Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHARMWAY/iBhVZY0qW42X_aDzpuTEntnXjhs.roa
File: iBhVZY0qW42X_aDzpuTEntnXjhs.roa (raw, json)
Hash identifier: JRymmjcz3G+l56c7GsMUj9D+W98K7ZXZFGo7bXaOS9s=
Subject key identifier: 88:18:55:65:8D:2A:5B:8D:97:FD:A0:F3:A6:E4:C4:9E:D9:D7:8E:1B
Certificate issuer: /CN=179C63DB1D6F3AB2FB0EE78E1A897B85BBD2A602
Certificate serial: 015E
Authority key identifier: 17:9C:63:DB:1D:6F:3A:B2:FB:0E:E7:8E:1A:89:7B:85:BB:D2:A6:02
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/F5xj2x1vOrL7DueOGol7hbvSpgI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHARMWAY/iBhVZY0qW42X_aDzpuTEntnXjhs.roa
Signing time: Fri 01 Sep 2023 08:28:34 +0000
ROA not before: Fri 01 Sep 2023 08:28:34 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 63895
IP address blocks: 103.185.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179C63DB1D6F3AB2FB0EE78E1A897B85BBD2A602
Validity
Not Before: Sep 1 08:28:34 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=881855658D2A5B8D97FDA0F3A6E4C49ED9D78E1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ba:99:88:f8:36:15:7a:c5:d8:6e:e1:de:4b:
bf:03:ec:17:d1:48:ff:d1:4e:83:60:0c:27:83:ca:
71:84:4e:02:fa:5f:bc:a0:be:68:db:a8:6b:dd:c6:
d9:cb:67:08:fe:e2:7a:da:31:d6:35:f4:0c:c4:da:
7c:17:63:88:18:64:4e:8f:ef:06:4e:46:c0:0b:f6:
f0:19:0c:ec:6b:3b:ae:a3:3c:2e:e4:29:42:b3:25:
37:01:08:13:86:0f:22:4e:ac:25:fc:d3:40:d5:ff:
0c:39:f2:61:69:df:62:ed:3f:d7:8b:2c:c2:5d:c0:
00:d1:ec:b8:ca:e5:7b:a7:d1:4e:e5:df:cb:f1:57:
a9:33:0d:e5:1c:6e:b3:89:86:83:cf:70:ef:3b:45:
15:57:ef:6d:28:0b:77:e4:8b:06:f0:f0:ac:ae:c1:
fb:34:01:8e:78:d1:1d:d7:20:73:5d:8a:36:b6:eb:
37:8b:b5:d6:b0:b0:4f:55:80:ea:ce:c7:84:44:8f:
45:3d:6f:a6:e2:3b:61:dd:b6:91:ec:f1:0c:97:22:
ee:65:6b:91:3b:e7:b8:6e:98:3f:51:7b:3a:83:65:
a9:cb:87:84:3b:af:9e:da:30:3a:41:69:b2:e7:df:
fd:96:0e:f9:e6:01:19:33:25:88:47:b7:52:03:6f:
c9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:18:55:65:8D:2A:5B:8D:97:FD:A0:F3:A6:E4:C4:9E:D9:D7:8E:1B
X509v3 Authority Key Identifier:
keyid:17:9C:63:DB:1D:6F:3A:B2:FB:0E:E7:8E:1A:89:7B:85:BB:D2:A6:02
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHARMWAY/F5xj2x1vOrL7DueOGol7hbvSpgI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/F5xj2x1vOrL7DueOGol7hbvSpgI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHARMWAY/iBhVZY0qW42X_aDzpuTEntnXjhs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.29.0/24
Signature Algorithm: sha256WithRSAEncryption
90:5f:42:44:b8:a2:c8:a5:d3:d5:33:1c:a7:a3:83:cf:6b:63:
55:a6:87:f5:48:9c:24:fc:dc:36:1a:77:bc:f3:6c:97:0e:97:
49:f5:8f:c9:79:c4:d5:30:ab:5f:98:d4:ea:44:54:96:c1:e3:
cd:3d:94:1b:52:09:3f:8c:40:63:60:27:c2:e5:9a:b2:ab:0b:
9d:b5:4e:e0:23:46:4a:75:cb:8f:dc:00:a4:2b:66:17:dd:c5:
6c:3a:f9:93:1c:19:09:2c:c3:dc:6f:9a:a5:e5:7e:57:93:29:
0c:37:2a:46:a0:2e:73:10:41:16:ce:90:9f:dd:96:d2:b0:1c:
e8:90:1b:02:df:c2:47:80:5d:bc:94:fc:f3:5e:4e:45:6b:63:
e1:4b:de:09:e8:67:53:fe:9f:aa:5a:27:9f:b6:ff:4c:1b:8d:
71:20:04:e4:15:6e:9e:c8:e5:bc:9d:3d:b7:0c:96:e2:2e:0a:
59:b8:91:1a:d9:79:ee:9b:1d:19:9e:b2:21:48:0a:8a:0d:7e:
f1:63:38:2e:75:88:e5:e4:dc:f1:54:2d:dd:f3:35:b2:07:88:
4e:f7:84:fb:61:d4:06:9b:26:87:9b:28:7c:28:dd:23:33:9f:
9a:7b:1a:22:29:98:b5:bb:11:02:96:06:8a:1c:08:15:0b:7c:
0e:e6:8b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org