Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/-rnbmbnvOXK9ojgrrY-zRfmar98.roa
File: -rnbmbnvOXK9ojgrrY-zRfmar98.roa (raw, json)
Hash identifier: 5UdeXLA69UKj7CKAsNqh622BsoWVl1OEkveo9OAuogc=
Subject key identifier: FA:B9:DB:99:B9:EF:39:72:BD:A2:38:2B:AD:8F:B3:45:F9:9A:AF:DF
Certificate issuer: /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial: 0B78
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/-rnbmbnvOXK9ojgrrY-zRfmar98.roa
Signing time: Tue 31 Oct 2023 07:32:48 +0000
ROA not before: Tue 31 Oct 2023 07:32:48 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18046
IP address blocks: 103.130.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2936 (0xb78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Validity
Not Before: Oct 31 07:32:48 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FAB9DB99B9EF3972BDA2382BAD8FB345F99AAFDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d1:0b:35:13:99:e7:7e:1e:6d:7e:49:50:77:
94:ee:67:11:a9:ec:5d:60:88:2e:ba:61:75:26:b2:
0d:8a:82:1c:23:60:e2:1b:76:76:e1:b9:89:23:32:
cb:5c:44:13:24:f9:90:d7:66:25:25:7d:8c:8c:c9:
a5:b9:16:11:7c:6a:e0:d5:ba:02:4a:7e:70:d6:88:
ec:2d:1f:94:55:78:84:b7:7f:4d:11:9c:c0:2a:a9:
a7:43:9d:59:02:01:5b:6f:94:97:a6:9d:48:f6:f5:
f7:45:00:b8:ba:28:d0:bd:c5:32:a9:b2:99:5b:47:
42:f4:9f:6d:67:01:3a:0e:ea:90:cc:e3:c7:5b:fa:
2c:83:e8:f3:f9:b4:14:62:fd:6a:4c:55:c5:dc:f6:
75:4c:86:35:61:a5:ac:6d:f4:bd:43:e6:41:12:77:
50:09:b9:80:a0:b4:16:66:54:39:36:03:9c:9f:f2:
cc:66:da:05:18:0e:c2:d9:a6:59:aa:3d:fe:0f:c3:
2f:99:f3:1c:4a:0e:58:29:39:8a:bf:f1:b5:1d:7a:
07:86:1d:82:d3:e5:2e:4e:f5:9f:73:de:eb:ed:07:
70:70:07:b4:b0:70:9a:c3:3d:8e:d2:a1:34:b1:6d:
59:87:2d:0e:aa:29:9c:65:7c:17:96:d2:1d:3b:93:
26:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B9:DB:99:B9:EF:39:72:BD:A2:38:2B:AD:8F:B3:45:F9:9A:AF:DF
X509v3 Authority Key Identifier:
keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/-rnbmbnvOXK9ojgrrY-zRfmar98.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.32.0/22
Signature Algorithm: sha256WithRSAEncryption
96:ff:0c:ee:6e:8b:22:35:1c:bc:b2:e8:7b:97:25:9c:f9:3f:
c9:a6:64:17:3d:21:58:2f:37:6e:8c:72:c6:5f:1b:c6:8c:c3:
48:99:24:90:00:c4:76:cc:20:e6:3a:58:e7:00:9d:43:3a:1d:
e2:e8:b3:7c:2b:1c:19:c7:39:05:f2:cb:1c:72:dc:39:6f:0c:
76:4b:8c:34:49:df:a5:97:92:5e:f1:4c:ac:76:5d:76:0a:72:
1b:84:07:d8:72:04:7b:92:f6:a2:55:7b:3e:f7:b0:9c:ee:d5:
c9:93:18:c2:e2:8c:0e:2e:c4:9e:37:9b:14:69:9e:75:43:4e:
80:0c:27:b0:dd:d5:1e:07:aa:b2:e0:b1:5d:66:96:f6:31:5b:
01:a2:c2:20:18:0f:c5:83:7c:bb:14:01:66:2b:b4:03:33:69:
6f:db:1d:ce:4d:85:36:4d:58:ff:cb:7f:f1:9f:a3:46:e6:ea:
9e:02:6e:9c:c0:c4:d6:91:e7:c8:8d:75:ef:6d:4d:26:07:17:
fb:f6:12:b7:e9:0d:4e:05:6a:f2:ec:94:fa:40:0a:f9:f5:1e:
69:cf:8a:22:02:67:93:29:bd:9b:85:5a:f7:cb:b1:d2:e2:64:
72:5a:47:d2:fa:33:af:a3:5b:96:c1:1c:f6:79:94:06:1a:95:
69:e1:fe:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org