Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/HaEDIQfx30Wk6BB-HE7gtc-e7_c.roa
File: HaEDIQfx30Wk6BB-HE7gtc-e7_c.roa (raw, json)
Hash identifier: Ioiz4UMq+GMcrxazBGtooUBntgDcRdONkmSj3U8lsLE=
Subject key identifier: 1D:A1:03:21:07:F1:DF:45:A4:E8:10:7E:1C:4E:E0:B5:CF:9E:EF:F7
Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial: 0442
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/HaEDIQfx30Wk6BB-HE7gtc-e7_c.roa
Signing time: Fri 01 Sep 2023 08:03:47 +0000
ROA not before: Fri 01 Sep 2023 08:03:47 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 41255
IP address blocks: 103.156.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1090 (0x442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
Validity
Not Before: Sep 1 08:03:47 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1DA1032107F1DF45A4E8107E1C4EE0B5CF9EEFF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5b:1c:bc:36:2a:42:52:ec:48:ee:50:8e:53:
fa:99:83:89:c8:76:16:59:8c:fa:19:58:47:99:e4:
0e:a3:04:51:a5:9b:3f:db:16:c5:e0:ad:b2:40:d2:
6f:be:a2:fb:e8:00:a0:47:20:df:d1:22:96:04:10:
ff:c4:66:1e:e2:01:a4:ba:c0:57:f4:9b:40:23:88:
16:9b:f7:50:7b:11:b5:1a:c9:15:e2:66:0a:06:47:
2b:4e:ac:32:50:8a:65:5c:0f:e0:6e:a3:5c:b3:47:
b4:80:c6:7a:64:50:b8:5d:4a:c0:ae:c0:7e:5a:d0:
ad:d4:8a:26:dc:b0:09:f3:df:21:38:bb:4d:ac:01:
ff:f9:da:bf:64:18:ee:26:d7:98:bc:18:f2:ae:36:
f8:b6:72:c9:6d:db:83:fe:ec:47:69:54:96:0d:58:
42:26:1f:3c:b2:20:91:a3:d2:3c:11:a5:a5:61:99:
e8:1a:84:8a:ff:0b:a3:83:0d:ab:b4:10:5b:c3:a7:
cd:ae:f4:e4:72:f5:26:a7:5b:2a:9a:3e:fc:38:12:
31:7f:04:0b:d2:c1:40:ca:33:ff:2d:18:8f:38:ce:
63:e3:9c:7d:a4:9a:cd:6c:dd:a4:5c:b4:5c:6c:20:
77:5a:8e:d9:2f:36:22:aa:62:55:36:e2:32:60:29:
86:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A1:03:21:07:F1:DF:45:A4:E8:10:7E:1C:4E:E0:B5:CF:9E:EF:F7
X509v3 Authority Key Identifier:
keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/HaEDIQfx30Wk6BB-HE7gtc-e7_c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.184.0/24
Signature Algorithm: sha256WithRSAEncryption
87:23:d1:d9:63:0b:78:eb:d3:d3:59:10:86:eb:e3:0f:24:08:
03:b4:04:ae:a0:8b:9f:2f:af:0c:cc:04:a4:23:65:f7:c5:b0:
e8:2b:60:e1:67:0a:b4:0c:86:7f:f6:7b:f3:bf:97:71:90:82:
d5:78:6e:7b:8c:fa:1b:d9:2d:5c:88:36:a5:ca:f0:11:d5:82:
7d:29:54:f8:08:b9:37:19:4b:cf:b6:67:c6:eb:a2:61:df:81:
5b:83:02:bb:b8:69:24:38:2a:9c:aa:76:55:9c:ca:ca:64:58:
02:d1:e4:1b:58:c1:98:9b:45:8b:c9:2a:c4:66:b7:d7:6e:c1:
d5:fb:b1:b0:fd:a6:b3:72:c6:b2:d8:f4:64:1f:51:0a:ba:2f:
e1:01:d5:19:33:04:6e:10:a6:9c:27:79:ea:66:89:78:71:f1:
2a:6e:c6:a7:ba:1d:90:a5:2d:ab:7c:ba:25:0e:e2:c5:65:ba:
67:85:5e:40:0e:59:ee:0d:fc:08:89:21:55:26:93:47:28:a4:
f9:2f:9c:14:b3:10:6c:f2:8f:63:cf:27:84:c3:6c:2f:f2:83:
e4:d4:3c:3a:d7:d5:22:a4:e9:01:2f:f6:b2:6a:1f:ff:a7:da:
6d:b5:b6:f8:ae:96:45:0d:ff:a9:80:3b:9d:c7:dd:2f:97:3b:
ff:40:a8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:17 2024 by rpki-client on console-fra.rpki-client.org