Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/84EEaopxe2__hG7wvuURocZrHOM.roa
File: 84EEaopxe2__hG7wvuURocZrHOM.roa (raw, json)
Hash identifier: YGQ2MdLbohHVwQdd576HacuJ28cU77qHgOUMKrC/HzY=
Subject key identifier: F3:81:04:6A:8A:71:7B:6F:FF:84:6E:F0:BE:E5:11:A1:C6:6B:1C:E3
Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial: 0441
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/84EEaopxe2__hG7wvuURocZrHOM.roa
Signing time: Fri 01 Sep 2023 08:03:46 +0000
ROA not before: Fri 01 Sep 2023 08:03:46 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 60614
IP address blocks: 103.156.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1089 (0x441)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
Validity
Not Before: Sep 1 08:03:46 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F381046A8A717B6FFF846EF0BEE511A1C66B1CE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:47:da:a0:3c:0a:4d:92:76:50:68:ec:1b:
3b:9e:89:f1:21:56:d5:e4:9e:65:e3:7e:a2:04:52:
d3:5f:26:a8:ca:80:e3:39:d4:93:36:1e:3c:18:b6:
2b:2e:2a:9a:aa:fa:79:13:cf:49:be:c8:3d:d3:d9:
5b:1c:fa:21:97:11:96:48:dc:ee:e6:d7:c7:0e:6e:
64:85:c8:79:7a:dd:13:c5:4c:e2:1d:dd:8f:84:e1:
d3:a5:56:47:8f:d7:3f:d0:03:02:23:dc:f6:b6:92:
38:6e:45:f0:0f:a2:4a:b9:3d:f3:97:83:9c:b9:96:
68:e8:a1:89:3f:8f:62:5e:0c:1e:27:28:a5:a6:53:
00:77:31:f5:05:45:0b:ff:67:2f:ad:db:c0:34:07:
65:a9:cb:37:6e:76:db:cf:d5:a1:96:54:d0:13:31:
ca:84:1d:cd:17:26:17:e0:65:ee:aa:78:0d:76:0e:
2d:aa:f6:f3:04:eb:e6:b6:1c:36:4c:d7:d5:d7:b8:
88:78:b9:25:6d:96:59:96:cc:d7:03:4f:84:34:66:
b6:ab:5d:b1:56:46:68:21:01:f4:65:2f:2f:c6:44:
5d:b4:ef:2d:09:59:8a:da:57:4a:f0:66:57:fc:37:
ec:76:84:ba:d2:ea:26:6c:ce:8e:20:27:79:cb:0f:
0c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:81:04:6A:8A:71:7B:6F:FF:84:6E:F0:BE:E5:11:A1:C6:6B:1C:E3
X509v3 Authority Key Identifier:
keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/84EEaopxe2__hG7wvuURocZrHOM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.185.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:15:bf:4a:8b:ad:06:3f:e3:ce:7e:ec:ad:dd:11:5d:56:ce:
38:b5:57:1f:94:2d:ed:4c:7e:a3:1d:62:2f:8c:30:54:de:82:
a0:61:3d:46:b4:99:84:62:fe:05:d7:12:8e:6f:a1:1a:3f:86:
76:36:01:d9:f6:d9:c8:1c:fa:ec:2e:0c:c6:1f:fe:51:68:dc:
de:80:23:e8:27:0e:25:d4:7c:53:34:7e:0b:14:72:73:42:26:
13:59:5c:03:cf:d4:dd:45:49:c2:7d:16:76:4a:a4:f5:84:cf:
f8:da:24:c7:a6:c6:a9:68:5d:9d:48:2b:d7:4a:c0:6b:b7:8b:
44:d5:10:25:9f:65:6c:ef:eb:86:61:dd:b4:b5:a4:61:f3:00:
4b:ee:a6:93:01:77:00:4b:1a:5d:34:d2:ec:d1:58:2f:d0:b9:
92:ed:83:db:ef:0c:9a:19:d9:1f:a0:d7:4e:15:7e:be:d6:b5:
c6:25:20:6c:03:f2:f3:4c:dd:c8:7b:68:82:70:39:33:3c:e5:
e7:9e:9a:9e:8c:16:02:c5:a0:0d:ed:e2:78:87:18:67:7f:55:
8e:2e:8d:e4:2e:50:40:49:c8:11:8e:22:8a:6e:fc:43:ac:0f:
c5:fc:50:08:d5:cb:77:aa:b1:42:b5:13:69:34:1c:b1:bb:0b:
46:14:e8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:10 2024 by rpki-client on console-ams.rpki-client.org