Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALI/zs41gevm9n9M20PRltjPx0AD-lo.roa
File: zs41gevm9n9M20PRltjPx0AD-lo.roa (raw, json)
Hash identifier: e2ds4Y19Rzarhu8Du4Q4HT+kFH2TaaFYH/C9URFM2tI=
Subject key identifier: CE:CE:35:81:EB:E6:F6:7F:4C:DB:43:D1:96:D8:CF:C7:40:03:FA:5A
Certificate issuer: /CN=C46656F8C9D72547BCA79848DC6A2E6B0FC3E2B2
Certificate serial: 0E35
Authority key identifier: C4:66:56:F8:C9:D7:25:47:BC:A7:98:48:DC:6A:2E:6B:0F:C3:E2:B2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xGZW-MnXJUe8p5hI3Gouaw_D4rI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALI/zs41gevm9n9M20PRltjPx0AD-lo.roa
Signing time: Tue 29 Sep 2020 09:53:48 +0000
ROA not before: Tue 29 Sep 2020 09:53:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18046
IP address blocks: 103.130.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3637 (0xe35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C46656F8C9D72547BCA79848DC6A2E6B0FC3E2B2
Validity
Not Before: Sep 29 09:53:48 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CECE3581EBE6F67F4CDB43D196D8CFC74003FA5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:82:08:75:12:c3:70:91:ca:8f:72:e6:b0:e5:
8e:62:de:d5:30:73:01:74:04:4a:58:86:7a:19:d0:
88:a6:85:47:4a:04:19:18:0f:bd:ea:ce:de:eb:bd:
c2:e1:e6:50:6d:c4:ed:f6:fb:64:9e:43:3e:bb:b4:
eb:a9:3c:71:1d:29:25:38:6b:d7:db:77:d7:73:b2:
9d:f6:f5:75:af:80:65:98:d4:5b:74:43:de:92:8e:
5c:1d:e2:11:63:41:15:a8:c4:78:77:08:25:5a:7a:
ba:2c:6d:83:03:ae:e1:83:bb:84:84:b4:37:e2:2e:
a5:c4:40:63:17:48:cc:cc:d1:46:d4:6d:0e:6c:e7:
ba:eb:96:c1:25:f1:81:86:58:b9:93:a4:f8:4e:3e:
54:0f:c1:a6:95:86:1f:41:f6:bf:8b:24:f6:06:d1:
dc:41:8c:4b:bb:19:fb:d4:b5:6b:eb:fe:19:98:6e:
86:ab:5f:ce:d7:3d:41:2c:6f:f5:ac:18:23:36:ce:
e3:25:6d:f1:33:9a:88:00:b0:f2:a3:eb:e7:1c:84:
3f:7c:b5:60:fd:06:2b:5f:58:be:d2:45:01:2b:fd:
81:55:77:3f:81:61:f9:cb:e8:3d:c1:d3:eb:40:0c:
a0:03:85:7a:71:ee:11:4a:ca:2c:95:c9:f9:ef:c0:
8f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CE:35:81:EB:E6:F6:7F:4C:DB:43:D1:96:D8:CF:C7:40:03:FA:5A
X509v3 Authority Key Identifier:
keyid:C4:66:56:F8:C9:D7:25:47:BC:A7:98:48:DC:6A:2E:6B:0F:C3:E2:B2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALI/xGZW-MnXJUe8p5hI3Gouaw_D4rI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xGZW-MnXJUe8p5hI3Gouaw_D4rI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALI/zs41gevm9n9M20PRltjPx0AD-lo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.40.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:f8:7f:a8:5e:8d:f3:32:de:10:3c:f6:03:fb:a8:47:11:f7:
b1:a8:66:b7:23:38:4f:aa:d8:3d:62:3d:c5:18:8d:9d:1f:5e:
73:57:24:46:fe:28:98:a9:28:62:dc:5f:42:94:29:9e:9b:d9:
9c:95:c9:9d:09:00:5c:2a:1b:1d:0b:76:5b:0a:b4:e0:4b:79:
1b:4f:50:7d:a6:78:6c:4c:af:14:ae:a5:d1:a0:9e:d9:fa:20:
94:03:d6:ec:67:f7:e4:d4:da:74:05:8f:96:97:8c:15:52:f3:
c7:0e:a1:22:a5:55:c2:25:64:33:ed:b6:23:82:16:2e:92:e9:
41:59:ec:92:4b:23:39:40:0f:07:ec:c5:77:5a:5e:60:b4:87:
14:68:18:4d:54:dc:fe:e6:ca:b6:a3:76:e3:e0:d5:b5:11:9f:
ab:04:9f:a7:1c:55:4c:7d:81:d8:25:d6:be:05:ec:bb:1b:ac:
fd:0b:0c:53:5f:25:32:c0:55:19:86:df:f4:87:7b:ad:e1:bb:
5f:c7:4c:a0:0e:17:e5:64:36:03:16:20:9a:4d:ec:60:fa:ee:
7a:d8:a6:12:e3:24:8b:d3:9f:a2:21:dc:4f:87:17:c1:05:f5:
84:0a:45:02:50:db:49:e6:0e:bf:d6:32:c4:4b:12:d1:18:88:
3e:7e:38:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:58 2024 by rpki-client on console-ams.rpki-client.org