Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/6CxHLxJXPYDD5w30HzbDkfZnjwA.roa
File: 6CxHLxJXPYDD5w30HzbDkfZnjwA.roa (raw, json)
Hash identifier: RapMLn1QdfTeFt2uavARe5JZe2y8Q3zh1HQiRZoahyA=
Subject key identifier: E8:2C:47:2F:12:57:3D:80:C3:E7:0D:F4:1F:36:C3:91:F6:67:8F:00
Certificate issuer: /CN=6016EF41F321C9AA6C1E13D115B5B60A3029C8E5
Certificate serial: 04
Authority key identifier: 60:16:EF:41:F3:21:C9:AA:6C:1E:13:D1:15:B5:B6:0A:30:29:C8:E5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YBbvQfMhyapsHhPRFbW2CjApyOU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/6CxHLxJXPYDD5w30HzbDkfZnjwA.roa
Signing time: Fri 08 Sep 2023 12:09:16 +0000
ROA not before: Fri 08 Sep 2023 12:09:16 +0000
ROA not after: Thu 05 Sep 2024 08:23:46 +0000
asID: 131642
IP address blocks: 103.69.80.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6016EF41F321C9AA6C1E13D115B5B60A3029C8E5
Validity
Not Before: Sep 8 12:09:16 2023 GMT
Not After : Sep 5 08:23:46 2024 GMT
Subject: CN=E82C472F12573D80C3E70DF41F36C391F6678F00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1a:6e:e5:0c:33:d1:c6:8d:1f:a3:8d:6a:52:
36:29:34:cb:9b:ef:51:bb:24:f2:19:d7:1b:e2:7e:
5d:34:dc:c5:97:c2:46:7b:10:29:c4:a7:3c:a2:05:
df:c7:5d:7d:10:a3:78:6f:af:d4:5e:e4:b3:28:74:
ac:ae:62:c6:38:5b:bc:d6:17:46:f7:79:da:29:39:
28:77:eb:a2:7c:a6:c9:f2:12:1e:e8:41:29:70:b4:
e6:ea:8e:9e:30:2b:0a:4e:1e:be:74:98:19:bf:7e:
36:0a:96:98:ad:6e:d8:42:ee:4f:a9:a1:7c:3f:90:
c6:31:6c:31:11:a7:a3:27:91:e5:2b:32:8c:90:49:
38:a8:1b:12:39:24:38:8b:eb:c0:1b:96:92:ac:b2:
22:4a:fd:bc:37:ee:8e:3b:f5:9f:c0:90:d4:7a:1c:
35:96:2a:1f:5d:23:1a:d2:18:6f:c3:b3:22:05:bf:
a2:95:f3:12:bf:c3:2f:9b:8b:76:aa:d2:86:39:0c:
a3:35:35:5e:e0:84:1b:1a:76:2b:4a:c9:88:d5:5d:
39:1c:9a:33:90:cc:df:4e:51:8a:c7:9e:cd:b7:61:
d5:8d:91:f7:6a:02:ba:b7:50:4d:f7:eb:94:99:b2:
ca:6d:94:29:9d:7a:12:5a:82:91:8b:02:38:f0:e8:
bb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2C:47:2F:12:57:3D:80:C3:E7:0D:F4:1F:36:C3:91:F6:67:8F:00
X509v3 Authority Key Identifier:
keyid:60:16:EF:41:F3:21:C9:AA:6C:1E:13:D1:15:B5:B6:0A:30:29:C8:E5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/YBbvQfMhyapsHhPRFbW2CjApyOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YBbvQfMhyapsHhPRFbW2CjApyOU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/6CxHLxJXPYDD5w30HzbDkfZnjwA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.80.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:0b:38:9a:c8:22:8c:52:b8:3f:94:73:3a:c3:c1:ce:5c:5b:
82:e2:70:87:40:7b:18:f2:1c:a2:6f:4a:b8:96:ea:7d:03:66:
0f:a7:96:cc:e4:4b:10:a4:c4:9b:ba:ae:e3:94:e0:10:db:05:
f9:21:80:ec:25:e9:10:71:3a:7e:6a:6b:07:3c:dd:23:84:92:
2d:58:d8:02:5f:63:a9:e0:08:42:e8:c9:af:a8:b6:9a:0d:f4:
41:39:cf:7c:2b:74:66:1d:1b:24:9a:9d:de:f4:cb:8b:72:04:
94:7c:e1:e6:ca:0b:0f:30:99:b1:34:b1:c7:10:cf:9a:e1:cd:
87:ef:95:76:32:98:70:94:37:8a:e4:34:87:95:1f:32:77:73:
31:a8:c2:50:53:fe:45:d9:43:f6:16:a9:44:04:06:d6:4b:91:
4d:63:ff:b8:77:92:6d:e9:f4:d9:e8:c6:9b:c0:83:4f:4c:3a:
45:26:c8:6b:bc:a6:bf:b2:86:c3:b9:99:fe:b0:7a:7f:0e:06:
56:58:0d:d2:09:08:82:88:8c:25:a2:67:1d:1c:8f:a5:ac:8e:
88:3c:ba:15:ca:e6:20:71:47:24:2d:7a:36:97:c0:db:c0:f1:
65:b0:4a:16:50:1f:4a:3e:35:d1:55:03:18:52:73:b3:d8:20:
21:20:53:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org