Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINYUN/JTUG3FlRnZ5rs2RZx1j-9lm__6k.roa
File: JTUG3FlRnZ5rs2RZx1j-9lm__6k.roa (raw, json)
Hash identifier: Li839rD5nQ3NzGR4D3Yv6ESJfX5tCNwnAscR15YKJPA=
Subject key identifier: 25:35:06:DC:59:51:9D:9E:6B:B3:64:59:C7:58:FE:F6:59:BF:FF:A9
Certificate issuer: /CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Certificate serial: 0CBA
Authority key identifier: 84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/JTUG3FlRnZ5rs2RZx1j-9lm__6k.roa
Signing time: Wed 29 Sep 2021 02:42:05 +0000
ROA not before: Wed 29 Sep 2021 02:42:05 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 138145
IP address blocks: 2404:4fc0:a022::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3258 (0xcba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Validity
Not Before: Sep 29 02:42:05 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=253506DC59519D9E6BB36459C758FEF659BFFFA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:50:33:75:c5:59:42:d1:86:54:5c:82:c9:1c:
92:df:52:17:64:f7:43:cd:03:27:95:ba:23:98:ce:
bc:f4:d0:df:24:93:25:9a:6c:24:a8:39:1b:a5:af:
3e:78:89:e1:a3:37:0f:9e:74:e4:8d:f8:d0:ce:23:
22:a3:62:f2:72:50:7e:c1:61:05:61:4d:84:e0:5c:
9d:03:e8:3e:87:e5:a3:a0:06:36:d4:d0:16:4f:00:
32:7e:11:c0:c3:23:c4:fb:f4:82:8b:54:8f:8a:d7:
6a:8e:37:0b:8a:99:37:66:c5:33:76:bb:73:a5:1e:
8a:98:c8:23:c9:9a:a4:a4:9d:34:53:3e:bc:a2:c9:
fc:2b:21:a0:b1:50:aa:f6:0f:6b:bf:aa:8e:54:03:
1a:f8:77:2e:91:f9:27:29:8e:b2:e9:32:56:08:a8:
b0:1c:48:ee:ff:a0:20:b8:a9:a7:49:a6:6b:66:52:
e5:84:27:97:49:f8:b9:57:01:c8:d9:82:80:3c:e7:
f8:24:87:ab:1f:fb:ab:15:98:0b:3c:80:19:92:a9:
b0:34:f5:e2:68:78:bd:ee:1c:f2:37:6b:46:57:7b:
69:8f:02:26:35:7e:2f:cb:29:ab:be:94:ef:02:0c:
3c:c4:02:e9:8b:41:81:8d:55:09:0f:9b:98:0d:db:
17:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:35:06:DC:59:51:9D:9E:6B:B3:64:59:C7:58:FE:F6:59:BF:FF:A9
X509v3 Authority Key Identifier:
keyid:84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/JTUG3FlRnZ5rs2RZx1j-9lm__6k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:4fc0:a022::/48
Signature Algorithm: sha256WithRSAEncryption
ca:55:df:fa:d5:5c:d1:d5:4b:3f:28:04:93:3f:27:96:d6:fd:
2c:07:cd:a5:4d:19:22:21:e2:86:37:e3:81:5a:ed:60:3b:61:
cc:52:ec:47:e8:d7:42:12:c8:75:bc:0e:1b:21:e3:cd:ef:2f:
ce:11:65:33:98:99:3d:03:ad:30:92:ea:ba:bf:76:f7:a1:6a:
d3:6d:48:aa:f2:9d:e5:c6:27:62:ae:c8:e5:e8:43:8e:8b:01:
b3:de:04:41:42:33:55:43:96:0f:85:93:fe:30:b2:de:c6:27:
2c:4e:2c:78:a9:95:37:64:2f:33:29:26:b6:c9:92:bb:b6:9c:
b0:b6:68:88:51:72:27:56:f3:ac:54:c0:1c:74:d1:03:62:27:
a9:e7:9e:65:b4:4e:4b:9d:1a:49:00:3a:7b:d0:b2:b3:ab:ba:
d4:f2:57:bf:ad:e7:cd:df:04:aa:4d:96:72:05:3f:0a:38:8e:
4c:48:e3:16:ab:9d:18:4c:71:51:44:ac:c7:8c:d4:74:34:5d:
af:9a:0a:c9:d0:70:20:dc:43:cd:ae:fe:a9:ad:18:eb:bf:30:
15:e3:89:fb:68:bc:52:70:e0:0e:df:64:cf:3b:18:d2:b7:7e:
29:df:14:67:23:7f:82:e1:0f:b6:48:5a:64:26:9a:43:73:6c:
79:83:79:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:41:51 2025 by rpki-client