Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ya9vA1lj4tT2YnmFOgkdqMgAILM.roa
File: ya9vA1lj4tT2YnmFOgkdqMgAILM.roa (raw, json)
Hash identifier: O3zG4R9Spk0Br06Cqa0IhQaUw/U7pY13DP/0UK736KM=
Subject key identifier: C9:AF:6F:03:59:63:E2:D4:F6:62:79:85:3A:09:1D:A8:C8:00:20:B3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A67
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ya9vA1lj4tT2YnmFOgkdqMgAILM.roa
Signing time: Fri 01 Sep 2023 10:07:52 +0000
ROA not before: Fri 01 Sep 2023 10:07:52 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 2407:4d00:ff07::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10855 (0x2a67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:52 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C9AF6F035963E2D4F66279853A091DA8C80020B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:00:98:0a:89:f1:c6:0e:c1:1c:cd:46:dc:2f:
93:cc:1e:f1:b1:e5:10:31:eb:41:ea:c8:b5:c4:39:
f7:0d:dd:dd:60:2c:54:9f:28:b7:68:0c:c7:d6:c2:
2a:d7:6b:00:b0:f8:c9:b6:e7:fe:23:20:1f:55:b3:
1b:f4:6f:3e:3b:5d:55:71:43:7b:ac:f5:ad:57:36:
ad:70:89:83:24:09:34:71:a1:40:21:8c:6b:3d:4a:
86:52:e9:b7:62:49:19:fe:46:3a:42:5e:b3:f4:2f:
e4:a3:60:bd:1b:96:1a:c7:31:e8:bc:d3:b8:16:a9:
fa:06:b4:24:d4:6c:7a:9b:6b:7c:ae:cc:f9:e7:5a:
af:15:5f:5b:cb:ab:4a:e4:f0:72:db:5f:8d:b6:83:
4e:c7:12:29:bc:d7:72:c1:b0:d9:17:df:8a:81:db:
73:ce:69:ac:ea:3b:56:dd:61:c8:5c:66:39:c0:5e:
68:04:2b:3d:ce:2f:0e:3c:81:b8:bc:50:a3:24:2a:
0f:11:f1:52:bb:0a:5b:cf:43:b9:e7:6e:b3:c6:62:
7b:3f:73:50:20:ac:e7:90:dc:36:ef:2c:8a:84:78:
f3:0d:e1:5f:cb:4b:f7:b3:8e:c2:66:42:94:73:d9:
fb:b7:7a:f2:fe:2d:ed:cc:e1:6d:11:6b:14:ab:1e:
b3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AF:6F:03:59:63:E2:D4:F6:62:79:85:3A:09:1D:A8:C8:00:20:B3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ya9vA1lj4tT2YnmFOgkdqMgAILM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4d00:ff07::/48
Signature Algorithm: sha256WithRSAEncryption
79:df:f3:13:18:b1:16:14:4e:2b:13:7e:e6:82:e3:1f:2e:c9:
47:ba:e9:4d:c4:36:25:3b:c6:03:b1:19:54:20:28:76:f3:4a:
34:e6:6b:3c:9e:8b:72:6c:bd:ab:54:05:d1:58:13:e2:f6:74:
9b:de:53:d8:97:1d:81:86:f7:f0:bd:15:2a:c9:14:bd:d2:3e:
5c:4e:32:26:43:88:d9:8d:e7:02:70:22:36:43:0f:28:30:c9:
75:2b:9a:50:76:4c:12:64:56:37:68:42:1f:a2:f3:42:c7:7e:
e9:15:62:ea:52:4c:11:39:40:e0:ad:3b:bd:e8:93:80:ae:37:
cb:16:ee:ba:41:6e:ce:b8:5d:aa:54:cf:12:82:60:ef:39:6b:
c5:6c:a5:df:dc:60:1e:02:af:7e:ed:07:b9:7d:c9:a3:de:70:
98:8d:fe:26:bf:ee:ca:39:74:6b:3d:d2:1b:11:9a:0f:8c:de:
ac:13:db:b2:92:d3:57:c7:87:58:fd:a5:63:c1:40:83:d8:f3:
6a:4d:cc:e3:b3:aa:72:de:f5:da:2a:e8:8f:5e:36:33:32:6c:
ff:2d:26:7d:e7:3a:dd:dd:66:5a:36:b2:90:82:f8:2a:3d:f2:
6b:11:82:db:bf:8f:20:13:ab:cb:42:2e:8b:76:be:43:90:6d:
1a:d3:a8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org