Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mIZcBsgSJK8aRt3zVTJh2-YV5bk.roa
File: mIZcBsgSJK8aRt3zVTJh2-YV5bk.roa (raw, json)
Hash identifier: /WXZ4ubUiKHU27SCZuP6t6fDUjQ9udCurz3HHN64G4c=
Subject key identifier: 98:86:5C:06:C8:12:24:AF:1A:46:DD:F3:55:32:61:DB:E6:15:E5:B9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A81
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mIZcBsgSJK8aRt3zVTJh2-YV5bk.roa
Signing time: Fri 01 Sep 2023 10:07:58 +0000
ROA not before: Fri 01 Sep 2023 10:07:58 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 2407:4d00:ff04::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10881 (0x2a81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:58 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=98865C06C81224AF1A46DDF3553261DBE615E5B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:51:56:27:0a:1e:a0:07:a8:91:62:75:13:be:
a7:17:4a:f0:72:d1:96:7e:6c:38:24:ee:02:60:17:
0a:7e:31:8e:fc:01:e3:e3:8e:7a:8d:e5:24:04:9f:
ae:64:7d:32:02:a9:68:03:90:e4:a6:c3:e2:98:19:
58:ea:e3:d4:b0:db:07:9a:d1:f3:d4:b8:df:b0:b0:
f0:22:a9:3a:0c:70:f0:c7:5a:51:35:d3:5d:5b:5d:
b5:42:17:c3:a8:6c:b1:09:c2:15:92:c9:90:c5:1f:
31:8a:fb:d3:c0:67:63:cf:29:02:67:37:a7:b6:f2:
db:fb:bd:86:05:01:c9:ab:ab:41:77:93:c3:c3:2f:
69:c0:11:c9:4c:4e:24:f0:8d:a6:ef:97:d9:37:89:
fd:63:01:f9:b7:bb:1d:ba:7f:3e:4f:0d:d6:23:85:
c6:ab:85:00:d9:fe:f6:2d:f5:ea:83:6e:46:73:ec:
a0:9c:2e:54:7f:e9:77:16:17:22:a6:6b:24:34:d1:
88:85:1b:ad:bc:94:87:7c:2f:1d:bb:9e:3f:39:07:
eb:0d:f6:c8:7c:3d:ad:33:9e:09:7e:87:1c:f0:03:
87:ef:45:0c:52:bd:3e:c6:97:c3:d8:c1:78:01:66:
9c:6c:96:42:4f:80:aa:a1:9c:67:db:2a:43:51:db:
2a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:86:5C:06:C8:12:24:AF:1A:46:DD:F3:55:32:61:DB:E6:15:E5:B9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mIZcBsgSJK8aRt3zVTJh2-YV5bk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4d00:ff04::/48
Signature Algorithm: sha256WithRSAEncryption
59:ae:9f:df:4a:b4:ea:bc:ac:56:8b:fc:58:e8:f7:fd:11:21:
92:88:8e:c3:d6:14:fc:50:38:8a:97:2d:e3:8f:35:8d:1b:8c:
e7:8d:fa:a6:e8:81:ca:f9:0a:38:e4:ab:87:dc:5f:53:fd:29:
e9:ed:87:51:a4:f3:72:c3:25:ac:76:6a:b0:06:37:03:c5:72:
5f:8d:b8:00:3d:af:0b:68:a7:df:e1:f5:47:a3:33:7e:8d:84:
6e:9a:a8:10:fd:c7:46:5b:3f:cd:eb:54:f5:c9:28:5c:77:d6:
fc:af:2c:5b:f9:46:0e:ab:6e:05:68:a3:f7:7f:29:47:d5:d6:
94:fa:0d:c9:5c:f9:71:d4:57:7a:fc:a7:e0:c4:c6:06:de:b8:
07:08:33:6a:bd:e6:ed:a8:09:1f:f5:b6:89:25:e0:3e:e1:4d:
6a:98:ff:b7:58:8e:6e:76:7d:a7:97:28:f1:82:18:28:4c:bc:
f4:bd:04:71:7d:58:1e:9f:bc:a4:71:20:87:d8:1c:e1:c4:3b:
b8:65:08:2f:a8:dc:58:b4:58:63:cb:26:3d:95:ee:d9:5f:c9:
30:bc:01:4e:4d:7a:6b:cd:07:e2:40:1f:79:5f:68:dd:21:31:
8a:55:30:d2:73:a4:8e:eb:10:04:62:4f:23:de:1c:8d:d7:45:
78:b4:61:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org