Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CPSYS/qt61YrBU9bUtlk_8ECmu2jkfZcQ.roa
File: qt61YrBU9bUtlk_8ECmu2jkfZcQ.roa (raw, json)
Hash identifier: PlzmZ+S+Qpl1vwG5Rf1DE5FoITIJMKsp+tn+slr6OZQ=
Subject key identifier: AA:DE:B5:62:B0:54:F5:B5:2D:96:4F:FC:10:29:AE:DA:39:1F:65:C4
Certificate issuer: /CN=1F877983527470E200D5AE06A01588213555FEE6
Certificate serial: 01AF
Authority key identifier: 1F:87:79:83:52:74:70:E2:00:D5:AE:06:A0:15:88:21:35:55:FE:E6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/H4d5g1J0cOIA1a4GoBWIITVV_uY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/qt61YrBU9bUtlk_8ECmu2jkfZcQ.roa
Signing time: Mon 24 Jun 2024 12:47:53 +0000
ROA not before: Mon 24 Jun 2024 12:47:53 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 134823
IP address blocks: 103.14.170.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431 (0x1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F877983527470E200D5AE06A01588213555FEE6
Validity
Not Before: Jun 24 12:47:53 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=AADEB562B054F5B52D964FFC1029AEDA391F65C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ae:4c:1b:dd:67:1b:20:da:5c:21:66:f1:0d:
ab:77:47:d9:4c:fe:3a:4b:77:3f:d5:90:48:e2:98:
2a:f8:4a:a3:b2:b3:f3:78:19:d3:a3:cc:73:bb:d1:
cc:27:19:d6:e0:0c:bf:0d:03:13:47:54:4c:cd:f8:
4f:51:cd:eb:bd:b4:a1:4b:22:23:8e:85:ea:5e:09:
37:bc:03:c0:ab:d8:eb:08:94:42:12:43:72:6b:37:
4f:d7:4d:d2:1e:89:03:85:dc:b9:25:96:6a:be:24:
b8:4d:ac:07:d6:7a:1f:65:4c:0a:6a:4a:62:86:5c:
28:88:20:c2:8a:91:83:26:ee:ed:6b:2b:8d:a4:ed:
70:41:48:a3:04:73:67:fe:f9:c2:c7:3d:b8:93:9a:
43:40:76:35:d8:1d:3e:00:84:1c:22:60:05:e7:61:
62:2c:5f:16:ef:ea:7e:f7:35:1e:cb:5c:9c:5a:38:
52:01:0b:04:26:3e:72:3a:a0:db:1d:8a:51:4e:88:
2d:0b:0b:4c:18:84:34:21:9d:eb:16:29:f2:bd:70:
eb:37:46:fd:ea:61:5e:bf:bf:3a:60:26:4c:56:a1:
67:a9:fb:67:15:c1:8e:63:64:6b:93:4f:34:24:a5:
16:58:0e:20:e0:91:c5:8b:0b:4f:57:a6:ad:17:f1:
f2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DE:B5:62:B0:54:F5:B5:2D:96:4F:FC:10:29:AE:DA:39:1F:65:C4
X509v3 Authority Key Identifier:
keyid:1F:87:79:83:52:74:70:E2:00:D5:AE:06:A0:15:88:21:35:55:FE:E6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/H4d5g1J0cOIA1a4GoBWIITVV_uY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/H4d5g1J0cOIA1a4GoBWIITVV_uY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/qt61YrBU9bUtlk_8ECmu2jkfZcQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.14.170.0/23
Signature Algorithm: sha256WithRSAEncryption
48:e9:79:ee:6f:39:bb:43:ed:c0:ec:c6:ad:dc:0e:34:13:90:
ad:5c:c4:8f:91:a5:4d:3e:23:0f:cc:c2:42:61:9e:ce:f2:3e:
d1:d4:9b:86:5f:8a:43:5a:22:2a:32:ea:0a:f8:92:ed:9a:30:
fe:0e:91:e3:aa:4c:ec:91:9a:fb:64:19:75:65:ac:b8:e5:81:
77:f7:5c:59:e6:04:3c:39:80:85:df:3c:3b:2c:15:72:dc:69:
5c:d4:32:cf:c9:13:07:28:8e:e9:d8:48:3a:9f:14:18:d9:60:
be:88:ad:9a:89:53:f0:ac:a6:71:91:a9:4f:da:00:98:78:de:
02:1e:be:33:06:13:e5:a7:f3:9f:b1:88:63:93:7d:f8:81:0e:
97:bd:7a:14:a3:f3:f9:46:29:02:1c:ad:3a:19:c0:b5:c2:74:
c3:8a:5b:76:d7:5b:89:2e:40:83:1d:bb:30:17:08:0b:42:8a:
35:16:69:a1:53:09:29:80:03:07:10:e1:38:ed:e4:3e:a3:16:
4b:43:eb:64:b2:45:b7:d4:0f:50:46:a1:48:2f:f8:2a:3e:b4:
46:1c:89:e1:72:77:46:ca:5d:ce:7b:4f:07:4b:cf:86:32:e5:
fa:1c:0c:97:cb:f8:06:70:d4:68:e3:7c:2f:35:b9:a1:5a:6b:
9b:ed:d9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org