Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYVC/injFVh_ye9BFo5UJCBSVD39eeic.roa
File: injFVh_ye9BFo5UJCBSVD39eeic.roa (raw, json)
Hash identifier: r0ve7L4EZ4voTqhOjdi4t2UDihIwXss/CGSR1vhBYrQ=
Subject key identifier: 8A:78:C5:56:1F:F2:7B:D0:45:A3:95:09:08:14:95:0F:7F:5E:7A:27
Certificate issuer: /CN=370F3943433AD963E299A9BE9239D0F3E37A082A
Certificate serial: 0248
Authority key identifier: 37:0F:39:43:43:3A:D9:63:E2:99:A9:BE:92:39:D0:F3:E3:7A:08:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Nw85Q0M62WPimam-kjnQ8-N6CCo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYVC/injFVh_ye9BFo5UJCBSVD39eeic.roa
Signing time: Mon 29 Jul 2024 07:24:11 +0000
ROA not before: Mon 29 Jul 2024 07:24:11 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7483
IP address blocks: 103.183.154.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 584 (0x248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370F3943433AD963E299A9BE9239D0F3E37A082A
Validity
Not Before: Jul 29 07:24:11 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8A78C5561FF27BD045A395090814950F7F5E7A27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f4:0a:55:c1:2f:4f:bf:2d:4c:8f:ca:e5:bc:
36:a4:1f:8b:fe:fa:35:0a:c7:a5:9c:cb:12:6b:02:
7f:70:85:80:10:77:3e:46:e2:de:e9:8a:86:a6:f2:
14:5e:d6:79:37:de:53:5d:cb:c9:8d:34:a1:09:d6:
97:74:63:c3:c0:74:c5:58:89:97:e1:d8:6d:57:91:
60:23:45:e9:32:2b:8b:71:c8:22:a3:5b:27:5a:25:
5b:68:71:00:55:74:f6:0f:22:f8:c5:80:fb:57:ed:
85:ce:07:66:80:32:e2:6a:68:c5:7e:c6:f4:b2:e5:
d9:c6:b3:b1:37:f5:b7:df:0d:57:f5:a6:01:31:37:
ac:ed:bd:cc:63:52:ab:b3:4a:31:3e:f5:12:aa:e4:
3c:b9:31:2c:75:0d:61:f9:77:d2:a9:d8:1c:c3:09:
80:3e:b5:9f:76:a3:8c:c3:eb:29:58:f3:15:1f:8d:
f2:94:86:b5:4d:c6:32:6d:cf:d0:7e:28:53:21:b9:
14:ed:98:c4:32:f9:cc:d6:1a:02:c5:7c:ed:79:6f:
45:15:c5:ec:f0:53:08:74:bc:5d:f2:b7:88:c1:34:
ff:87:7b:e2:3b:27:9c:28:fb:95:46:4e:8a:b2:97:
8b:37:ed:e9:bd:bf:6a:69:5a:c1:5c:b9:1a:7d:e8:
b2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:78:C5:56:1F:F2:7B:D0:45:A3:95:09:08:14:95:0F:7F:5E:7A:27
X509v3 Authority Key Identifier:
keyid:37:0F:39:43:43:3A:D9:63:E2:99:A9:BE:92:39:D0:F3:E3:7A:08:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYVC/Nw85Q0M62WPimam-kjnQ8-N6CCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Nw85Q0M62WPimam-kjnQ8-N6CCo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYVC/injFVh_ye9BFo5UJCBSVD39eeic.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.183.154.0/23
Signature Algorithm: sha256WithRSAEncryption
37:aa:e3:7a:9f:87:74:d2:26:43:35:9f:0c:dd:67:85:e5:6e:
1c:39:af:d0:9a:d4:d6:56:fb:2e:b1:88:96:31:99:d5:2a:c1:
ca:47:43:19:95:10:79:f0:85:09:76:96:98:70:50:a8:4b:fc:
9f:02:73:c4:73:71:74:0b:f8:5f:87:28:96:27:4b:16:7a:65:
e1:a0:7f:17:11:4f:0e:bc:c0:5f:a7:8b:4c:c2:fa:bb:af:b3:
a7:8a:3c:3c:13:be:ff:81:ca:ef:10:85:d7:13:2f:05:7a:25:
22:9b:76:38:07:c4:98:ec:67:f3:21:bd:59:0c:21:3b:40:2b:
c0:c3:79:87:10:23:a1:0c:9b:78:48:1b:51:52:8c:fb:2f:34:
03:78:7d:6e:d1:bb:e1:16:e6:cc:a0:0a:2b:1f:26:0d:26:38:
73:ab:80:03:c2:1e:76:0a:e6:e6:93:bc:36:e1:aa:6e:9a:88:
a2:e3:ab:5b:e6:3c:fe:b7:b6:55:ed:6b:b8:ac:0e:d5:9b:0a:
df:e4:10:b9:c7:dc:ed:96:79:63:6d:bd:b3:63:ed:f9:fa:86:
4e:20:02:ae:48:aa:78:a0:75:f9:6c:f8:f5:b5:23:16:7b:5d:
8a:89:b4:73:1f:97:f9:6a:13:45:46:05:53:45:e7:08:ca:9f:
31:e4:75:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org