Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINYUN/cn98RGuWOZEIMntMQmlrM058LDM.roa
File: cn98RGuWOZEIMntMQmlrM058LDM.roa (raw, json)
Hash identifier: Rixt24peTWRB2oDxPTUNFVSXzA/Pxp7has5GZIJ4Yhk=
Subject key identifier: 72:7F:7C:44:6B:96:39:91:08:32:7B:4C:42:69:6B:33:4E:7C:2C:33
Certificate issuer: /CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Certificate serial: 0ABE
Authority key identifier: 84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/cn98RGuWOZEIMntMQmlrM058LDM.roa
Signing time: Tue 29 Sep 2020 10:09:21 +0000
ROA not before: Tue 29 Sep 2020 10:09:21 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 138145
IP address blocks: 2404:4fc0:a022::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2750 (0xabe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Validity
Not Before: Sep 29 10:09:21 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=727F7C446B96399108327B4C42696B334E7C2C33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2a:8f:2f:46:9a:55:ea:cc:e7:61:d5:ae:67:
02:f5:73:2b:f0:77:3b:80:ce:0b:1c:06:53:de:80:
ac:c6:a5:3f:57:74:44:12:a4:21:df:56:3d:64:31:
a3:8d:c1:93:14:7b:6d:ca:d2:5a:a9:5c:55:68:17:
06:f1:4c:67:d8:69:1c:8e:ea:34:40:24:eb:ea:01:
70:13:77:b1:c1:3a:63:c7:19:25:30:2b:ac:38:7c:
f0:99:52:33:ac:04:dd:f6:85:cb:c0:c9:18:7c:b0:
d2:2d:17:dc:74:63:99:30:0a:dc:a3:47:34:de:1e:
5c:39:01:b2:3e:6e:0f:62:92:26:ac:7a:ea:60:dc:
ee:04:8b:c4:bd:1e:3e:21:17:aa:e3:44:ae:46:b1:
38:20:3b:26:55:4a:f4:fd:4d:55:ab:bc:3f:b0:3b:
a3:fc:fa:b9:00:e8:e0:63:4e:7a:38:f8:47:2d:59:
8d:9b:18:b1:c7:39:52:13:a7:5f:e4:71:d2:90:99:
8e:14:c5:8d:2e:85:e8:21:95:fd:a9:5a:30:9e:3a:
26:4c:dc:a4:cf:33:a7:c1:e5:0a:51:80:ea:d8:e0:
c9:c1:2f:7f:01:e1:b4:ed:b9:5b:d2:c4:31:60:37:
d7:dd:1f:b9:67:3e:64:8c:c8:a0:4a:c6:3c:f0:98:
e6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7F:7C:44:6B:96:39:91:08:32:7B:4C:42:69:6B:33:4E:7C:2C:33
X509v3 Authority Key Identifier:
keyid:84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/cn98RGuWOZEIMntMQmlrM058LDM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:4fc0:a022::/48
Signature Algorithm: sha256WithRSAEncryption
a5:dc:df:7c:27:c1:ac:7b:d6:bb:80:5b:f2:91:06:fe:d2:62:
81:56:74:cb:99:e7:a5:59:57:be:6e:ff:83:ba:6d:fb:51:38:
a2:a3:bc:73:73:5a:ae:79:49:46:36:6d:d6:b6:b5:3f:51:d6:
9b:ba:30:a1:5c:49:be:2d:6d:87:ee:38:37:f0:3f:2b:e0:12:
a7:06:d8:ec:a1:98:c5:a6:36:c2:c8:b6:3a:48:34:e3:89:44:
09:0e:d8:56:21:8f:d6:75:73:58:eb:b3:65:5f:1a:be:c1:ca:
d7:93:8c:21:cc:65:e9:01:de:3a:10:1a:c7:a9:8f:89:d6:92:
4e:d2:4c:8a:ca:45:61:d7:1b:6c:5f:b0:1d:11:9f:ea:b2:96:
82:e0:9d:34:f1:94:1b:13:7a:11:d7:51:04:a9:5f:30:38:de:
e3:67:72:fe:8f:ff:d4:59:de:34:1d:ca:6b:6e:fd:d1:46:ad:
6c:8f:3c:a5:59:67:7d:4f:7a:68:de:75:f2:27:e6:71:b0:02:
c8:8d:cd:e7:7c:1b:93:d0:a9:48:1d:24:ee:c0:cd:34:bd:8d:
4a:58:78:f1:65:ae:8d:44:f5:0a:0f:4b:67:63:77:14:75:32:
fe:6c:b4:58:c0:41:c6:aa:1b:93:ef:f1:ed:29:a2:75:fd:b0:
98:98:cc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org