Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINYUN/6bxxmznER1VJHi2mT386Lx19rLU.roa
File: 6bxxmznER1VJHi2mT386Lx19rLU.roa (raw, json)
Hash identifier: YXyO6yUffmC2EJPcwz1jXvdnTegnQyC9McOEAYYZA+U=
Subject key identifier: E9:BC:71:9B:39:C4:47:55:49:1E:2D:A6:4F:7F:3A:2F:1D:7D:AC:B5
Certificate issuer: /CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Certificate serial: 0E9E
Authority key identifier: 84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/6bxxmznER1VJHi2mT386Lx19rLU.roa
Signing time: Fri 01 Sep 2023 10:21:35 +0000
ROA not before: Fri 01 Sep 2023 10:21:35 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38047
IP address blocks: 2404:4fc0:a011::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3742 (0xe9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Validity
Not Before: Sep 1 10:21:35 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E9BC719B39C44755491E2DA64F7F3A2F1D7DACB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:9d:e3:70:63:97:ed:93:28:a5:1d:85:f5:
97:50:7f:af:28:be:a5:20:eb:b4:ef:d9:d5:c6:41:
67:e6:dc:ec:4b:28:ce:06:4b:2a:df:d0:e9:6d:75:
71:d9:c3:15:d2:95:2c:a0:10:17:66:74:ae:81:b4:
cd:43:b0:23:51:8c:5c:c8:46:fc:26:18:d0:9c:a6:
ce:4c:4e:24:fd:0a:e4:34:22:18:c3:93:85:e3:4f:
23:b7:2f:2d:15:af:e6:e6:60:4b:c7:2e:9e:c1:9a:
73:58:7b:6f:bc:9c:2c:51:ea:6e:f3:64:61:d7:3e:
48:1c:2a:0f:71:52:d9:71:71:78:f5:8c:4a:83:22:
ff:70:7c:ef:8f:b7:80:21:01:df:f3:05:b5:a2:87:
69:1d:5b:65:60:07:ce:2f:59:51:86:d3:5c:1b:93:
be:a1:d0:ad:1b:2f:77:73:2f:c3:3c:1c:95:e8:36:
e2:83:00:27:cd:0a:5b:5c:2c:d6:d9:d9:56:2f:df:
ed:6a:3b:37:73:26:5f:22:06:0b:82:67:f0:64:b5:
da:23:0f:95:bc:2f:ad:7f:9b:fd:88:b8:d7:20:1f:
df:38:eb:72:3f:fa:8c:3d:f3:71:8e:e8:37:2e:fa:
7e:22:2b:89:c0:15:bb:a3:f2:c5:7a:8b:cd:8d:99:
bb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BC:71:9B:39:C4:47:55:49:1E:2D:A6:4F:7F:3A:2F:1D:7D:AC:B5
X509v3 Authority Key Identifier:
keyid:84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/6bxxmznER1VJHi2mT386Lx19rLU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:4fc0:a011::/48
Signature Algorithm: sha256WithRSAEncryption
54:bd:b7:bc:28:2a:6d:ce:03:c3:16:22:a0:ab:8c:22:63:9c:
96:34:ce:88:ae:af:96:f5:51:1b:ca:63:40:f5:f0:18:ad:0c:
37:fd:a5:8a:bf:da:d8:da:be:d3:94:4b:2f:64:ef:86:8e:ca:
77:3b:51:73:83:a8:4c:97:42:90:10:5e:5e:37:df:85:04:a8:
81:f8:f5:68:b5:e0:15:15:bc:ac:c3:0d:78:e3:5d:7c:5a:16:
44:bf:00:9f:9a:06:aa:2a:c8:b3:10:f7:05:88:dc:70:a8:56:
86:1a:e2:51:c4:fa:86:e1:83:0c:81:76:26:18:5e:9c:0d:5c:
3c:8f:65:16:93:a7:17:70:11:74:84:fb:59:73:d1:df:41:23:
f0:2a:a7:9c:50:63:f9:6f:89:d7:a0:04:4d:59:6c:44:99:bc:
a8:6a:63:0c:8c:0d:6b:d7:df:a6:de:c4:1c:99:ea:b2:b7:9f:
c9:01:3f:23:6d:46:4d:87:19:2c:7d:f1:06:cd:80:a5:8c:bc:
b0:b9:6e:11:e4:de:dd:9a:4b:9c:17:ea:d5:03:19:84:22:9d:
dc:e7:88:a2:53:de:89:f3:ef:e3:e7:c3:0e:ef:e3:8a:5b:90:
20:0a:0c:a1:64:ef:59:0c:b1:ab:18:d0:88:0d:4c:d4:d6:40:
2c:9a:2d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org