Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CXT/794S818Jwb6nkfLsOmW4BbkSgj8.roa
File: 794S818Jwb6nkfLsOmW4BbkSgj8.roa (raw, json)
Hash identifier: YiryQVSusQHiUldFeCrp4l07Q7M8ojHBPa1pa+dqTu0=
Subject key identifier: EF:DE:12:F3:5F:09:C1:BE:A7:91:F2:EC:3A:65:B8:05:B9:12:82:3F
Certificate issuer: /CN=DF6DA9C3A7152EB1E86D17CC21DE020D8FC96EF3
Certificate serial: 076F
Authority key identifier: DF:6D:A9:C3:A7:15:2E:B1:E8:6D:17:CC:21:DE:02:0D:8F:C9:6E:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/322pw6cVLrHobRfMId4CDY_JbvM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/794S818Jwb6nkfLsOmW4BbkSgj8.roa
Signing time: Tue 29 Sep 2020 10:00:09 +0000
ROA not before: Tue 29 Sep 2020 10:00:09 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18049
IP address blocks: 103.129.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1903 (0x76f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF6DA9C3A7152EB1E86D17CC21DE020D8FC96EF3
Validity
Not Before: Sep 29 10:00:09 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=EFDE12F35F09C1BEA791F2EC3A65B805B912823F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:c2:c1:31:46:78:53:e0:8a:e1:08:6e:00:
21:b2:2c:c8:6e:18:79:5b:24:05:52:56:b7:53:ec:
c9:65:c2:05:7e:3c:8c:10:4b:f3:33:95:c8:c5:68:
1c:03:b8:c7:bb:35:d4:61:8e:1e:4c:42:3d:1d:c1:
dc:7c:11:a8:6d:57:e3:a4:62:fa:6a:af:75:bc:13:
d1:71:53:47:ab:79:6e:32:7a:20:f6:c3:be:78:50:
d8:d6:b2:b2:c0:5f:73:5e:38:f6:45:0d:53:4d:67:
87:6b:3c:6b:bf:64:42:c0:73:7d:84:c5:dc:02:64:
b2:05:de:46:81:af:9f:bf:25:bc:a4:15:8b:8c:6e:
eb:a1:b0:78:ab:c9:a7:6b:17:68:76:2d:71:97:30:
25:b5:f9:41:4e:d6:85:59:29:40:9b:5f:96:32:d4:
09:a4:ad:95:62:dc:96:e5:fe:ab:ac:57:1a:41:c7:
11:ce:b7:44:87:d9:0f:de:34:eb:d2:fb:48:de:92:
09:e1:90:dc:58:d0:9e:a1:d4:b0:51:59:65:1a:33:
fe:b9:94:c2:bc:83:fa:ab:97:cf:ef:3f:da:6a:13:
eb:66:df:78:3f:5d:69:de:76:95:ab:19:f3:f4:83:
39:a6:62:be:6f:16:3d:3b:88:30:b1:e6:5a:84:3d:
dc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DE:12:F3:5F:09:C1:BE:A7:91:F2:EC:3A:65:B8:05:B9:12:82:3F
X509v3 Authority Key Identifier:
keyid:DF:6D:A9:C3:A7:15:2E:B1:E8:6D:17:CC:21:DE:02:0D:8F:C9:6E:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/322pw6cVLrHobRfMId4CDY_JbvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/322pw6cVLrHobRfMId4CDY_JbvM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CXT/794S818Jwb6nkfLsOmW4BbkSgj8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.129.180.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:07:93:a9:c5:c7:e8:40:32:78:fb:14:a4:d2:17:84:00:c6:
74:38:08:1c:d3:37:43:f8:39:6a:20:21:a3:65:f8:12:0b:cd:
b1:5e:99:73:49:fa:77:c0:eb:27:f5:ce:13:ab:5f:07:f9:0d:
30:50:74:96:f6:3e:f7:13:b9:74:56:e0:82:e2:85:5d:a3:92:
91:b7:49:50:fb:38:4f:3c:cd:02:8e:c3:57:5e:28:a2:a0:92:
cf:77:23:f6:20:8f:5e:5f:db:d0:00:54:b6:79:0d:0a:9a:24:
03:5e:82:03:dc:c0:66:c4:2c:95:6e:80:fc:ed:ba:07:29:19:
3a:63:50:d0:79:93:56:9b:fa:ac:36:58:6d:6f:12:5e:d7:45:
1f:c5:21:90:88:2e:1e:c6:84:a6:e4:b7:63:d7:07:97:0f:83:
0b:e1:21:2a:b2:b9:b5:69:97:21:b5:d8:c0:97:52:fe:68:0b:
8d:e5:0e:5d:22:fe:5b:0c:88:23:3e:f4:61:1a:ca:50:fa:ae:
dc:f7:b3:a5:cf:ec:77:e2:f2:64:87:21:c6:25:ae:3c:1c:df:
c5:9c:14:71:c4:50:41:6d:d4:a5:b6:3a:f1:9d:91:f5:d7:c9:
19:35:8a:df:61:0f:a4:41:6b:fd:c9:cf:df:8d:98:27:2f:b1:
e3:d9:b2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org