Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CWTW/H8U763hCTdsKjnsP5Z_vHX_7t4c.roa
File: H8U763hCTdsKjnsP5Z_vHX_7t4c.roa (raw, json)
Hash identifier: BdkxvenZZ7flXiPpaiBS5Azz+rwBGaHukB+QM0py024=
Subject key identifier: 1F:C5:3B:EB:78:42:4D:DB:0A:8E:7B:0F:E5:9F:EF:1D:7F:FB:B7:87
Certificate issuer: /CN=996D67023ED27754ACB1B568433D4376C88200F5
Certificate serial: 0266
Authority key identifier: 99:6D:67:02:3E:D2:77:54:AC:B1:B5:68:43:3D:43:76:C8:82:00:F5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mW1nAj7Sd1SssbVoQz1DdsiCAPU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CWTW/H8U763hCTdsKjnsP5Z_vHX_7t4c.roa
Signing time: Fri 01 Sep 2023 08:33:10 +0000
ROA not before: Fri 01 Sep 2023 08:33:10 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131273
IP address blocks: 103.161.78.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 614 (0x266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996D67023ED27754ACB1B568433D4376C88200F5
Validity
Not Before: Sep 1 08:33:10 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1FC53BEB78424DDB0A8E7B0FE59FEF1D7FFBB787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9f:8c:90:22:1b:36:68:1a:9e:ed:63:18:07:
8d:1c:b0:53:ae:fc:0e:4f:ec:0f:c6:87:06:8f:81:
d4:32:1a:e6:e0:51:19:40:5e:2a:50:bd:41:f5:33:
0e:44:f2:d4:32:a8:c7:10:8e:46:24:2f:f6:b8:f0:
fb:ae:97:69:df:f1:a5:a5:8f:cd:18:8b:d8:c3:11:
a3:9b:40:55:45:2a:b2:ab:b5:32:7c:88:3a:8d:81:
50:23:1c:22:83:85:2a:45:e8:e6:03:e8:01:28:ca:
99:4c:8a:24:b3:64:65:1b:e6:1e:33:1c:f2:3b:fb:
2d:76:85:a8:07:5b:05:dc:ea:a3:64:2a:2f:c8:d2:
c5:fc:de:8b:07:f4:21:7b:73:ce:23:66:23:aa:82:
1e:8f:4b:d4:f7:0a:76:a5:ab:94:16:b9:fe:e9:1a:
4f:9d:b1:28:04:97:85:60:a4:93:5c:c7:7e:77:17:
ff:bc:13:93:3c:71:7d:ca:15:c7:eb:9c:8b:67:6c:
d7:0c:60:4c:31:2d:fa:31:de:44:f0:14:89:e2:bf:
e5:53:c4:5b:08:b1:ea:b7:5f:93:f2:95:c7:51:5d:
cf:4e:24:f1:91:b4:49:e3:52:c1:fc:d5:c5:3b:40:
48:7e:88:c9:a7:8b:76:00:9b:dc:78:ed:b8:0c:67:
e1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C5:3B:EB:78:42:4D:DB:0A:8E:7B:0F:E5:9F:EF:1D:7F:FB:B7:87
X509v3 Authority Key Identifier:
keyid:99:6D:67:02:3E:D2:77:54:AC:B1:B5:68:43:3D:43:76:C8:82:00:F5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CWTW/mW1nAj7Sd1SssbVoQz1DdsiCAPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mW1nAj7Sd1SssbVoQz1DdsiCAPU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CWTW/H8U763hCTdsKjnsP5Z_vHX_7t4c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.78.0/23
Signature Algorithm: sha256WithRSAEncryption
89:8a:2e:b8:4f:a4:4c:18:64:46:72:4a:bd:9e:53:7e:e5:f2:
e9:c0:6a:6e:df:04:1e:7d:b6:6b:14:7b:bf:56:e8:ee:51:dd:
48:ef:e9:fc:5e:60:17:c4:3f:10:ad:7c:55:28:37:7c:bc:4b:
e4:5f:17:27:6c:ad:a3:bf:95:ea:bd:63:33:2d:a1:e9:7c:5c:
de:df:cf:f7:52:9e:83:eb:77:62:04:c7:3d:f3:ed:29:1d:aa:
db:05:f2:4f:9f:4c:2d:25:9f:9c:f2:d2:b7:77:f2:74:e4:63:
e4:92:90:3e:8e:30:64:2f:0f:ba:26:ef:f6:89:f8:33:95:94:
48:a0:af:be:01:2b:1b:9a:49:89:1e:57:d8:ef:cd:fe:97:d0:
f9:1e:59:4a:e4:73:16:f0:0d:14:de:5d:f2:58:34:58:ab:2e:
d0:75:dc:64:67:84:7b:c3:19:4b:f5:8b:76:27:a7:cc:12:90:
b5:ee:b1:aa:fd:6d:72:95:e6:c0:d9:90:fb:21:a3:27:a8:9c:
b6:64:f5:f7:9d:ec:5f:31:5f:28:84:72:54:8e:fb:ad:a2:d0:
e0:a4:c7:53:09:6f:62:e7:9d:9f:fd:b0:3a:78:49:d0:dc:e0:
e6:7d:21:97:4a:ca:7c:ec:38:ba:63:36:e5:39:60:b9:64:6c:
d9:17:ce:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org