Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nBZQvEDF7a5V4PCvhtG4IjqbgXw.roa
File: nBZQvEDF7a5V4PCvhtG4IjqbgXw.roa (raw, json)
Hash identifier: I5PNQApZvkubmQNLXbhPlSQPN/8F6JpuZXcGyJPxmN4=
Subject key identifier: 9C:16:50:BC:40:C5:ED:AE:55:E0:F0:AF:86:D1:B8:22:3A:9B:81:7C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 293A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nBZQvEDF7a5V4PCvhtG4IjqbgXw.roa
Signing time: Fri 01 Sep 2023 10:06:18 +0000
ROA not before: Fri 01 Sep 2023 10:06:18 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 2407:4d00:fd02::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10554 (0x293a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:18 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9C1650BC40C5EDAE55E0F0AF86D1B8223A9B817C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a7:b8:38:ca:8c:b7:9f:6c:df:6a:e9:d4:a5:
7c:45:5e:38:57:85:b8:17:88:bb:2f:0d:c1:38:2d:
4e:6f:fb:e7:cb:30:52:39:5a:a5:57:7b:27:ad:7d:
11:83:d6:70:35:58:8a:40:62:8a:51:0e:c9:50:2e:
48:0c:0f:df:69:84:09:60:c3:e5:98:4d:17:ef:0d:
66:62:36:7b:cc:3f:7c:21:1d:84:f9:48:d4:91:f1:
7d:8f:68:9d:78:f5:ad:c0:01:e1:10:b5:2c:af:48:
45:d5:9b:4f:a1:b3:bd:65:03:69:69:88:ea:d3:3d:
f7:27:3d:9a:5f:45:ac:61:a3:dc:f4:d4:2e:34:7e:
a3:39:71:9f:27:0b:ef:f9:a4:43:8d:ca:b4:9b:80:
cf:f7:a8:55:3b:6d:15:16:b6:6e:c5:54:ae:67:94:
51:56:b7:0f:ef:57:f3:93:43:7d:d2:8e:81:de:e5:
d2:0a:7c:2a:ea:0c:cf:d5:f1:57:e4:bc:d0:ac:18:
65:f7:79:51:5b:fc:01:ca:cf:ca:96:8e:ed:0a:00:
85:02:12:c3:35:da:62:c5:17:99:41:e3:d6:f9:26:
1b:b1:01:64:54:12:63:f6:7c:ed:6a:47:af:51:14:
cc:ef:8d:9e:2f:a8:1a:c5:72:ba:cf:3f:c3:f0:f6:
35:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:16:50:BC:40:C5:ED:AE:55:E0:F0:AF:86:D1:B8:22:3A:9B:81:7C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nBZQvEDF7a5V4PCvhtG4IjqbgXw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4d00:fd02::/48
Signature Algorithm: sha256WithRSAEncryption
b0:d7:d6:b4:ee:e5:c5:f1:5e:66:32:36:7d:ef:91:28:54:47:
85:9c:12:b5:45:ad:42:c2:99:83:06:4b:f4:c1:3d:7c:ae:d4:
59:59:1c:e8:71:57:9e:87:64:62:92:e8:68:07:63:6d:1b:29:
af:9e:51:90:61:87:77:8c:c9:03:ec:c4:cb:4e:c7:b6:42:05:
24:95:a0:14:74:17:64:2f:6d:bb:c5:0b:97:d1:e6:61:96:fa:
f8:cf:3b:23:a7:37:b7:55:f6:d9:31:b0:bf:60:28:45:55:7b:
3e:85:b0:20:94:d5:5e:a5:d8:3c:ad:04:5b:4b:4f:77:c1:eb:
6e:30:25:62:f8:0b:6b:6b:63:d3:39:9e:ff:15:40:03:99:a3:
47:0d:92:64:26:54:b2:fe:99:ca:39:e5:3f:be:d4:3a:bd:e5:
f4:be:47:a0:50:bb:8d:bd:93:e8:87:4a:ca:22:65:93:10:65:
e1:13:b1:fc:bb:3a:c2:15:f3:e3:82:f7:f6:04:47:e8:f3:4a:
26:73:8d:43:2d:8a:ed:55:a1:38:c6:2f:ae:07:86:58:2e:b5:
af:22:0c:83:b0:5e:8c:25:fe:bc:5f:6c:7e:f2:6b:2d:7b:7c:
05:61:52:08:b9:f3:af:74:ec:38:82:d9:90:7e:be:07:ae:ab:
a6:ba:30:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org