Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/WGrLodkUyITihXH3r7qoS24fhEE.roa
File: WGrLodkUyITihXH3r7qoS24fhEE.roa (raw, json)
Hash identifier: lXOeX32/wpBzHUrCW4Ug1xHEs8ltc0oLvo0gvOmWPME=
Subject key identifier: 58:6A:CB:A1:D9:14:C8:84:E2:85:71:F7:AF:BA:A8:4B:6E:1F:84:41
Certificate issuer: /CN=364776C68F9B6CDCA080E26B01F3187E072F5C99
Certificate serial: 0C88
Authority key identifier: 36:47:76:C6:8F:9B:6C:DC:A0:80:E2:6B:01:F3:18:7E:07:2F:5C:99
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Nkd2xo-bbNyggOJrAfMYfgcvXJk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/WGrLodkUyITihXH3r7qoS24fhEE.roa
Signing time: Wed 14 Sep 2022 23:49:39 +0000
ROA not before: Wed 14 Sep 2022 23:49:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131669
IP address blocks: 103.140.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3208 (0xc88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=364776C68F9B6CDCA080E26B01F3187E072F5C99
Validity
Not Before: Sep 14 23:49:39 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=586ACBA1D914C884E28571F7AFBAA84B6E1F8441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c0:b7:be:30:f2:d7:3e:98:f2:85:7a:fc:b1:
17:eb:76:e3:8c:94:0f:50:70:c3:7b:e0:32:be:34:
2c:9d:37:28:20:f2:d7:4f:19:f8:11:6b:c8:b0:49:
69:a3:3d:45:04:87:64:6a:84:99:66:7a:28:bf:2e:
42:52:ae:84:31:ea:b0:47:da:24:1f:37:40:39:5c:
4c:bc:8c:bb:5c:f8:6d:c1:86:eb:03:b2:c3:a0:42:
73:53:81:f7:fe:3c:c2:d7:be:7a:9a:73:00:3b:00:
ca:47:8f:c2:a8:0e:bb:ca:09:f2:ce:34:df:ec:ab:
c7:c9:48:db:b1:cf:cc:74:d1:37:ac:82:30:84:1e:
0b:85:93:67:9c:41:e8:95:1a:e6:89:7b:c5:b6:96:
5c:d2:23:34:c9:36:14:f9:f7:46:ff:e3:cf:40:62:
4a:02:b1:0a:6f:14:58:d6:ab:55:06:0a:f6:3c:cf:
00:50:e9:e8:6e:b6:61:fb:7d:cb:f5:1a:81:c1:9a:
dd:0c:09:2d:5c:bb:c0:ae:d9:57:b5:29:07:92:1d:
58:84:08:f4:81:54:2e:e8:bd:1b:eb:3a:18:c6:48:
36:12:bd:b9:07:07:95:e8:44:34:59:3f:d2:5d:af:
12:21:99:57:dc:bc:51:ef:63:44:27:2c:c2:83:2a:
79:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6A:CB:A1:D9:14:C8:84:E2:85:71:F7:AF:BA:A8:4B:6E:1F:84:41
X509v3 Authority Key Identifier:
keyid:36:47:76:C6:8F:9B:6C:DC:A0:80:E2:6B:01:F3:18:7E:07:2F:5C:99
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/Nkd2xo-bbNyggOJrAfMYfgcvXJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Nkd2xo-bbNyggOJrAfMYfgcvXJk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOPPLER/WGrLodkUyITihXH3r7qoS24fhEE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.110.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:3a:4c:cb:dd:bc:02:ff:2b:e5:e4:b8:64:50:4b:15:9b:a9:
6f:93:68:7d:ac:c6:d9:a8:a9:47:10:94:5a:50:5f:e0:be:de:
00:b8:ab:1b:08:4a:93:c0:70:3a:86:6f:0c:ff:18:60:05:d9:
9a:df:80:b8:64:8c:d6:97:43:a9:46:e0:1f:78:d7:73:c8:20:
73:52:f8:9d:83:5c:d3:89:c6:fa:1b:ad:2e:bc:95:14:b2:2b:
a8:bc:c6:ca:4f:8e:fe:fe:ee:da:fd:b2:88:e2:46:0e:f9:9a:
dd:ed:a6:93:77:14:b6:fa:8b:ce:66:0f:69:24:8c:30:94:df:
3e:dc:e4:c2:62:84:53:bf:a6:75:6a:5c:f4:57:c8:30:d0:c2:
ee:e5:b3:42:e0:b7:ba:3c:71:49:ac:e0:3b:8e:74:7e:c6:95:
df:f9:38:0b:86:0a:4e:f7:5b:dc:e2:d3:b7:d6:48:00:e6:90:
6f:3c:a3:98:3e:2b:9a:b6:4c:25:93:7d:3d:a8:8f:9f:fb:14:
51:1f:aa:54:04:24:c5:32:82:64:a6:d2:7b:38:e1:bc:bc:c4:
a1:e8:ed:7c:70:b0:97:ad:4c:fd:28:73:f5:bb:b9:10:11:f7:
33:7b:b3:65:28:9b:b8:ad:fa:1c:9b:82:44:f4:a6:f6:42:28:
58:6b:0f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org