Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASUS/h9rjAwhhboynuFqXcjiMmjS6Xdk.roa
File: h9rjAwhhboynuFqXcjiMmjS6Xdk.roa (raw, json)
Hash identifier: 9LpFovwhUNmpe9SdraChCgw0Vdx247kEPyGRc+7xzzA=
Subject key identifier: 87:DA:E3:03:08:61:6E:8C:A7:B8:5A:97:72:38:8C:9A:34:BA:5D:D9
Certificate issuer: /CN=786648F79BB79E1F0B0FF9039692F74E4F3CE1F8
Certificate serial: 0AEA
Authority key identifier: 78:66:48:F7:9B:B7:9E:1F:0B:0F:F9:03:96:92:F7:4E:4F:3C:E1:F8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eGZI95u3nh8LD_kDlpL3Tk884fg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/h9rjAwhhboynuFqXcjiMmjS6Xdk.roa
Signing time: Fri 01 Sep 2023 08:24:29 +0000
ROA not before: Fri 01 Sep 2023 08:24:29 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131144
IP address blocks: 103.10.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2794 (0xaea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786648F79BB79E1F0B0FF9039692F74E4F3CE1F8
Validity
Not Before: Sep 1 08:24:29 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=87DAE30308616E8CA7B85A9772388C9A34BA5DD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:03:13:5f:b1:70:34:99:91:d3:65:75:c6:
1c:a7:55:6a:56:5a:a5:89:1e:36:61:52:70:fe:5e:
58:8c:87:c6:21:e4:e0:67:7c:e9:a3:33:17:46:ee:
c6:31:43:0f:21:7e:cc:56:7f:d5:6f:5f:66:30:f2:
96:9a:4c:cb:a2:68:7e:27:c7:3b:5d:aa:e9:3e:b6:
89:43:36:8b:e7:11:73:4e:9e:7d:33:09:8d:dd:a8:
52:b7:53:fb:b7:43:da:fc:34:44:e9:ee:fe:90:87:
af:a2:04:39:ca:c9:ab:90:90:b2:e7:e3:51:cb:72:
de:ba:b5:ff:be:ad:3a:11:93:22:52:4a:d1:41:35:
3c:95:7c:ad:6e:23:91:a2:a0:43:c1:8a:87:e3:39:
07:66:f8:19:f0:a4:c9:4e:fc:13:ff:b4:21:d4:8b:
c1:11:3a:ed:30:67:1c:86:41:e0:99:a6:75:08:c3:
ac:4f:3c:51:c8:ed:ba:ac:38:32:63:34:93:94:9b:
a0:d0:0e:3f:bf:32:90:fa:07:be:99:c4:56:b0:39:
7f:39:49:d5:13:72:3e:81:19:7e:3b:9a:df:81:10:
24:94:a2:0e:cf:fd:8f:61:55:5c:b4:ab:38:e4:f2:
e2:72:ba:28:20:bf:59:ae:df:34:3c:aa:7d:71:ed:
ee:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DA:E3:03:08:61:6E:8C:A7:B8:5A:97:72:38:8C:9A:34:BA:5D:D9
X509v3 Authority Key Identifier:
keyid:78:66:48:F7:9B:B7:9E:1F:0B:0F:F9:03:96:92:F7:4E:4F:3C:E1:F8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/eGZI95u3nh8LD_kDlpL3Tk884fg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eGZI95u3nh8LD_kDlpL3Tk884fg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/h9rjAwhhboynuFqXcjiMmjS6Xdk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.10.4.0/22
Signature Algorithm: sha256WithRSAEncryption
91:10:74:ca:bb:ef:c0:77:90:2d:12:7a:00:3e:7d:88:ec:29:
de:9a:9c:65:93:5a:10:ab:76:64:bf:0a:aa:52:58:1f:5d:a6:
5a:da:66:4e:de:d7:de:6a:56:84:39:ec:39:bf:6e:5e:40:70:
3d:fd:42:81:49:46:ee:64:3d:90:14:21:87:4c:ea:38:8b:8a:
4b:50:96:07:bc:07:dd:37:f6:fa:88:28:f8:df:71:30:66:60:
ea:46:f5:9d:b3:54:af:29:48:9e:36:d9:08:48:96:fa:eb:4a:
0c:a1:f7:c6:19:84:36:d1:5c:db:88:a7:08:68:98:36:d1:20:
65:c1:98:13:15:86:10:e5:7f:26:da:21:e2:b0:28:4b:1c:23:
f4:bd:00:ad:76:4a:73:c9:e2:9f:4a:08:ea:70:94:c7:e7:4c:
b2:b0:0b:06:01:48:ad:1e:ff:54:e4:7f:7f:88:d5:c4:d6:9d:
b1:22:4b:7a:85:ab:52:a1:6e:07:52:c9:d2:94:b2:7f:34:29:
5c:cd:87:00:92:15:d0:77:23:63:a2:6d:9f:c7:bb:93:db:44:
76:f5:b9:e7:aa:3a:15:38:e4:e4:0a:8d:11:ec:4b:67:5f:0d:
b4:32:41:a9:ba:43:c4:5d:88:97:4f:92:ac:95:ae:3c:f4:65:
1c:32:26:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:10 2024 by rpki-client on console-ams.rpki-client.org