Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/iYHSHlwQlPpRS5h8VAiYytnm7ZM.roa
File: iYHSHlwQlPpRS5h8VAiYytnm7ZM.roa (raw, json)
Hash identifier: 6Ote3D0rrDpzIf8Xpz1HWOVppXUfpBFUf4z2rsWF/Yw=
Subject key identifier: 89:81:D2:1E:5C:10:94:FA:51:4B:98:7C:54:08:98:CA:D9:E6:ED:93
Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Certificate serial: 0B6A
Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/iYHSHlwQlPpRS5h8VAiYytnm7ZM.roa
Signing time: Fri 01 Sep 2023 10:13:54 +0000
ROA not before: Fri 01 Sep 2023 10:13:54 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131618
IP address blocks: 61.58.41.128/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2922 (0xb6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Validity
Not Before: Sep 1 10:13:54 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8981D21E5C1094FA514B987C540898CAD9E6ED93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f1:e5:c3:ba:41:f8:98:f4:8b:6b:e2:f1:08:
47:80:a7:80:1a:f2:09:c7:0e:6b:16:8f:3f:cd:9b:
d9:d5:b1:89:1c:92:bc:08:18:d3:9b:15:ac:c9:a0:
bc:b4:8c:a9:0d:3f:0b:e4:77:18:39:27:0c:19:73:
72:06:81:c8:0e:e3:f1:49:b7:76:d2:d1:ba:f9:58:
c3:aa:c7:1f:7e:3c:9a:41:63:11:0b:ed:ad:fe:c3:
ce:e7:53:96:ea:20:03:bd:33:20:51:d5:9f:65:a4:
4e:de:03:c1:be:3a:a3:91:12:7e:a2:40:49:ff:3d:
27:7e:67:6e:6d:00:09:05:73:86:e2:ec:88:cb:ee:
64:12:75:a3:e0:6b:cb:34:da:c6:11:e9:03:1f:df:
1a:ed:17:96:a7:c2:d6:1f:d5:30:ed:a8:67:9b:05:
f9:11:c6:a9:6d:7e:36:2b:0d:04:e6:b0:54:eb:b5:
6f:42:b0:6f:b4:e7:36:ae:d9:21:47:8e:2e:d1:64:
c3:7a:86:a2:b6:70:7a:77:de:09:e7:3b:fc:40:6b:
f6:e4:a9:e9:2f:21:f4:3d:98:7c:b5:a7:a4:b2:03:
b0:62:a5:6a:91:77:65:f6:8a:34:c4:b4:42:3c:04:
59:8a:ab:9e:94:bb:87:7a:ca:27:31:08:eb:82:d8:
3e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:81:D2:1E:5C:10:94:FA:51:4B:98:7C:54:08:98:CA:D9:E6:ED:93
X509v3 Authority Key Identifier:
keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/iYHSHlwQlPpRS5h8VAiYytnm7ZM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.41.128/29
Signature Algorithm: sha256WithRSAEncryption
5d:63:de:74:e0:62:5d:30:4f:31:18:fa:2b:3f:cb:ea:9e:ba:
a0:01:04:83:8d:a8:9d:d3:e2:79:69:2a:60:c4:27:ac:5a:a6:
06:d2:e7:27:29:21:3d:e3:1b:60:86:43:73:c4:f2:80:c8:f7:
48:07:87:ab:f6:64:17:92:be:a2:33:22:9d:87:a8:90:81:19:
2e:4a:a5:5a:7d:d4:a6:95:45:6a:13:2f:30:2c:55:c1:2f:e1:
35:3c:af:77:5e:50:e5:73:ff:a5:9f:5c:69:15:6c:f4:de:5f:
69:9c:35:b0:cd:cd:88:18:ca:fa:5f:9e:d3:5b:f7:72:b0:8e:
78:32:6b:36:19:8e:65:4f:de:d6:bd:7b:b8:93:8a:6f:4e:ba:
72:08:4e:82:b6:4d:47:3f:ed:05:7b:55:21:46:92:33:dd:be:
32:49:7d:96:73:af:d4:aa:e2:17:d5:c6:91:6c:45:37:cd:a8:
d4:d4:44:27:b3:36:c6:fb:97:fb:de:1c:01:81:11:59:ca:33:
ec:60:4f:d8:dd:51:19:f9:f5:9f:cb:c2:d0:fe:b4:c2:03:d2:
fb:72:75:80:f9:c8:12:d1:bf:03:44:c4:53:fc:6a:3a:c7:84:
85:3c:21:10:d4:94:41:67:ad:3c:2f:7c:63:94:6f:3a:62:34:
b3:76:9f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org