Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/ZJJqiFqjBmU-BpCrvLs3EegFm0k.roa
File: ZJJqiFqjBmU-BpCrvLs3EegFm0k.roa (raw, json)
Hash identifier: DtYSJ45PMYK5itgYqn33JV8xHDzr5Cg+BC9RM9Sk9Pk=
Subject key identifier: 64:92:6A:88:5A:A3:06:65:3E:06:90:AB:BC:BB:37:11:E8:05:9B:49
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0C65
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/ZJJqiFqjBmU-BpCrvLs3EegFm0k.roa
Signing time: Fri 01 Sep 2023 08:26:31 +0000
ROA not before: Fri 01 Sep 2023 08:26:31 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18429
IP address blocks: 103.224.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3173 (0xc65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Sep 1 08:26:31 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=64926A885AA306653E0690ABBCBB3711E8059B49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:95:e6:9a:74:21:43:3f:fe:01:45:08:85:93:
39:74:ab:a3:47:00:98:a3:07:c6:02:c0:df:c1:49:
f7:fe:53:80:91:31:e1:c0:f4:75:06:1d:db:4c:d3:
91:1d:4a:da:c3:92:58:a9:88:4d:1e:34:da:6c:68:
19:93:de:ec:ae:0c:98:59:4d:58:6c:27:b2:cc:25:
28:ec:14:91:71:e6:eb:7a:67:8b:c1:a3:05:21:31:
d3:d0:2b:ad:dc:7b:52:31:6e:1d:ef:99:e7:c4:20:
a3:ac:06:a3:4b:0b:50:3c:74:ef:8c:ea:2a:9d:75:
bf:15:65:9f:ce:fa:22:7f:86:db:02:08:de:d2:7b:
66:c6:6f:ff:64:e8:3c:c4:82:9f:16:83:ba:94:85:
d7:40:71:27:44:94:1f:38:05:e2:e0:dc:52:b9:71:
6e:13:63:6b:7c:da:cd:4e:f9:07:18:1a:ef:8b:9c:
30:6f:9d:ad:fe:5f:9a:ad:39:c6:38:3f:15:08:5c:
b8:6f:b7:c6:a7:68:4b:f4:b5:b9:0c:7a:7a:b2:87:
54:ce:26:e4:b1:81:92:80:bd:b2:6d:a2:d7:0b:67:
fd:3f:44:df:27:0e:e4:05:58:b4:ac:36:fd:b7:20:
68:e3:9f:d3:2a:b5:40:d1:71:6c:29:25:0d:17:8c:
74:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:92:6A:88:5A:A3:06:65:3E:06:90:AB:BC:BB:37:11:E8:05:9B:49
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/ZJJqiFqjBmU-BpCrvLs3EegFm0k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.224.200.0/22
Signature Algorithm: sha256WithRSAEncryption
96:fc:44:30:23:f3:2e:02:03:3c:3e:aa:2d:bd:56:d6:5e:f1:
81:d3:90:3b:34:9b:3a:21:f0:ea:ae:41:f5:91:81:da:f4:a7:
bc:f5:2f:07:a5:33:e9:65:4d:73:b0:2b:94:16:bf:02:62:41:
fe:0b:a4:da:67:bf:51:ca:1c:b3:3a:fe:1e:3d:0f:8e:e5:9f:
03:76:95:78:68:23:5b:29:4a:10:8a:1b:09:4d:5c:34:be:4a:
29:95:16:fb:9f:65:f5:3f:7f:56:0a:70:f3:52:da:9f:67:e4:
59:62:a7:23:e3:b2:2d:8e:3e:a7:e9:a4:12:0e:fb:c7:1b:0c:
4d:ad:6e:23:c7:13:bc:a7:9d:c1:7b:a5:45:86:80:ff:83:3f:
d9:c7:7a:73:fd:ab:7b:69:3b:d8:72:cc:20:87:7a:21:5f:2a:
77:a7:3b:c4:01:51:63:6b:5d:d4:f0:7a:bf:59:9d:ad:66:b3:
be:ff:06:23:99:93:aa:50:7f:55:12:d2:b0:a2:d1:fe:cf:f9:
ea:d5:8d:b4:dc:54:c0:bc:a4:fe:8c:c3:56:67:34:2c:ae:86:
8e:ff:e4:95:93:ba:49:d6:49:e2:bb:61:92:33:73:6c:fc:f9:
ee:79:db:4b:67:25:6d:34:a4:d7:e7:cd:45:5f:6b:8a:5a:03:
e5:7e:40:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org