Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNOC/6AoaD__iJUE_03vDzdLBe8pTjUQ.roa
File: 6AoaD__iJUE_03vDzdLBe8pTjUQ.roa (raw, json)
Hash identifier: TAq7PmsFuD0cKcT4Syj+dYBkaSEFpOCXQl0Ttob4oxI=
Subject key identifier: E8:0A:1A:0F:FF:E2:25:41:3F:D3:7B:C3:CD:D2:C1:7B:CA:53:8D:44
Certificate issuer: /CN=23D5E0B3520DAC4269AB4A425B23D225CB264A88
Certificate serial: 117E
Authority key identifier: 23:D5:E0:B3:52:0D:AC:42:69:AB:4A:42:5B:23:D2:25:CB:26:4A:88
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/I9Xgs1INrEJpq0pCWyPSJcsmSog.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNOC/6AoaD__iJUE_03vDzdLBe8pTjUQ.roa
Signing time: Fri 01 Sep 2023 10:11:51 +0000
ROA not before: Fri 01 Sep 2023 10:11:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131149
IP address blocks: 2403:ac40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4478 (0x117e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23D5E0B3520DAC4269AB4A425B23D225CB264A88
Validity
Not Before: Sep 1 10:11:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E80A1A0FFFE225413FD37BC3CDD2C17BCA538D44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:07:e5:1c:fc:41:0d:f7:01:70:da:36:1c:
ac:b1:dc:93:9b:da:c7:5c:cb:75:4a:35:ec:c9:aa:
42:2a:38:15:54:35:57:6e:5c:6e:27:fc:b6:fd:54:
62:82:6b:0f:83:35:dd:d4:18:65:7c:41:b4:0e:69:
a0:11:13:19:a9:37:63:c0:1e:60:d4:40:f4:8c:97:
96:b9:78:4e:3e:70:13:a5:5e:24:55:04:f0:d0:1f:
81:e2:b2:ee:d9:08:d3:c4:73:df:f1:b1:f7:7f:92:
42:8e:c0:46:ac:60:56:74:c9:fa:d2:6d:96:0d:34:
05:b2:8a:6e:df:c6:be:b0:ab:9f:c3:d1:72:cb:c0:
86:b4:8f:c8:33:0f:28:e8:a4:46:37:d4:4c:e8:b9:
38:6c:d6:93:23:96:45:a4:88:5e:bf:29:f4:68:1a:
9b:70:fe:e3:b5:4a:ab:c6:52:47:7e:2e:80:62:bb:
70:78:c9:eb:41:30:d4:66:1b:9a:e3:65:43:57:91:
09:db:50:81:72:57:10:af:00:02:f6:d6:93:b7:01:
60:46:a1:51:b8:ad:e2:bd:23:6a:f0:b1:ca:b7:b8:
f2:6f:22:eb:00:5e:79:5c:44:3b:88:e7:e4:2b:cc:
b7:c4:3d:9a:0f:62:43:ea:e4:fb:52:11:4f:fa:83:
08:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0A:1A:0F:FF:E2:25:41:3F:D3:7B:C3:CD:D2:C1:7B:CA:53:8D:44
X509v3 Authority Key Identifier:
keyid:23:D5:E0:B3:52:0D:AC:42:69:AB:4A:42:5B:23:D2:25:CB:26:4A:88
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNOC/I9Xgs1INrEJpq0pCWyPSJcsmSog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/I9Xgs1INrEJpq0pCWyPSJcsmSog.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNOC/6AoaD__iJUE_03vDzdLBe8pTjUQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:ac40::/32
Signature Algorithm: sha256WithRSAEncryption
9d:e8:e2:95:fc:33:93:d7:0d:be:1a:e4:6a:bc:db:aa:51:a2:
3d:14:f6:dd:e6:11:f7:90:94:95:43:24:3c:2f:c7:73:89:fc:
ff:5f:b0:c9:fb:a5:52:07:44:b2:61:48:84:24:75:1c:41:72:
3a:93:ab:88:1f:3d:f9:ca:65:0d:74:b8:41:13:e7:7e:ea:f3:
2e:b8:aa:b3:21:5c:4f:53:e4:aa:9c:72:d1:a1:ce:a8:27:d2:
6a:7e:18:cc:ec:e4:9a:3d:91:63:47:18:f4:bc:00:0e:0d:8b:
d8:de:a5:b4:78:9f:0d:32:45:5a:5d:1d:aa:03:43:ba:35:18:
6c:0c:19:ab:d7:7c:b8:48:cc:5f:1d:5c:27:19:b5:8f:f6:4f:
15:35:ea:2a:dd:a4:de:17:3e:42:d9:c2:53:bb:0f:36:5b:85:
21:7b:78:b8:ff:fa:ed:e0:30:e9:8f:fe:13:9a:ce:7a:e0:c1:
0f:da:48:1f:3f:15:cf:b5:d3:81:de:b8:a3:d5:ee:e9:83:6c:
bd:9c:43:ba:db:5d:a3:c7:c8:1b:b7:41:b9:b8:ff:09:85:ad:
c2:5d:1f:f0:16:25:d2:d0:c8:b2:64:17:77:ec:6c:bd:98:01:
bb:47:63:70:0c:9b:76:5f:32:25:85:e7:76:bb:3e:84:d5:dc:
ea:ae:99:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org