Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/Y05D41Y7OLRALfjti54rQ6k1Pm8.roa
File: Y05D41Y7OLRALfjti54rQ6k1Pm8.roa (raw, json)
Hash identifier: F+oVL81Y8HrLrM6vtlnoNVrCjv2I1Tc3j+Lk22pm1ys=
Subject key identifier: 63:4E:43:E3:56:3B:38:B4:40:2D:F8:ED:8B:9E:2B:43:A9:35:3E:6F
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 1174
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/Y05D41Y7OLRALfjti54rQ6k1Pm8.roa
Signing time: Fri 01 Sep 2023 03:14:22 +0000
ROA not before: Fri 01 Sep 2023 03:14:22 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 14618
IP address blocks: 2001:dc1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4468 (0x1174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Sep 1 03:14:22 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=634E43E3563B38B4402DF8ED8B9E2B43A9353E6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c2:a1:03:0c:ea:b5:6d:f6:28:c1:a8:e6:6a:
c1:68:b5:e1:05:5f:cc:71:5f:67:01:85:3b:3a:71:
54:b3:a7:80:e0:b1:1a:19:12:43:f2:3e:39:11:ef:
ca:94:e8:eb:c5:1b:5a:d4:ce:92:d0:58:b8:60:bb:
a1:dc:25:e1:c9:bb:0b:4e:37:53:71:89:98:53:f0:
a7:10:50:ce:9d:43:1c:1c:46:47:de:97:a1:56:f9:
2e:26:09:0b:f9:94:4d:29:cb:06:eb:48:3f:f4:0e:
07:3a:ec:b2:53:80:4b:72:14:04:de:11:78:38:ed:
b0:a1:4c:36:77:96:53:31:6f:bd:b0:a1:f2:1c:9b:
55:f4:2d:53:77:6f:b7:fd:8d:38:c2:f6:c7:02:d5:
bd:47:17:86:78:89:50:4d:c0:d6:5d:8d:f5:4d:5e:
cb:b6:73:2b:d3:12:fa:4d:d0:22:33:5f:dc:12:eb:
31:24:02:e0:e3:55:3c:be:b2:90:35:57:ab:58:85:
0d:ff:e3:79:95:52:e7:88:cb:8e:96:0d:cf:fe:7b:
15:22:d2:58:a6:78:35:71:bb:2f:3a:a9:21:72:98:
13:0d:08:90:ac:b7:9b:d8:28:3e:26:d4:2a:d0:19:
9d:56:c9:40:1e:c7:2a:fb:51:1e:58:27:d2:9b:d9:
ec:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4E:43:E3:56:3B:38:B4:40:2D:F8:ED:8B:9E:2B:43:A9:35:3E:6F
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/Y05D41Y7OLRALfjti54rQ6k1Pm8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:dc1::/48
Signature Algorithm: sha256WithRSAEncryption
42:67:e7:94:5a:58:29:7d:63:09:74:6d:5e:4f:6b:6d:a2:37:
ca:ba:60:3f:a6:30:8a:67:98:cd:55:f8:9e:52:fe:e7:1d:21:
0b:48:9a:18:fe:cc:88:84:b7:e5:10:af:9f:50:91:56:ae:01:
40:38:8a:b1:fc:01:e4:87:19:8c:de:b2:b9:74:af:29:aa:89:
54:20:d2:f2:2e:0b:a1:0b:8f:e5:7e:69:33:9c:2d:65:92:c2:
ea:85:17:2c:f0:13:cc:bc:c5:70:4d:f9:95:51:ac:17:2a:02:
4f:47:84:ff:22:f6:33:a3:e0:89:fe:fd:25:67:e0:ec:a3:1c:
ea:e8:86:8d:60:1d:18:8b:d8:11:0f:14:ce:48:6d:ad:d8:d3:
0f:0d:2d:8e:07:bc:8d:a0:44:28:04:44:eb:8c:28:8a:d1:16:
85:8a:ff:68:4e:75:fc:5c:70:36:ff:35:aa:6a:05:23:a1:30:
db:8e:8e:d5:20:61:40:de:6a:b9:f1:20:5b:d0:87:c4:af:a7:
b0:5c:81:26:9d:9c:fe:fc:8c:c3:ff:a9:66:ea:11:82:c4:f0:
cc:97:b6:d7:3b:30:5a:a9:cd:1b:ab:18:cf:53:b6:09:68:b3:
db:19:56:04:df:c4:42:50:26:47:43:c5:aa:83:6f:92:c2:76:
c5:42:0e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org