Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DNSNET/aY54gnbixJ6U42UH5iXq-t__TGE.roa
File: aY54gnbixJ6U42UH5iXq-t__TGE.roa (raw, json)
Hash identifier: QbV7nPemWEDBc5NIPsE7Fa64jdF925vl650KXEpq9LY=
Subject key identifier: 69:8E:78:82:76:E2:C4:9E:94:E3:65:07:E6:25:EA:FA:DF:FF:4C:61
Certificate issuer: /CN=277895E64BE41B7182664E1345CD57E5D36A1AF2
Certificate serial: 7A
Authority key identifier: 27:78:95:E6:4B:E4:1B:71:82:66:4E:13:45:CD:57:E5:D3:6A:1A:F2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/J3iV5kvkG3GCZk4TRc1X5dNqGvI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DNSNET/aY54gnbixJ6U42UH5iXq-t__TGE.roa
Signing time: Tue 24 Oct 2023 11:31:38 +0000
ROA not before: Tue 24 Oct 2023 11:31:38 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38842
IP address blocks: 103.160.226.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=277895E64BE41B7182664E1345CD57E5D36A1AF2
Validity
Not Before: Oct 24 11:31:38 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=698E788276E2C49E94E36507E625EAFADFFF4C61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:4f:ef:98:c3:37:dd:1e:a4:58:32:5a:65:
2e:f2:7f:ee:b5:3f:9c:14:d1:99:ba:3f:f5:ac:07:
fe:2c:5c:df:89:52:29:11:57:79:44:9c:4b:40:c5:
41:0c:05:4e:2a:05:c8:85:fe:75:36:9c:f6:75:c7:
d3:93:3c:61:9b:da:37:2b:b1:27:68:17:c2:2b:c8:
55:d3:56:23:0e:0e:da:9c:de:b1:1d:05:f4:2a:d8:
a3:cd:ba:a0:39:d8:6b:52:a8:e1:f1:7e:0f:a1:c8:
45:4b:da:15:ed:ad:4c:bd:b7:47:74:82:a8:25:e4:
5c:10:74:78:e0:bf:a3:34:de:26:b2:c1:be:05:40:
66:c5:e0:cf:19:29:78:d5:21:f8:90:9c:32:3f:71:
19:ee:31:3f:58:af:db:aa:32:d9:18:e5:e4:ca:d0:
d4:4c:5d:44:2b:0c:21:56:c9:54:b5:80:4f:4c:c1:
44:34:6d:11:1b:05:c4:05:bb:e3:8f:74:7b:31:cc:
63:b7:15:52:7c:15:74:18:79:bf:99:f0:18:2f:6f:
72:b1:0b:5f:55:70:4f:c7:7a:97:e0:c0:14:c7:21:
fa:8b:71:09:6d:14:64:52:1e:ba:27:5a:8e:d9:94:
98:da:ce:4f:a8:99:44:64:d0:42:df:bd:c1:f3:e3:
3a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8E:78:82:76:E2:C4:9E:94:E3:65:07:E6:25:EA:FA:DF:FF:4C:61
X509v3 Authority Key Identifier:
keyid:27:78:95:E6:4B:E4:1B:71:82:66:4E:13:45:CD:57:E5:D3:6A:1A:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DNSNET/J3iV5kvkG3GCZk4TRc1X5dNqGvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/J3iV5kvkG3GCZk4TRc1X5dNqGvI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DNSNET/aY54gnbixJ6U42UH5iXq-t__TGE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.226.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:28:dc:e6:db:2f:c7:52:92:2b:c1:8d:f7:e8:40:2b:2f:c9:
43:60:17:43:2b:dd:62:12:0b:93:05:aa:83:bb:35:f1:01:e5:
00:40:59:17:18:54:08:06:aa:75:dc:b2:9c:4e:7b:76:ce:a0:
c9:26:93:8c:bf:51:1c:da:bd:ce:d1:83:82:fc:5e:f9:29:e4:
8b:bb:8f:5f:f3:81:84:cf:1c:80:07:9f:83:bd:13:95:28:a8:
d9:f1:0e:fa:f5:d3:d8:a8:bb:1d:66:26:9d:6b:e6:3a:ff:30:
76:f2:70:82:4a:4b:b2:79:39:e9:62:36:a2:5e:e4:95:2a:84:
26:b8:f0:47:ba:63:e0:2c:ab:f1:aa:d8:5a:98:03:12:39:90:
1c:22:26:69:64:e9:2f:73:8b:5a:02:aa:b3:ea:e3:7c:6d:71:
54:85:79:0d:99:1b:2f:82:de:ff:ec:74:4f:de:49:75:31:d9:
92:ea:5a:13:0f:5c:21:78:0f:01:97:4b:25:e8:3e:58:d8:87:
8c:f9:7e:36:17:44:60:49:10:3d:5d:72:c9:e9:84:53:83:88:
5e:42:f8:c4:5a:84:5e:f3:b3:74:5b:52:e0:a5:25:fe:c4:d1:
cb:e9:18:e6:ed:93:56:9c:af:65:06:70:4a:0a:32:4a:25:8b:
4f:22:98:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org