Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/6l8E4e_1J06iH1viL9FoZH9GW4c.roa
File: 6l8E4e_1J06iH1viL9FoZH9GW4c.roa (raw, json)
Hash identifier: NUheeGWiEjwM1z5vvliCZzupzuaWOuHEdeMbS4BSksk=
Subject key identifier: EA:5F:04:E1:EF:F5:27:4E:A2:1F:5B:E2:2F:D1:68:64:7F:46:5B:87
Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial: 043A
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/6l8E4e_1J06iH1viL9FoZH9GW4c.roa
Signing time: Fri 01 Sep 2023 08:03:44 +0000
ROA not before: Fri 01 Sep 2023 08:03:44 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 983
IP address blocks: 103.156.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1082 (0x43a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
Validity
Not Before: Sep 1 08:03:44 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=EA5F04E1EFF5274EA21F5BE22FD168647F465B87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:20:50:51:0b:80:ab:f2:de:cd:09:50:4b:ff:
fb:3f:c3:a1:19:cd:5e:d9:34:d5:2b:10:9b:b7:b1:
34:d2:b3:5a:0d:6f:42:fd:03:57:3f:de:98:3f:c7:
b2:85:d2:35:3f:e6:48:16:d4:a0:b1:20:66:5c:7a:
6b:91:db:6a:54:96:32:c2:8f:b1:e3:02:b1:7a:b0:
0a:63:2c:58:bb:65:4f:6c:64:1f:f0:69:bd:bb:a2:
0b:2b:f5:6c:04:05:9c:e4:36:6a:d4:73:09:95:bd:
e8:24:14:ed:c0:6d:43:08:2d:6d:22:e7:ac:07:90:
89:50:e7:11:65:82:57:96:44:b0:35:6c:bf:14:35:
cf:b9:30:43:ca:73:9c:a4:26:08:3a:dd:95:64:96:
b6:e9:e2:a1:10:06:e8:10:0f:54:ee:90:8e:91:8e:
19:7d:13:77:24:c8:88:a4:ac:d5:70:fa:b7:98:36:
3d:3e:9e:c4:c8:e7:1e:e5:d3:ee:3c:72:55:2b:64:
c7:67:02:eb:cc:6c:10:ac:98:45:d5:0e:10:9d:9f:
d1:25:0c:66:47:c3:52:91:aa:34:92:64:21:be:40:
23:f7:67:ef:fa:df:f9:eb:87:52:f7:06:de:a7:a0:
ac:45:91:30:6a:c5:1b:17:40:88:e3:24:30:58:f4:
b6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5F:04:E1:EF:F5:27:4E:A2:1F:5B:E2:2F:D1:68:64:7F:46:5B:87
X509v3 Authority Key Identifier:
keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/6l8E4e_1J06iH1viL9FoZH9GW4c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.184.0/24
Signature Algorithm: sha256WithRSAEncryption
69:cf:0a:70:64:17:72:e3:ab:2d:55:2f:05:80:b0:2b:8a:b7:
1c:45:ea:7c:37:17:6e:b5:a3:b5:dc:f7:b3:da:03:46:4c:4b:
d7:d1:7a:ed:ed:c8:a1:24:db:99:1e:96:ba:90:f0:ab:4b:8f:
48:f1:28:7f:db:7e:e8:79:16:24:dd:9a:d7:bb:3b:c5:1a:fb:
02:93:df:98:6b:7e:4f:ce:b0:7c:6d:05:77:33:be:bc:1c:44:
25:a7:38:42:93:c7:5f:88:53:5a:63:27:df:3e:7b:f1:32:40:
df:e5:cd:0d:83:5a:86:72:ad:16:9e:15:00:7f:f3:2c:67:33:
e4:fa:ee:ef:d0:d0:0f:20:4c:43:31:26:5d:35:45:33:22:9a:
33:34:0c:4b:ac:21:71:a5:4c:6d:fc:35:94:63:62:9c:d5:70:
d9:63:19:96:1b:77:87:65:6b:a7:86:4d:69:2a:31:e0:03:e2:
e9:65:09:14:4f:80:01:d3:0c:a3:c4:96:3d:df:c0:0a:e7:79:
3c:01:95:bb:47:74:90:11:e0:19:9a:08:a6:44:d7:82:66:c5:
71:8f:fd:ae:a6:ac:99:8b:c4:2c:a1:f3:17:f2:98:3f:e8:89:
0e:8a:d0:9b:ff:20:48:60:88:ad:c1:3b:20:86:dc:d7:e5:da:
ff:40:d8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:10 2024 by rpki-client on console-ams.rpki-client.org