Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CTII/pn1tZRYHV966m7JmGW_7q2-Hixw.roa
File: pn1tZRYHV966m7JmGW_7q2-Hixw.roa (raw, json)
Hash identifier: m26ikLbKJwDX3myhwz4FlnszH65kkTyKenJu9nPCf8c=
Subject key identifier: A6:7D:6D:65:16:07:57:DE:BA:9B:B2:66:19:6F:FB:AB:6F:87:8B:1C
Certificate issuer: /CN=FBD3AC9FC44C3DD2AB7B5D20BC158C82D83D260A
Certificate serial: 118B
Authority key identifier: FB:D3:AC:9F:C4:4C:3D:D2:AB:7B:5D:20:BC:15:8C:82:D8:3D:26:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-9Osn8RMPdKre10gvBWMgtg9Jgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/pn1tZRYHV966m7JmGW_7q2-Hixw.roa
Signing time: Fri 01 Dec 2023 01:33:41 +0000
ROA not before: Fri 01 Dec 2023 01:33:41 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 984
IP address blocks: 103.130.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4491 (0x118b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBD3AC9FC44C3DD2AB7B5D20BC158C82D83D260A
Validity
Not Before: Dec 1 01:33:41 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A67D6D65160757DEBA9BB266196FFBAB6F878B1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:29:67:26:70:4a:0b:d6:86:e0:30:da:59:
e0:67:0f:f9:06:85:91:3b:22:f3:09:ae:3c:b6:d4:
7b:73:18:d3:43:cd:9b:2c:4f:c1:9c:1b:16:de:8a:
72:ea:ec:d8:68:ba:e2:92:17:0b:e2:5b:c7:f3:9d:
31:ae:9f:c9:40:15:75:d3:21:15:2d:5d:b1:8b:b1:
c4:b4:bb:87:16:79:fa:62:60:98:27:8c:17:08:39:
23:af:9d:49:53:c8:38:79:97:29:9f:f4:71:80:ca:
1f:a8:5f:f2:2f:c1:9e:44:5f:a8:3a:2f:94:3d:fd:
e9:24:a3:7b:3c:b2:11:88:7c:25:6f:d6:03:4f:24:
c9:f6:d9:f8:69:9d:48:7d:4f:b2:f4:07:f0:6c:3a:
31:4b:e4:c8:e4:a1:c4:c4:f6:5b:1b:3c:5e:97:99:
b9:ff:51:a7:31:a4:52:6e:32:a3:f1:03:7c:4b:ee:
d0:d2:ee:f0:b1:97:d2:55:27:72:91:d0:d2:d4:04:
a1:db:ea:5c:8c:e5:57:f6:e4:64:4e:09:7b:46:e1:
f1:81:d7:c4:b7:8f:5a:11:a6:d0:2b:fe:77:e7:cd:
4f:bb:92:85:7e:ce:d1:54:74:d1:ed:46:bc:5d:56:
71:47:35:4b:83:82:a0:75:47:72:9d:2f:8a:39:c7:
66:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7D:6D:65:16:07:57:DE:BA:9B:B2:66:19:6F:FB:AB:6F:87:8B:1C
X509v3 Authority Key Identifier:
keyid:FB:D3:AC:9F:C4:4C:3D:D2:AB:7B:5D:20:BC:15:8C:82:D8:3D:26:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/-9Osn8RMPdKre10gvBWMgtg9Jgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-9Osn8RMPdKre10gvBWMgtg9Jgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/pn1tZRYHV966m7JmGW_7q2-Hixw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.249.0/24
Signature Algorithm: sha256WithRSAEncryption
95:bb:7c:58:f4:56:a7:1d:8e:03:00:c7:f2:ac:b7:6d:49:af:
dc:7c:23:d5:28:71:49:0a:96:7f:2d:65:08:97:ff:12:3e:b0:
79:ea:a7:fa:7c:50:dc:ff:e9:f0:26:ae:a2:97:8e:ad:c9:96:
3f:f5:51:5b:37:77:21:05:36:2f:80:f5:56:c7:d0:c0:ca:4c:
45:05:4a:74:a2:4d:26:45:5f:ad:ab:5a:50:7c:32:40:1e:a0:
1f:82:c9:ee:d6:b4:26:0d:2c:74:35:27:74:73:8b:0f:9c:c2:
cf:10:69:91:c9:82:f8:c2:0e:00:9a:ed:44:dd:5b:c9:4f:83:
67:38:50:3f:fc:58:ab:5c:10:28:cd:a0:63:d9:28:0e:da:45:
30:74:45:af:6e:ee:d9:ff:a7:c8:99:f6:e1:f9:c2:31:89:01:
0d:7d:91:0d:86:a4:89:58:75:8d:71:e2:36:41:e6:e5:4c:ee:
a9:af:97:e7:d5:fb:74:63:41:3b:d3:ac:db:63:19:8c:a9:9e:
1b:a5:61:4e:d3:79:22:81:7d:8e:fe:60:c0:c8:d0:59:55:46:
d2:1e:34:83:4c:e1:6a:67:46:6e:27:68:e3:1e:19:20:6e:37:
d1:ea:c5:36:b8:71:b8:46:b4:62:1b:d3:1e:ba:ec:8f:bb:a1:
93:14:d2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org