Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/-_3z9YneTh9_VPXotPLwiW8Tnio.roa
File: -_3z9YneTh9_VPXotPLwiW8Tnio.roa (raw, json)
Hash identifier: wt63Jl83G2N3TQXeLK9GPFOpcPPTqr87zoZl1TT7Vs4=
Subject key identifier: FB:FD:F3:F5:89:DE:4E:1F:7F:54:F5:E8:B4:F2:F0:89:6F:13:9E:2A
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 117D
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/-_3z9YneTh9_VPXotPLwiW8Tnio.roa
Signing time: Fri 01 Sep 2023 05:00:51 +0000
ROA not before: Fri 01 Sep 2023 05:00:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131621
IP address blocks: 2001:dc1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4477 (0x117d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Sep 1 05:00:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FBFDF3F589DE4E1F7F54F5E8B4F2F0896F139E2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:a2:45:4c:a2:ed:8d:4f:f7:c1:f4:3c:75:
37:78:0b:50:4c:1e:9f:e1:cc:88:c0:0d:32:60:98:
50:7c:2f:4d:8f:da:fe:de:e3:e7:52:b2:cd:57:1f:
2e:2b:8c:b7:65:20:68:3d:b5:3b:45:ee:b2:1f:91:
73:02:fa:58:39:6e:ef:c8:42:90:1d:79:cb:03:63:
bd:c0:db:5b:2f:1e:18:d2:81:d0:48:76:78:6b:da:
05:b8:d9:d6:9a:24:38:c3:32:3b:fb:97:6e:37:c1:
5c:1f:a6:1b:64:c6:7c:b8:fa:08:a7:b6:d0:97:dd:
1b:07:8c:e8:09:71:fe:db:b9:63:e9:d8:04:92:84:
23:a0:d5:11:21:26:79:e0:50:e7:ee:5e:08:5a:35:
44:50:e5:14:b2:6f:09:52:7c:b0:96:60:0a:c9:ce:
d2:ae:9d:d8:e7:88:6d:80:fb:3c:41:e9:56:fb:7c:
06:87:04:94:b5:91:1a:9e:80:ee:14:08:af:0c:b5:
42:e5:c8:23:dc:6d:c8:4c:28:c7:32:a9:30:b0:32:
77:27:e7:d0:b8:7b:01:f4:05:ce:f6:34:53:00:bb:
05:c0:dd:e1:5b:e8:05:48:00:e1:96:00:cc:16:19:
d6:40:84:0c:36:24:0f:bb:b4:58:df:c6:e6:bb:39:
86:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FD:F3:F5:89:DE:4E:1F:7F:54:F5:E8:B4:F2:F0:89:6F:13:9E:2A
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/-_3z9YneTh9_VPXotPLwiW8Tnio.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:dc1::/32
Signature Algorithm: sha256WithRSAEncryption
9a:33:13:f5:43:70:2f:1e:65:6d:a5:25:82:cb:86:16:1f:6f:
1f:0a:5f:7f:77:4c:6a:21:a4:3e:2f:36:da:10:2f:df:ec:13:
58:a8:61:a4:e8:a5:9f:99:5c:3a:d3:32:39:ae:2f:de:ea:6c:
ad:0f:fa:d2:b0:a0:23:32:da:0a:f1:8a:c0:d5:ac:12:11:fe:
36:95:98:e0:d0:65:af:82:b9:89:91:6a:73:8b:c2:1f:69:0f:
57:d0:46:a2:8a:ad:9e:aa:4d:ad:3d:63:7f:44:39:90:49:c5:
fc:3b:e7:1a:10:43:37:1d:a0:cc:04:66:bd:6d:d0:90:f0:37:
e7:59:3e:5f:86:aa:be:45:67:b9:61:9a:3a:b1:ec:d8:f8:47:
0e:ec:75:89:c0:56:7f:e6:5f:87:75:83:99:ff:0e:9f:c5:25:
63:11:c9:1c:96:21:a7:96:9a:38:6b:4b:83:76:3e:12:cb:23:
10:cb:d1:7d:df:69:c6:00:ba:fb:d8:a8:84:11:d6:20:12:9c:
26:cf:6c:12:bb:c3:d1:9b:ad:1e:b1:99:90:2a:a9:28:b5:35:
a0:b1:ef:b8:fc:7c:b7:d1:69:70:0b:29:13:98:c1:9c:07:60:
6b:e7:4f:97:4a:a0:82:63:9a:0e:31:0f:11:21:f0:e1:0b:62:
6d:ff:48:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org