Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PARADISE/ccZxGdkpmZ6O93aoapzG4Qibdn4.roa
File: ccZxGdkpmZ6O93aoapzG4Qibdn4.roa (raw, json)
Hash identifier: htM56M6OWE0g973uKAKQaNUZAZWXUw5O8GOfg7wiz2M=
Subject key identifier: 71:C6:71:19:D9:29:99:9E:8E:F7:76:A8:6A:9C:C6:E1:08:9B:76:7E
Certificate issuer: /CN=E27749EAA557BCA5645A275E3DE0A3AF5347F7C3
Certificate serial: F7
Authority key identifier: E2:77:49:EA:A5:57:BC:A5:64:5A:27:5E:3D:E0:A3:AF:53:47:F7:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4ndJ6qVXvKVkWidePeCjr1NH98M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PARADISE/ccZxGdkpmZ6O93aoapzG4Qibdn4.roa
Signing time: Thu 20 Oct 2022 05:42:20 +0000
ROA not before: Thu 20 Oct 2022 05:42:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 396982
IP address blocks: 103.175.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247 (0xf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E27749EAA557BCA5645A275E3DE0A3AF5347F7C3
Validity
Not Before: Oct 20 05:42:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=71C67119D929999E8EF776A86A9CC6E1089B767E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:96:97:ac:f8:ec:29:90:fa:e5:40:25:f6:7b:
df:ef:b5:9f:51:df:0a:08:ae:c7:8a:bb:96:ff:5c:
c5:94:32:c6:2f:4b:97:3e:f1:98:e9:b2:22:f9:1a:
33:05:fe:dd:8f:65:91:d9:0a:0a:05:12:98:15:a8:
27:4c:ca:48:ad:99:2c:e4:28:de:b5:82:07:4d:17:
2c:0d:48:cc:70:8c:74:40:c9:25:52:5a:17:60:89:
b6:20:99:51:1e:94:86:72:df:dc:89:51:f3:ab:fb:
74:bf:17:a6:b0:36:03:1a:10:28:9e:3f:be:25:ca:
33:8d:7b:22:c9:bb:bd:f1:11:9f:3d:ab:af:a4:28:
e6:63:b7:4d:fe:23:3e:40:bf:82:ee:79:7b:a6:e2:
54:e9:f8:e4:73:59:62:ea:fa:71:dd:14:fd:f3:ee:
5b:4c:2e:ad:c7:ee:24:1e:12:88:ce:13:f2:68:18:
97:14:aa:36:44:1a:ec:c8:c0:1d:3b:92:13:7f:82:
d5:1c:2f:12:b1:21:5e:a8:3d:ec:49:79:00:f4:68:
86:d5:f3:57:fc:2b:5d:32:22:f1:1e:dc:d8:c3:de:
aa:c6:5c:61:ce:e3:69:e9:0b:4f:06:ff:24:fb:89:
a7:d0:54:5a:56:3e:2d:cd:74:92:6d:08:08:4d:61:
8f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C6:71:19:D9:29:99:9E:8E:F7:76:A8:6A:9C:C6:E1:08:9B:76:7E
X509v3 Authority Key Identifier:
keyid:E2:77:49:EA:A5:57:BC:A5:64:5A:27:5E:3D:E0:A3:AF:53:47:F7:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PARADISE/4ndJ6qVXvKVkWidePeCjr1NH98M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4ndJ6qVXvKVkWidePeCjr1NH98M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PARADISE/ccZxGdkpmZ6O93aoapzG4Qibdn4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.153.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:33:8a:05:2a:b2:2d:14:4e:95:e9:5b:19:a0:a3:d3:5d:83:
9f:35:41:ce:49:8d:87:a1:fa:d1:0d:f7:08:a3:dd:ce:34:c4:
32:e3:61:41:70:b6:7d:f7:a4:08:fd:58:52:0e:b8:65:ba:4f:
60:51:d1:42:dc:2b:40:cb:aa:3d:1e:b1:fd:d5:6a:88:53:4e:
d1:7b:51:c7:73:1b:93:a9:a5:97:fa:60:64:75:b6:7e:c8:9d:
e7:cf:9c:bd:fc:68:5b:02:76:f7:4e:12:ae:7c:a8:58:72:77:
70:ac:d7:d0:62:d3:fd:53:79:e0:ed:68:70:cc:9c:b5:63:bf:
bb:d0:44:ff:3c:d6:04:26:b2:20:70:50:cb:6d:e2:69:fb:29:
6b:ea:91:d8:0d:ab:29:93:b6:2d:8f:c3:8e:f2:cf:71:d3:03:
e9:9a:32:7c:fb:b9:dc:cd:23:f4:be:74:bc:22:0e:a8:29:e2:
a9:de:49:04:b9:66:c7:71:3c:2d:38:ab:9d:a0:6d:8e:9d:51:
f4:70:5d:36:2d:55:7b:3e:ea:7b:ae:5f:9b:9b:94:7a:e6:49:
53:49:06:04:e9:d5:78:23:05:21:23:2f:08:21:f8:50:c2:07:
46:38:b8:c6:0f:a9:a0:62:50:07:ac:7e:75:9b:e9:95:bf:ef:
f1:94:4f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org