d:64:91:49:aa:83:cd:2e:49:23:05:8c:f4:fe:a9:2d:26:
97:a5:06:17:0e:a4:85:45:51:ac:2a:eb:f0:43:92:1e:6f:b4:
19:d2:3e:f8:7a:ef:87:6c:a2:ed:ec:2f:56:fc:b6:c1:3a:22:
94:69:23:55:b7:95:c7:d9:79:11:b7:c7:4d:01:75:83:ad:e8:
a7:b7:07:05:cf:b8:c6:ea:97:1e:26:31:cc:e1:f1:ca:be:91:
7b:50:cc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org