Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CROWN/KShxi45alEshkYSV-qauLn2m4Rg.roa
File: KShxi45alEshkYSV-qauLn2m4Rg.roa (raw, json)
Hash identifier: EWaYE4kfhcBmqWYmdmsA6Irl4pg3xumb2N4W9K+w3cM=
Subject key identifier: 29:28:71:8B:8E:5A:94:4B:21:91:84:95:FA:A6:AE:2E:7D:A6:E1:18
Certificate issuer: /CN=4A7B5FFF97B89C87BDBFD46164EE924A87D696E9
Certificate serial: F0
Authority key identifier: 4A:7B:5F:FF:97:B8:9C:87:BD:BF:D4:61:64:EE:92:4A:87:D6:96:E9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Sntf_5e4nIe9v9RhZO6SSofWluk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CROWN/KShxi45alEshkYSV-qauLn2m4Rg.roa
Signing time: Thu 08 Aug 2024 01:11:26 +0000
ROA not before: Thu 08 Aug 2024 01:11:26 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131642
IP address blocks: 103.255.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A7B5FFF97B89C87BDBFD46164EE924A87D696E9
Validity
Not Before: Aug 8 01:11:26 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2928718B8E5A944B21918495FAA6AE2E7DA6E118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:57:71:e7:46:dc:0f:ce:d6:da:87:1c:a5:b9:
8b:aa:8f:d2:f4:10:7c:b7:9e:f2:09:2e:b1:e3:bb:
6f:9e:85:14:4b:44:ca:f5:d9:6d:12:83:ae:60:fe:
d5:79:dd:7b:f2:07:ac:f0:49:bb:61:02:1b:c8:05:
58:e0:c5:96:fb:11:b6:f8:46:a5:47:39:e9:a4:f2:
30:4c:d0:aa:3d:ca:11:72:58:6b:06:72:44:31:40:
53:74:0a:17:be:e5:81:16:91:a4:2e:6e:ff:d4:03:
e2:be:40:ff:33:bf:51:4e:80:f3:79:a3:94:e6:f5:
fd:5b:5a:89:c0:f6:4c:35:3d:30:3f:ff:85:2e:ff:
bf:0f:91:3b:e9:ef:19:47:22:0c:ec:44:4d:d4:53:
5f:b5:e1:2d:c8:6e:65:7d:63:3d:01:7b:13:df:0a:
81:94:39:f0:eb:bf:d6:a8:90:88:0a:61:94:33:80:
bb:f0:90:30:91:69:3c:c9:d1:7b:03:bb:54:04:a2:
75:5e:db:64:69:c5:e6:19:35:58:7a:c9:36:99:20:
71:23:15:38:f2:a9:23:64:35:e0:25:0e:74:63:b0:
c2:1d:12:81:56:b0:b3:04:68:92:c9:ea:fb:5c:d2:
b6:25:37:4e:07:e0:9b:bb:7e:72:e1:67:f6:fc:62:
73:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:28:71:8B:8E:5A:94:4B:21:91:84:95:FA:A6:AE:2E:7D:A6:E1:18
X509v3 Authority Key Identifier:
keyid:4A:7B:5F:FF:97:B8:9C:87:BD:BF:D4:61:64:EE:92:4A:87:D6:96:E9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CROWN/Sntf_5e4nIe9v9RhZO6SSofWluk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Sntf_5e4nIe9v9RhZO6SSofWluk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CROWN/KShxi45alEshkYSV-qauLn2m4Rg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.255.210.0/23
Signature Algorithm: sha256WithRSAEncryption
d0:9b:49:d0:0e:e6:9f:a9:85:fd:e9:c0:e5:62:81:79:fb:a9:
56:1f:2e:57:fe:53:09:a4:ca:1a:f8:1d:79:2d:d6:9f:b9:64:
4b:38:93:13:ba:57:9a:dd:fe:99:fd:40:53:24:92:50:42:3a:
05:18:7c:1b:fc:28:20:2a:0d:83:e0:d4:0c:cc:f6:b1:42:b9:
e6:81:6b:e8:d0:2f:ad:ae:e2:05:7d:6c:37:7c:47:10:2d:18:
47:b5:bd:84:83:2b:be:ea:41:ab:ce:0c:c5:ad:d5:a7:71:18:
4c:be:3c:33:dd:10:d0:c1:a9:a2:c1:09:28:0e:25:d2:e3:41:
7a:61:29:fe:f6:a2:b3:96:23:f5:bf:a5:34:04:37:8f:d9:66:
be:af:8c:eb:3b:a3:c3:83:f7:7e:1e:16:21:9d:77:51:22:8f:
0d:91:55:f0:6e:41:2a:6f:52:7c:74:38:47:42:1e:72:9d:48:
a8:59:bc:69:5e:74:b7:ac:12:4a:65:b8:1a:e8:a8:71:78:07:
df:fc:03:d4:57:ba:dd:6a:61:75:8c:10:9e:65:ba:f9:05:d0:
52:53:7f:7b:89:4b:fe:32:df:73:33:7a:92:42:7f:bc:14:36:
eb:23:43:77:47:a4:8c:dd:d6:0c:2f:69:a5:55:27:df:8b:cf:
40:b9:f5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org