Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/045UU0pizT14gM98I0eERJRXUZ4.roa
File: 045UU0pizT14gM98I0eERJRXUZ4.roa (raw, json)
Hash identifier: cmeXEBJkAs37W0POlCAZZfR3TtERfZ4UpNxmgdU6P4I=
Subject key identifier: D3:8E:54:53:4A:62:CD:3D:78:80:CF:7C:23:47:84:44:94:57:51:9E
Certificate issuer: /CN=EB7F4A8B7B210DB9208ED580357045E5971DE0D3
Certificate serial: 0291
Authority key identifier: EB:7F:4A:8B:7B:21:0D:B9:20:8E:D5:80:35:70:45:E5:97:1D:E0:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/639Ki3shDbkgjtWANXBF5Zcd4NM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/045UU0pizT14gM98I0eERJRXUZ4.roa
Signing time: Fri 01 Sep 2023 08:25:20 +0000
ROA not before: Fri 01 Sep 2023 08:25:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131618
IP address blocks: 103.161.6.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657 (0x291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB7F4A8B7B210DB9208ED580357045E5971DE0D3
Validity
Not Before: Sep 1 08:25:20 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D38E54534A62CD3D7880CF7C234784449457519E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0a:5a:dd:99:f2:07:fd:35:45:d8:93:6f:01:
f5:3b:5d:60:e7:db:32:69:b6:44:30:9a:2c:6d:be:
71:ba:40:2e:ec:bf:9f:aa:76:24:a4:4e:94:28:5f:
8d:00:4c:1b:06:5b:bf:4d:db:cb:2f:bc:de:78:4e:
9f:c3:8f:a2:db:0b:16:46:90:68:55:f6:3c:e7:c9:
ff:e9:b7:be:39:25:6d:7d:bb:e7:c7:92:ce:7e:6b:
8e:6f:3a:4f:cb:19:f2:e9:60:5d:91:cb:1c:29:99:
08:f9:c5:94:79:b3:a1:80:99:94:02:80:43:c4:ef:
e9:1e:56:6f:ff:4f:a8:5b:ef:ac:6f:42:b5:6c:54:
11:5c:44:6d:91:10:17:bf:5e:81:6d:12:bd:d8:9f:
f5:a8:41:10:62:08:f5:ea:71:d7:8d:ee:53:29:c0:
c9:bd:03:d3:2a:e0:c0:b6:e1:fb:fe:fd:31:14:cb:
61:1d:90:53:cb:e9:70:a9:a9:98:86:fe:e6:31:d0:
10:ea:46:77:a1:cd:50:88:04:03:38:4e:d3:86:b2:
ed:13:df:b9:ac:6e:e6:27:68:15:12:37:27:b1:28:
1b:98:8e:46:7f:d7:ab:24:26:34:af:40:d6:71:0b:
87:f9:71:ae:6a:e0:a7:7b:f5:c4:5f:4d:02:7b:dd:
8d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8E:54:53:4A:62:CD:3D:78:80:CF:7C:23:47:84:44:94:57:51:9E
X509v3 Authority Key Identifier:
keyid:EB:7F:4A:8B:7B:21:0D:B9:20:8E:D5:80:35:70:45:E5:97:1D:E0:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/639Ki3shDbkgjtWANXBF5Zcd4NM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/639Ki3shDbkgjtWANXBF5Zcd4NM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/045UU0pizT14gM98I0eERJRXUZ4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.6.0/23
Signature Algorithm: sha256WithRSAEncryption
49:fa:ed:1f:ff:c1:9c:40:b9:67:bf:30:5e:ee:10:b0:36:26:
06:19:7a:9a:31:f9:b9:ef:0b:40:bf:ef:29:3d:02:9d:53:f3:
6f:88:f4:9b:cc:8c:35:92:11:aa:f1:3c:4d:b7:bc:5f:3e:1a:
73:12:f2:5a:36:f7:65:f4:a4:43:ec:ec:07:39:26:3b:89:32:
60:ca:f1:29:4d:b4:55:e5:6d:bb:0b:e3:c7:c5:8d:7e:aa:85:
86:8c:26:d3:e2:1b:75:88:e5:33:8f:25:b6:ee:e8:ab:4b:12:
d4:3e:0c:66:f6:91:08:41:44:c5:fe:34:e1:d2:3c:bb:2e:cd:
20:20:d8:9e:2a:c7:08:43:3a:43:fd:9f:18:ab:40:aa:5f:15:
3e:13:be:38:31:46:93:a5:8d:93:f4:45:ea:e0:d5:be:f2:bb:
59:39:14:ae:be:23:43:9e:06:2f:03:5b:7d:3b:2b:ac:af:ac:
87:dd:56:ed:b7:23:90:df:74:ad:76:06:4f:50:72:d0:a5:d3:
7e:a2:8d:c3:06:ab:1c:4e:7f:5a:0c:a5:d4:0c:0e:c8:6c:f2:
dd:73:40:84:42:b6:97:3b:69:5d:f9:0c:b7:39:c8:01:e7:c0:
72:d8:66:bf:66:3f:f7:93:21:06:64:e3:67:a4:db:f9:8b:72:
d5:e8:97:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:10 2024 by rpki-client on console-ams.rpki-client.org