Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINAN/jHqD84hANMhK1pDnPHMSZ6n15gw.roa
File: jHqD84hANMhK1pDnPHMSZ6n15gw.roa (raw, json)
Hash identifier: DI3ZNc3jmU4qK2f38ybQAVNovftNDp0LHz5R6YYCrOE=
Subject key identifier: 8C:7A:83:F3:88:40:34:C8:4A:D6:90:E7:3C:73:12:67:A9:F5:E6:0C
Certificate issuer: /CN=27E1699C6CFBD770F943A6BDF38F6BF481BB1E97
Certificate serial: D8
Authority key identifier: 27:E1:69:9C:6C:FB:D7:70:F9:43:A6:BD:F3:8F:6B:F4:81:BB:1E:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/J-FpnGz713D5Q6a9849r9IG7Hpc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINAN/jHqD84hANMhK1pDnPHMSZ6n15gw.roa
Signing time: Fri 21 Jun 2024 07:54:54 +0000
ROA not before: Fri 21 Jun 2024 07:54:54 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131642
IP address blocks: 2401:2720::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27E1699C6CFBD770F943A6BDF38F6BF481BB1E97
Validity
Not Before: Jun 21 07:54:54 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8C7A83F3884034C84AD690E73C731267A9F5E60C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1a:b3:13:28:58:6d:b6:d0:a3:8a:9c:38:96:
09:1d:43:69:3a:c0:0d:b5:fc:92:9b:83:39:4d:6f:
f0:76:c3:00:7c:4e:a2:72:4c:41:7a:5c:66:0f:d7:
6c:bd:50:0c:52:78:08:4f:67:03:03:3b:ab:3a:0f:
85:0b:3e:9b:a8:58:3d:10:6d:94:41:20:f5:d0:4e:
38:9f:8c:44:32:99:ee:1f:d4:6d:8c:0a:39:96:c1:
5d:67:d9:2d:0b:08:6c:29:b6:42:ca:e8:4d:ec:03:
18:ac:aa:7d:65:95:1c:ca:75:18:69:c4:10:41:59:
dc:c1:5b:e6:c8:26:08:e1:b5:1d:06:a7:73:35:c3:
eb:46:d4:9d:43:f3:cd:c3:bd:b8:1e:4d:13:41:f3:
9d:7c:ba:8f:18:10:53:98:6d:65:9c:3b:d3:24:db:
e8:6c:1f:24:58:d6:49:a9:b5:e1:97:2e:12:64:98:
bb:93:94:9b:33:4d:69:a8:c2:b7:aa:88:74:ed:94:
8c:6c:16:34:39:7b:a0:b4:60:46:64:ed:2a:22:a4:
1b:02:18:92:1c:71:7a:e0:e1:a8:cd:74:cb:35:06:
b9:a0:0f:90:a0:e5:e9:0f:d2:d1:56:7c:9e:71:29:
f6:60:98:87:0e:dd:fc:db:ca:49:2d:4e:eb:c0:30:
7e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7A:83:F3:88:40:34:C8:4A:D6:90:E7:3C:73:12:67:A9:F5:E6:0C
X509v3 Authority Key Identifier:
keyid:27:E1:69:9C:6C:FB:D7:70:F9:43:A6:BD:F3:8F:6B:F4:81:BB:1E:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINAN/J-FpnGz713D5Q6a9849r9IG7Hpc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/J-FpnGz713D5Q6a9849r9IG7Hpc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINAN/jHqD84hANMhK1pDnPHMSZ6n15gw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:2720::/32
Signature Algorithm: sha256WithRSAEncryption
83:78:3a:4b:40:ee:c8:68:ed:0c:06:bf:a7:eb:f3:44:a2:54:
82:47:fc:59:fd:25:c8:8c:37:0a:cd:9e:49:4d:c8:b8:5f:f7:
84:01:84:c1:a8:34:dd:b0:f6:c4:cc:03:5f:8d:eb:bf:21:8a:
d7:84:44:06:59:e9:24:9a:7a:09:ad:87:07:6d:48:cd:d0:a0:
60:1b:1f:f0:28:a7:36:11:f9:34:cc:fb:04:8a:a2:53:2a:92:
d5:a9:a8:4f:24:08:15:7b:2e:f5:89:ab:2c:76:c5:a5:c2:c0:
f9:67:6b:24:63:ec:9c:ee:f5:d3:17:50:8d:8c:b1:06:d8:98:
26:5e:91:bf:25:e1:70:4a:1b:02:83:ac:c5:43:2d:68:41:3d:
a3:66:4d:ee:5a:a3:8a:7c:23:92:e7:23:a5:43:c7:89:ab:1a:
d1:c7:1d:9c:e6:a5:8a:36:03:b4:2c:3c:3e:83:b2:96:2e:2c:
60:a4:c9:40:56:76:49:6c:69:75:9c:79:14:d1:68:cc:8c:ef:
67:40:09:bf:b2:ea:62:72:0d:44:cc:b8:80:5c:07:2f:6f:0b:
e1:3a:d7:78:3c:6a:62:6f:46:ee:39:b3:a3:38:1a:63:41:5f:
0f:28:da:2a:4b:7e:74:9d:e7:3e:65:53:51:90:07:34:fa:92:
e6:63:92:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org