Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/K-Wui3cA9TN6o7mamWCIQV0J7t0.roa
File: K-Wui3cA9TN6o7mamWCIQV0J7t0.roa (raw, json)
Hash identifier: d31cElAsTgoOrGMuQAv+0nYqCwVZK5GEPm3g/HfO4Tk=
Subject key identifier: 2B:E5:AE:8B:77:00:F5:33:7A:A3:B9:9A:99:60:88:41:5D:09:EE:DD
Certificate issuer: /CN=D330BC4E137B1512E2E4506806B870A4EAA860D7
Certificate serial: EE
Authority key identifier: D3:30:BC:4E:13:7B:15:12:E2:E4:50:68:06:B8:70:A4:EA:A8:60:D7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0zC8ThN7FRLi5FBoBrhwpOqoYNc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/K-Wui3cA9TN6o7mamWCIQV0J7t0.roa
Signing time: Thu 08 Aug 2024 09:11:51 +0000
ROA not before: Thu 08 Aug 2024 09:11:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131149
IP address blocks: 103.6.126.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D330BC4E137B1512E2E4506806B870A4EAA860D7
Validity
Not Before: Aug 8 09:11:51 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2BE5AE8B7700F5337AA3B99A996088415D09EEDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:24:f0:12:26:70:6a:36:a1:5e:79:a9:35:
3d:6a:f4:4f:0e:99:73:a0:08:6b:51:f9:38:12:93:
d0:1c:6f:52:c2:af:10:f3:ae:97:90:7a:7e:8d:bd:
27:a5:c1:da:00:56:9c:da:ea:0b:7b:9d:89:1a:d7:
0f:f6:40:b7:2f:8e:ed:3e:fa:9a:3c:87:17:ff:ea:
43:0f:9a:85:83:21:85:e5:a2:bd:a2:17:64:fd:38:
1b:ed:f1:c3:04:a7:df:38:2e:b9:e1:de:b8:48:5c:
11:68:44:00:06:0e:30:78:6f:d7:8d:38:0c:00:34:
44:07:34:ad:67:81:1e:3d:ef:68:b4:23:3e:fe:09:
50:df:ca:2e:de:13:69:73:4d:bf:fa:95:e8:5a:33:
2d:39:d7:f6:3e:d0:1c:78:3d:a6:cb:5c:05:ba:96:
3e:98:3c:eb:00:b3:ca:d6:e6:44:98:f7:64:78:3f:
05:f6:59:eb:6d:73:12:3c:e9:ca:f3:b1:42:1f:1e:
6b:8f:d0:ea:3c:28:1f:5f:f6:2d:3b:42:60:54:a3:
f1:ac:8a:ed:aa:d8:54:fd:1d:8d:87:b9:d3:5f:9b:
34:ea:b8:df:63:47:e7:62:cb:23:93:8b:71:8c:6c:
3a:fd:4b:ac:b6:71:db:65:38:0a:7f:70:ed:c3:93:
02:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E5:AE:8B:77:00:F5:33:7A:A3:B9:9A:99:60:88:41:5D:09:EE:DD
X509v3 Authority Key Identifier:
keyid:D3:30:BC:4E:13:7B:15:12:E2:E4:50:68:06:B8:70:A4:EA:A8:60:D7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0zC8ThN7FRLi5FBoBrhwpOqoYNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0zC8ThN7FRLi5FBoBrhwpOqoYNc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/K-Wui3cA9TN6o7mamWCIQV0J7t0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.6.126.0/23
Signature Algorithm: sha256WithRSAEncryption
07:41:7b:7a:11:08:6b:6c:d2:8f:79:8f:b3:dc:37:29:29:89:
a9:66:39:79:e7:c5:a9:1d:82:46:c3:9c:45:f2:38:14:89:f6:
81:60:54:61:20:57:7f:2f:70:de:8d:ad:c6:61:e3:6a:83:c6:
a9:ed:bb:bc:58:12:d7:7e:f2:3b:53:5d:c1:80:46:d8:d5:1d:
ee:e5:c1:f0:76:99:a4:23:a1:97:c3:9e:84:86:f3:90:db:1f:
46:39:2b:53:66:db:a0:3b:78:ee:21:d0:4f:50:99:70:8d:ac:
2e:6d:e5:c8:9e:b2:87:04:fd:12:ea:a7:09:7d:c2:5b:dd:76:
4c:e5:bd:6f:70:f6:28:99:e0:63:88:83:e8:0d:a9:82:5b:2a:
cb:6c:2a:4a:ea:63:ac:81:9e:c3:53:51:e1:28:cb:c2:c9:15:
6c:6c:b6:72:57:75:8c:8d:8d:5d:70:33:ee:ea:c0:a7:44:80:
f1:05:f4:2b:b1:93:3f:03:ff:ab:12:a6:5e:06:95:4e:a1:7b:
b6:57:4a:76:37:8b:c0:2a:6b:a9:29:fc:fb:34:59:19:a9:dd:
81:83:d5:b2:24:40:d6:44:59:74:bd:10:3b:a7:52:bd:ba:0e:
d2:91:fa:4a:3e:1d:c0:b0:9a:79:48:a1:24:ac:b7:12:4c:f4:
d0:ef:a0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:10 2024 by rpki-client on console-ams.rpki-client.org