Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CPSYS/X89ruSeTBSidhrSblypVXye5R3U.roa
File: X89ruSeTBSidhrSblypVXye5R3U.roa (raw, json)
Hash identifier: kdjHnjD4d//yOvlwZ1/mC8TUnlv53Va71QTU1/jHNhc=
Subject key identifier: 5F:CF:6B:B9:27:93:05:28:9D:86:B4:9B:97:2A:55:5F:27:B9:47:75
Certificate issuer: /CN=1F877983527470E200D5AE06A01588213555FEE6
Certificate serial: 01AC
Authority key identifier: 1F:87:79:83:52:74:70:E2:00:D5:AE:06:A0:15:88:21:35:55:FE:E6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/H4d5g1J0cOIA1a4GoBWIITVV_uY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/X89ruSeTBSidhrSblypVXye5R3U.roa
Signing time: Mon 24 Jun 2024 12:47:52 +0000
ROA not before: Mon 24 Jun 2024 12:47:52 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 152179
IP address blocks: 103.14.170.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428 (0x1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F877983527470E200D5AE06A01588213555FEE6
Validity
Not Before: Jun 24 12:47:52 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5FCF6BB9279305289D86B49B972A555F27B94775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:c7:61:26:7e:dc:fd:85:da:a3:2b:7f:ea:
94:c6:f6:1e:4f:e1:ab:43:2d:cc:43:e0:5a:ec:f1:
1d:aa:44:9f:7f:b7:6d:c8:a1:62:b1:d2:b7:8d:d5:
83:b5:bc:9c:79:e9:6c:98:da:62:2a:02:c4:9d:1f:
d2:ef:a2:f7:88:84:59:d6:88:cb:3f:b9:e3:89:29:
0a:7e:f0:4b:35:db:0e:63:ff:de:2e:16:43:c9:21:
e7:50:37:38:44:63:15:bf:6d:6e:00:57:fc:dd:17:
5e:40:80:21:d1:a4:b6:9e:47:53:c9:4d:e6:08:0a:
74:cc:29:76:7a:ae:94:5d:ed:c3:51:cf:fb:c1:f9:
3e:03:f8:2a:71:f1:1a:a4:6b:40:9d:53:fa:59:2a:
78:40:6d:3b:b2:1e:a4:e8:25:ef:7d:51:3a:75:ae:
2a:e6:ab:f6:28:e0:7e:be:f5:ea:99:18:a1:7b:95:
a8:55:e1:d0:26:d2:f2:7a:89:12:8a:0e:d4:36:15:
05:8b:94:6f:29:48:58:9d:8a:e4:38:a1:cb:7d:26:
3c:98:db:22:85:86:4e:dc:f4:36:44:d1:ef:6a:fe:
d7:54:27:60:9e:fd:01:1f:74:db:72:0a:8e:1b:a3:
89:79:5a:c8:aa:21:ca:73:a2:48:ab:37:64:ee:58:
d7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CF:6B:B9:27:93:05:28:9D:86:B4:9B:97:2A:55:5F:27:B9:47:75
X509v3 Authority Key Identifier:
keyid:1F:87:79:83:52:74:70:E2:00:D5:AE:06:A0:15:88:21:35:55:FE:E6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/H4d5g1J0cOIA1a4GoBWIITVV_uY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/H4d5g1J0cOIA1a4GoBWIITVV_uY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/X89ruSeTBSidhrSblypVXye5R3U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.14.170.0/23
Signature Algorithm: sha256WithRSAEncryption
18:9f:31:14:49:8c:cf:3b:64:a1:8f:63:8e:68:58:64:6a:52:
ef:17:e4:be:58:a0:84:74:66:f9:8f:c0:23:3d:ab:2b:87:50:
85:f0:dd:7b:c9:c6:99:0d:3c:61:98:de:e1:44:c2:54:35:56:
9d:7e:7b:ee:39:ce:5e:13:c4:0f:41:da:70:fb:00:3c:2e:e4:
c1:0d:ec:6a:d0:b8:04:b5:c0:fb:82:aa:66:a0:69:1c:40:af:
ef:48:3b:1f:99:8f:f8:ec:9a:5c:05:d0:ad:11:7c:89:4b:34:
49:d1:5c:bd:41:72:4a:11:3a:8d:67:41:2b:b5:97:6f:14:6c:
df:65:b4:13:82:7c:9f:f4:3d:2e:26:ae:46:3e:19:61:c9:af:
96:aa:25:bd:18:16:6a:af:3f:85:2d:1f:59:f2:55:e1:19:a9:
20:86:37:3f:ce:43:97:b9:61:31:42:71:1d:34:25:24:47:fd:
73:e6:8d:e7:57:13:de:47:74:ed:75:ee:34:63:a8:ed:16:63:
fb:50:94:68:f8:48:16:16:71:f2:10:17:b2:5c:03:4d:5a:a8:
6c:27:1b:59:57:13:a0:66:f4:53:19:37:54:7d:9f:f2:02:fa:
43:bd:30:4e:82:a4:90:fe:32:d7:bc:f5:65:62:31:58:29:2b:
cc:ec:65:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org