Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/H5eKrRly-KFdfhSxy_HdCOl-WUg.roa
File: H5eKrRly-KFdfhSxy_HdCOl-WUg.roa (raw, json)
Hash identifier: ac4P7PsFkNtdrjHqmIajx24mdfdyknhvm826LNOxMX0=
Subject key identifier: 1F:97:8A:AD:19:72:F8:A1:5D:7E:14:B1:CB:F1:DD:08:E9:7E:59:48
Certificate issuer: /CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148
Certificate serial: 0732
Authority key identifier: 8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/H5eKrRly-KFdfhSxy_HdCOl-WUg.roa
Signing time: Fri 01 Sep 2023 08:28:47 +0000
ROA not before: Fri 01 Sep 2023 08:28:47 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7483
IP address blocks: 103.148.146.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1842 (0x732)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148
Validity
Not Before: Sep 1 08:28:47 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1F978AAD1972F8A15D7E14B1CBF1DD08E97E5948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:be:69:1d:78:dc:7c:49:ca:c5:c1:bb:8d:
99:5d:36:69:0e:c7:79:d7:27:ad:09:41:dc:4d:fd:
16:66:58:5d:e2:08:b8:7a:7b:45:df:d5:c1:1c:ec:
69:83:eb:82:7d:97:aa:38:78:1a:5c:cd:04:34:e7:
3a:ef:c6:f6:df:d0:42:30:00:aa:13:ca:0b:30:f0:
a2:4b:45:1a:8e:51:a2:5d:19:dd:85:93:1a:64:4b:
7a:b1:8b:ae:5a:5a:c4:50:77:3a:06:bb:cb:6e:07:
12:98:32:db:a2:d0:f6:44:db:3a:55:5d:2e:58:d0:
16:e2:b5:31:60:ef:21:23:42:38:6f:64:dc:eb:c3:
fc:a9:b3:bc:a0:e5:2b:80:f0:3b:7d:2a:9f:39:60:
25:04:39:74:6d:6f:38:d0:ca:ec:82:14:8a:47:b0:
4a:8e:d4:59:a3:84:e8:ef:dd:d8:c5:5b:e7:00:2d:
ce:85:2f:59:83:c3:d9:f1:71:53:68:9e:31:66:90:
0c:9a:f6:19:1c:18:c6:2d:09:05:31:26:81:1a:54:
d6:7e:01:d2:46:04:4a:52:d5:4f:33:6d:79:a5:b4:
75:97:be:42:51:ef:a9:a2:4e:0f:be:50:57:3d:66:
5b:da:a9:dc:71:ac:12:cb:74:9c:ed:f6:6f:dc:a6:
34:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:97:8A:AD:19:72:F8:A1:5D:7E:14:B1:CB:F1:DD:08:E9:7E:59:48
X509v3 Authority Key Identifier:
keyid:8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/H5eKrRly-KFdfhSxy_HdCOl-WUg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.146.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:16:25:e8:ee:d2:b9:33:71:2c:4a:1d:1d:5d:dd:da:b1:42:
5f:67:d7:a6:96:1a:6d:a5:65:31:f1:44:61:2c:97:fa:dd:8d:
a5:7b:30:61:7f:06:cc:e6:f8:8d:0b:5f:f8:60:60:0e:39:6a:
5a:7e:7f:8f:52:ed:28:90:dc:42:a2:5f:c6:97:f6:b5:f5:5c:
07:5b:7f:19:5d:3a:a4:5d:7f:ca:9c:12:85:ff:4c:ca:8b:18:
a6:a1:ba:55:cc:a2:68:b7:71:04:d8:18:dd:93:6d:27:64:09:
b0:8c:0f:e9:98:73:c1:ec:aa:3a:40:32:63:b5:08:a8:34:c2:
97:f0:06:7a:fe:e2:8a:68:9e:b6:7e:e7:5d:e1:12:08:33:68:
5c:d8:33:d9:bd:15:2f:cc:82:99:5f:fb:d2:66:84:9c:d3:38:
6b:27:b9:3b:cf:f4:68:29:87:df:9f:ed:a5:29:cf:56:f7:eb:
3e:18:74:3b:bc:9a:24:19:d3:d9:db:0f:84:54:6c:90:3e:22:
8f:36:e1:fa:ec:3d:3a:c2:1a:6d:f6:ee:6c:31:fe:31:ae:ec:
68:f1:be:42:53:db:47:96:b8:dc:6b:21:19:68:3b:95:71:11:
08:6b:f4:40:52:71:b4:6c:ed:8f:87:3d:e4:9b:ce:a7:1a:9b:
9d:56:7f:95
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org