Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/nZTE6Ta97wirsPlGA51UuvYYYwg.roa
File: nZTE6Ta97wirsPlGA51UuvYYYwg.roa (raw, json)
Hash identifier: K8N7wbAXRmAscy0AeK5fiKVas7w53Djg4qnacDbSxzU=
Subject key identifier: 9D:94:C4:E9:36:BD:EF:08:AB:B0:F9:46:03:9D:54:BA:F6:18:63:08
Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial: 0438
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/nZTE6Ta97wirsPlGA51UuvYYYwg.roa
Signing time: Fri 01 Sep 2023 08:03:43 +0000
ROA not before: Fri 01 Sep 2023 08:03:43 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 205329
IP address blocks: 103.156.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1080 (0x438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
Validity
Not Before: Sep 1 08:03:43 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9D94C4E936BDEF08ABB0F946039D54BAF6186308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a3:e9:16:75:9f:8c:90:ff:5f:9c:98:78:c4:
52:09:d6:27:bd:b4:3a:df:db:af:fd:cf:f8:e3:b4:
72:08:d5:c5:e3:5b:0b:de:92:08:b9:98:b8:e6:de:
47:4a:c0:19:48:0d:9a:4f:92:33:12:9b:a1:53:6a:
05:48:88:5a:45:ae:20:4d:c1:f2:be:6d:5b:80:1a:
96:5f:2f:b9:00:d0:2e:49:1d:20:14:a0:47:eb:da:
84:40:c2:a9:e1:55:82:eb:10:5f:76:95:82:a6:0c:
a6:f9:68:ce:10:2f:2b:2f:ab:2c:2c:97:fb:07:b7:
c6:14:f6:af:b9:2a:28:3f:6e:33:2f:bc:1f:18:a4:
54:d2:78:59:e7:d9:2e:9e:38:dd:1d:df:ca:9d:e1:
c5:a6:dd:d1:29:ed:98:2a:22:d0:95:79:bb:1e:d8:
09:67:68:eb:cc:10:74:b3:10:46:5d:41:26:ba:64:
84:a6:c0:3b:47:80:a6:ce:e8:76:6b:c6:53:f7:b4:
0a:95:fb:7e:10:f8:9c:7d:88:1f:d8:04:ee:ae:02:
8c:8f:db:5b:64:95:76:18:ea:e5:b0:54:80:84:52:
8f:9e:f0:da:23:b6:77:73:11:ba:6a:46:e8:0e:5b:
33:cf:05:cf:0a:d2:fb:3f:21:7c:5d:97:a6:51:26:
f4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:94:C4:E9:36:BD:EF:08:AB:B0:F9:46:03:9D:54:BA:F6:18:63:08
X509v3 Authority Key Identifier:
keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/nZTE6Ta97wirsPlGA51UuvYYYwg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.185.0/24
Signature Algorithm: sha256WithRSAEncryption
64:c1:c2:c6:73:59:fa:01:db:74:95:34:a3:45:2f:81:c4:1f:
c6:29:37:c4:e4:59:07:9c:22:cc:ec:e4:d8:54:91:0c:b4:2c:
3b:04:82:34:cd:1e:41:b6:8d:a5:2f:64:3b:2a:1e:6a:33:de:
6a:37:7e:7b:28:59:63:52:db:88:db:92:dd:ab:6f:50:25:4e:
43:4d:f9:d6:39:30:1e:d4:11:42:92:d7:da:c4:b7:54:aa:ce:
dc:67:1a:4a:93:d9:2f:82:b7:2c:e8:40:d2:54:5d:9b:6c:17:
69:f3:2d:ca:f1:39:f1:0e:90:42:49:4a:02:96:3d:da:21:47:
46:b9:77:ea:57:fa:8b:27:7f:03:23:0a:16:f4:55:6f:c0:45:
3f:9e:f0:e3:ee:26:63:aa:cc:d0:45:53:0e:2b:e2:28:8c:9f:
cc:26:79:b9:cb:70:bc:12:05:d0:d8:62:1b:13:44:c1:f0:8f:
ba:28:55:c8:99:2a:4f:c0:19:97:f4:b2:b5:a4:df:f5:a3:bb:
3f:7f:97:e8:80:7d:8a:fa:d1:36:79:3e:c7:7b:2f:d3:25:3a:
61:e4:c0:90:12:8f:37:b1:4b:b2:a6:cd:42:a8:3e:15:93:5a:
e3:91:0a:67:a3:fb:1b:1c:ed:58:0e:df:2f:d2:08:3a:c4:24:
24:e8:59:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:10 2024 by rpki-client on console-ams.rpki-client.org