Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASUS/VeNiMui0FZZ_k5DjiTUCVYv0jEs.roa
File: VeNiMui0FZZ_k5DjiTUCVYv0jEs.roa (raw, json)
Hash identifier: LFhoIjRYAJq90VZf0Rl3cg/FLTuBtC+hgaQaPVEwJX0=
Subject key identifier: 55:E3:62:32:E8:B4:15:96:7F:93:90:E3:89:35:02:55:8B:F4:8C:4B
Certificate issuer: /CN=786648F79BB79E1F0B0FF9039692F74E4F3CE1F8
Certificate serial: 0AE9
Authority key identifier: 78:66:48:F7:9B:B7:9E:1F:0B:0F:F9:03:96:92:F7:4E:4F:3C:E1:F8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eGZI95u3nh8LD_kDlpL3Tk884fg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/VeNiMui0FZZ_k5DjiTUCVYv0jEs.roa
Signing time: Fri 01 Sep 2023 08:24:29 +0000
ROA not before: Fri 01 Sep 2023 08:24:29 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 1340
IP address blocks: 103.10.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2793 (0xae9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786648F79BB79E1F0B0FF9039692F74E4F3CE1F8
Validity
Not Before: Sep 1 08:24:29 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=55E36232E8B415967F9390E3893502558BF48C4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:da:72:0f:a5:e2:f3:b3:b4:d5:34:5b:17:e1:
cb:ec:14:41:b3:04:4a:83:1a:1b:06:e0:f0:73:46:
2e:75:03:b6:18:ca:df:df:30:3a:7d:87:b6:21:1b:
f5:5c:0e:37:62:45:f3:11:89:6f:37:2f:ca:b6:84:
b7:a2:51:d6:28:9c:4d:ac:9c:d1:56:51:23:4d:cb:
10:47:42:88:74:5b:25:bc:31:1b:6f:7c:9b:b0:52:
86:ae:4c:de:6d:4c:62:3c:f8:3c:b3:30:02:08:a5:
0a:a1:28:b1:b1:0d:d7:b4:e3:f1:55:7b:2a:dd:50:
18:be:d3:8f:5a:ae:89:7c:41:46:7e:56:20:3e:e4:
83:4b:16:4f:81:85:0f:42:96:71:05:27:36:8b:c1:
36:bd:73:a2:5a:bd:31:15:f8:15:e2:05:5f:da:72:
ea:74:af:f9:4f:e9:ff:2e:44:91:38:30:e6:37:73:
cc:59:5e:dd:7a:a3:f1:51:77:07:a1:b1:9b:0b:eb:
6b:f9:c5:91:39:01:cf:88:e9:f9:ff:76:1f:82:47:
4c:8d:84:13:a1:cf:8f:fc:88:c3:f3:aa:16:0c:43:
ae:a5:70:09:24:c4:c8:4b:5a:76:95:85:53:a6:7a:
66:fc:00:69:ff:f6:f5:0b:d9:25:19:14:f5:75:e9:
33:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E3:62:32:E8:B4:15:96:7F:93:90:E3:89:35:02:55:8B:F4:8C:4B
X509v3 Authority Key Identifier:
keyid:78:66:48:F7:9B:B7:9E:1F:0B:0F:F9:03:96:92:F7:4E:4F:3C:E1:F8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/eGZI95u3nh8LD_kDlpL3Tk884fg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eGZI95u3nh8LD_kDlpL3Tk884fg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/VeNiMui0FZZ_k5DjiTUCVYv0jEs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.10.4.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:a4:5b:b4:41:b9:09:ab:27:8a:98:d9:b9:b4:f0:9a:53:df:
f6:b7:92:c0:5e:5d:f2:d1:df:71:f3:ad:fc:16:65:dd:4c:0a:
63:6f:a9:eb:6c:4a:8e:e6:cf:e9:a5:86:f1:d0:bc:6d:f9:a2:
e7:3d:74:b8:8a:69:df:e5:38:33:5f:f8:96:b7:52:8e:6f:f6:
fa:7b:75:a6:f7:c7:b9:40:55:ac:25:45:fa:bd:00:14:18:63:
81:15:7e:2e:29:3f:87:1b:ff:b9:8f:9b:75:27:65:31:38:a6:
79:39:62:0b:ba:60:41:55:10:e6:39:53:b0:7b:46:45:1f:5e:
51:90:c4:87:4a:a4:b0:23:e8:31:b6:c6:7e:10:21:db:f6:5b:
b3:fb:9b:da:a1:bb:7b:94:65:37:38:42:fd:70:b9:80:3b:23:
62:cd:06:2b:e9:3c:a5:9f:7b:a6:8c:d2:67:7a:f8:23:e8:75:
52:9c:7a:33:88:9d:67:78:5d:25:91:76:f4:c9:1e:27:ea:19:
08:74:57:ef:d4:13:4d:ce:50:4b:f0:4d:54:c7:be:a5:a8:4c:
6c:9e:f6:d3:ac:ab:5d:0f:34:cf:d1:41:4b:ae:38:c1:0a:7c:
c7:7a:63:cc:6f:ac:23:64:38:1e:cd:26:6a:4c:73:a7:5d:92:
44:ff:22:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org