Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/JX-WQrpu2A34i2Kia-zanb8VawE.roa
File: JX-WQrpu2A34i2Kia-zanb8VawE.roa (raw, json)
Hash identifier: ILVv2d2P3ieg8J3leagNDn0qUpwXBgbfNeokEkEIJXw=
Subject key identifier: 25:7F:96:42:BA:6E:D8:0D:F8:8B:62:A2:6B:EC:DA:9D:BF:15:6B:01
Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Certificate serial: 0B6D
Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/JX-WQrpu2A34i2Kia-zanb8VawE.roa
Signing time: Fri 01 Sep 2023 10:13:55 +0000
ROA not before: Fri 01 Sep 2023 10:13:55 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 132819
IP address blocks: 61.58.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2925 (0xb6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Validity
Not Before: Sep 1 10:13:55 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=257F9642BA6ED80DF88B62A26BECDA9DBF156B01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:c5:04:88:3d:12:65:ca:2d:4d:be:73:5c:28:
1e:1a:8c:10:39:8c:31:2b:19:63:22:7d:0d:fa:34:
10:84:df:d1:d3:a4:72:56:70:d7:e9:38:77:d5:61:
1e:8c:76:0a:f8:ab:39:dd:ba:08:ff:35:ed:e2:a7:
de:c5:29:92:6f:e4:18:c8:ad:11:e7:63:d8:17:cd:
48:16:07:b8:1f:fb:f8:2f:89:78:6e:1d:18:38:38:
92:91:79:e2:d4:5c:b4:a0:39:b3:70:0d:51:0c:66:
05:e5:cb:c5:a3:ce:b4:f8:06:36:33:d4:ad:7a:64:
4f:22:05:eb:97:f8:21:a9:46:a2:c9:8e:b3:1a:57:
bc:ec:0f:cb:93:6e:8a:96:85:da:aa:88:6e:44:e7:
d8:9b:ab:16:21:21:9e:78:70:40:38:be:48:6e:b3:
17:3f:fb:4d:86:11:95:23:a8:db:a5:74:f7:72:73:
fe:25:26:46:d1:64:34:ca:71:27:20:96:5c:44:bf:
51:38:d6:0f:99:5f:19:4d:60:91:d5:66:91:85:4d:
be:8b:df:cf:7b:d1:dc:00:12:44:e9:64:92:60:be:
c2:34:01:a7:06:54:a1:98:aa:c5:6a:b6:ca:ee:00:
2c:dd:94:d8:8e:60:0a:b4:e5:3b:de:7c:48:b2:c3:
31:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7F:96:42:BA:6E:D8:0D:F8:8B:62:A2:6B:EC:DA:9D:BF:15:6B:01
X509v3 Authority Key Identifier:
keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/JX-WQrpu2A34i2Kia-zanb8VawE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.38.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:05:e6:bf:4e:d3:fa:19:c7:4a:bb:e8:d9:49:6d:85:1f:5c:
e2:ef:01:b9:ec:6c:94:7c:1d:d9:02:cd:13:8e:a7:7b:ca:20:
aa:08:c9:a0:cd:00:8c:f7:b0:3e:a7:92:9b:0c:23:39:b9:4a:
31:87:f8:d3:fe:b8:d6:f0:28:fb:f0:aa:3e:64:47:07:3e:49:
1c:a3:a6:34:60:37:23:79:6e:3d:44:67:54:4c:0c:5b:e3:73:
60:af:74:06:a6:06:88:42:22:f3:d0:2e:82:42:9d:bb:29:b8:
f3:13:e4:73:30:62:84:a6:50:9f:a2:c9:94:48:18:8e:30:40:
e0:fb:de:a2:18:19:1d:6a:80:19:69:82:11:00:69:a7:29:2a:
7f:dc:a1:d0:1d:c0:c9:5f:c6:90:bd:99:39:14:e6:80:9e:89:
2d:de:a0:a9:a0:c9:1e:12:b1:0d:c4:e0:50:c0:a5:af:83:a6:
ad:9f:29:d7:70:1e:64:3e:1b:97:ab:fd:44:bc:1c:b4:d3:b6:
30:d8:83:92:77:83:03:c6:2e:0a:cf:9a:a1:e4:18:58:97:6c:
0d:45:df:b8:84:7a:b8:f0:0e:b6:5e:2f:9b:7b:3d:53:95:9d:
21:3c:a1:30:85:36:68:cf:64:a0:d3:52:27:3c:b2:6b:24:75:
4a:8f:e7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org