Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/S-pXZGjtuo520eMxVJC9wU63rqQ.roa
File: S-pXZGjtuo520eMxVJC9wU63rqQ.roa (raw, json)
Hash identifier: g9KaG/8/nPOUdomiDb+vI+h4lQpdSFHHtlVzCZv1C/g=
Subject key identifier: 4B:EA:57:64:68:ED:BA:8E:76:D1:E3:31:54:90:BD:C1:4E:B7:AE:A4
Certificate issuer: /CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Certificate serial: 0DB9
Authority key identifier: B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/S-pXZGjtuo520eMxVJC9wU63rqQ.roa
Signing time: Thu 15 Sep 2022 02:50:43 +0000
ROA not before: Thu 15 Sep 2022 02:50:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131662
IP address blocks: 2404:7340::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3513 (0xdb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Validity
Not Before: Sep 15 02:50:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4BEA576468EDBA8E76D1E3315490BDC14EB7AEA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ff:37:0b:f8:7a:ef:41:be:30:6e:83:d8:ef:
1e:4c:39:46:92:62:6a:f1:74:47:de:4d:78:9e:dd:
d1:a0:af:84:32:fc:8e:de:74:ab:9c:53:1b:c8:96:
7b:f1:08:ac:b4:3d:02:1f:68:9e:4a:7f:48:90:8e:
9b:1d:d0:f7:0a:55:a6:8e:bf:fd:16:7b:ae:94:69:
08:da:66:07:08:4c:bc:6a:68:56:c3:6c:9e:07:f1:
eb:66:10:ba:be:ad:b0:6a:9c:11:df:81:8c:16:af:
42:c7:8a:3a:6d:97:3b:35:f8:17:72:a9:de:a3:36:
63:f2:61:44:4d:c6:15:e2:f3:f6:1a:86:79:22:39:
6d:5e:fb:9d:e7:ca:85:f8:cd:00:4f:94:0f:3c:52:
6c:5e:8d:6f:f2:2b:22:46:e8:3d:84:80:26:3d:41:
ac:b4:1a:eb:05:ec:21:83:1e:ba:08:7c:19:03:4a:
25:54:ee:e3:4e:f7:73:d7:6a:2f:94:75:4a:49:f6:
c2:ae:d5:8e:e6:70:79:17:1e:ff:98:82:2c:19:cb:
a9:39:83:f9:50:2f:cd:a4:af:e5:42:fe:7c:90:ff:
b1:37:d7:ec:34:b0:b2:49:5b:d0:d2:03:3c:52:d3:
b4:4e:33:09:1e:78:c2:c4:b8:c8:24:e4:f0:31:f8:
e3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EA:57:64:68:ED:BA:8E:76:D1:E3:31:54:90:BD:C1:4E:B7:AE:A4
X509v3 Authority Key Identifier:
keyid:B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/tWybLjoECHnP0A_nTWl_sEZc8no.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/S-pXZGjtuo520eMxVJC9wU63rqQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:7340::/32
Signature Algorithm: sha256WithRSAEncryption
99:5c:1f:05:c5:4d:22:d0:25:7d:83:11:5f:1f:bf:d8:49:67:
24:e1:0e:19:a8:18:c2:f9:52:0e:f6:d2:a1:85:bd:81:6e:82:
f7:87:c5:7b:ca:5b:30:62:26:54:e1:f7:69:c0:fe:a5:6b:e9:
3b:a3:b5:14:cf:7b:c2:61:13:bb:b6:74:ea:4b:2e:89:1f:46:
c5:35:3e:56:62:d5:c9:60:37:a5:cb:f2:d7:a4:c0:84:ab:0d:
59:bb:a6:3d:86:96:4c:4a:2c:db:00:40:20:72:c6:1c:aa:50:
6f:92:81:63:32:db:71:f9:bd:4b:d4:17:bf:4a:f1:13:c4:c4:
5a:cd:03:00:7e:82:f6:d4:a6:57:e3:97:61:cc:13:83:b8:e4:
d0:c4:4a:db:7c:81:f2:12:32:06:d9:c7:58:e8:1b:4a:c7:ae:
ed:d9:74:3e:e3:77:5e:8a:34:1e:ef:85:00:34:5a:32:f0:ff:
6a:47:2d:14:c4:09:52:06:0e:2f:35:47:d1:89:2c:1c:02:28:
04:fd:25:5e:20:f0:75:ab:62:2c:6d:43:f4:db:ee:16:25:95:
4d:55:6a:5f:50:d8:7c:6f:5a:53:d4:81:6e:52:96:7c:b8:e1:
56:18:c5:a7:53:85:88:14:9c:15:54:9a:b6:90:4c:a6:71:20:
11:af:62:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org