Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ULC/S-5haFp8wkAygh0SRxedQq7qahs.roa
File: S-5haFp8wkAygh0SRxedQq7qahs.roa (raw, json)
Hash identifier: ChwbfZ89FQ4rM5VYhIi3lGZ1oSqm+6JiV6Bt69ujA3A=
Subject key identifier: 4B:EE:61:68:5A:7C:C2:40:32:82:1D:12:47:17:9D:42:AE:EA:6A:1B
Certificate issuer: /CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B
Certificate serial: 038E
Authority key identifier: BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/S-5haFp8wkAygh0SRxedQq7qahs.roa
Signing time: Fri 01 Sep 2023 10:16:41 +0000
ROA not before: Fri 01 Sep 2023 10:16:41 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18178
IP address blocks: 2406:9740::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 910 (0x38e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B
Validity
Not Before: Sep 1 10:16:41 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4BEE61685A7CC24032821D1247179D42AEEA6A1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:00:f1:78:ef:55:99:63:db:dd:7a:27:98:
99:30:91:e9:bc:94:09:02:ef:22:eb:73:8a:0e:ae:
47:fb:3e:34:e0:b2:53:43:53:3e:82:98:a7:3f:93:
4b:f0:d9:89:60:e4:46:bc:10:79:b4:e0:dd:a5:3e:
74:15:d3:c8:25:f1:a3:e7:9e:79:75:de:98:f6:6f:
03:30:27:b3:a9:d0:65:47:77:f1:aa:18:7a:ef:32:
4e:f6:07:06:da:6f:93:43:b8:6d:ab:47:54:f0:16:
5d:a3:da:28:37:e8:06:1b:de:e3:aa:25:5b:34:d4:
c5:92:70:56:0a:c2:2d:7a:ed:1f:ef:3d:5b:d2:ab:
d3:c9:2a:39:ba:72:8f:d2:38:9e:03:d6:e6:f1:29:
e8:64:bb:eb:e1:ee:8f:f4:ea:fd:15:b8:23:4f:87:
3b:81:07:7c:44:fc:67:2c:c6:52:68:21:b3:9c:dc:
6e:be:97:35:80:83:9c:e4:9b:8d:a0:a0:0f:b2:b2:
db:45:3b:9b:0d:a4:2f:18:bb:d5:da:c3:96:0e:2b:
da:be:14:88:26:cf:36:e2:2d:f4:4e:2f:51:41:38:
3c:d5:c7:37:1e:4f:18:93:e8:33:96:c7:c2:87:b1:
34:ef:67:b9:ef:ab:0d:05:43:62:ca:8f:52:15:26:
6c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EE:61:68:5A:7C:C2:40:32:82:1D:12:47:17:9D:42:AE:EA:6A:1B
X509v3 Authority Key Identifier:
keyid:BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/S-5haFp8wkAygh0SRxedQq7qahs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:9740::/32
Signature Algorithm: sha256WithRSAEncryption
58:c9:08:1b:bc:9a:92:a8:72:8e:8a:21:df:03:ea:17:d8:71:
70:a8:56:6d:c4:2c:62:53:d9:59:14:a4:df:53:c5:84:5d:77:
97:f4:fe:ae:a3:c8:f6:9f:ab:f8:a1:f5:0f:2f:82:1e:7f:b7:
55:ea:4c:25:f4:bd:2c:30:8b:1f:8a:1e:cf:c3:01:f8:dc:7c:
84:97:03:0d:fe:c7:be:81:dc:4b:14:69:d9:25:32:8e:7e:62:
5a:ed:92:5b:02:6f:7f:ba:29:13:15:be:bd:0e:b0:00:66:03:
5b:55:3a:6f:24:3c:8e:d9:26:0b:ea:9e:25:5b:c1:f8:0b:53:
a2:46:bd:90:ba:fc:7e:af:a2:e9:7c:47:03:b7:0a:27:49:37:
50:3f:d7:a4:55:81:34:2f:9f:26:39:d0:e0:37:8b:3b:3f:6c:
54:92:a0:12:b6:b7:f7:c7:38:bf:c2:29:cc:e9:7b:4b:b3:ae:
47:54:3f:74:26:e9:1a:37:5f:90:8e:63:50:b1:76:c7:64:fd:
72:a7:60:93:5a:cf:27:6a:5a:aa:ce:8b:88:31:e4:b6:4f:0d:
e7:fe:d1:a4:1d:89:96:45:a9:58:e5:00:12:60:bc:a5:21:b6:
ad:ad:14:5a:cf:74:35:7c:6b:87:dd:f9:96:34:4c:8e:96:76:
54:0c:2e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:22 2024 by rpki-client on console-ams.rpki-client.org