Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ETIME/pxUumdlBUSwSQK9zwYjk2flzd3M.roa
File: pxUumdlBUSwSQK9zwYjk2flzd3M.roa (raw, json)
Hash identifier: leV469gud93qiPX7DDG1Ao+zc8pp9OQWqmRCObGElE0=
Subject key identifier: A7:15:2E:99:D9:41:51:2C:12:40:AF:73:C1:88:E4:D9:F9:73:77:73
Certificate issuer: /CN=E0EA885A7E6971C99342777E7DDDBA65D0EB131F
Certificate serial: 02B6
Authority key identifier: E0:EA:88:5A:7E:69:71:C9:93:42:77:7E:7D:DD:BA:65:D0:EB:13:1F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4OqIWn5pccmTQnd-fd26ZdDrEx8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/pxUumdlBUSwSQK9zwYjk2flzd3M.roa
Signing time: Fri 01 Sep 2023 08:50:10 +0000
ROA not before: Fri 01 Sep 2023 08:50:10 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38042
IP address blocks: 103.158.228.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 694 (0x2b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0EA885A7E6971C99342777E7DDDBA65D0EB131F
Validity
Not Before: Sep 1 08:50:10 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A7152E99D941512C1240AF73C188E4D9F9737773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:ac:46:9d:0b:73:ec:eb:af:2a:56:e7:d1:
2c:18:c4:6e:7e:7a:22:c8:fd:9e:7e:25:ac:10:ab:
04:8a:3a:48:32:db:9e:6d:21:d3:94:f9:17:4f:d5:
1b:02:c3:42:bd:b3:51:4d:36:b9:08:c1:79:0a:38:
e5:6e:50:a4:10:c0:54:e0:c8:5e:a4:9c:de:7c:2c:
5a:00:64:90:bd:25:bc:ce:66:10:d2:cf:4f:73:46:
d4:07:45:4e:12:e2:96:da:83:f7:45:4f:38:31:26:
c5:4c:b0:66:fb:b1:b7:7b:47:91:ec:cd:78:0f:e2:
64:72:7c:f3:9d:f1:5b:a5:eb:86:16:b3:b2:23:ee:
26:58:c6:3c:37:d1:5e:81:24:a9:33:32:3a:d6:b4:
db:32:0d:58:63:87:2f:2f:21:62:cc:d0:87:1f:49:
f6:ab:97:32:5b:e5:b9:11:4f:d3:3e:dd:99:72:d2:
fd:1a:a8:f7:85:21:99:b5:13:2a:41:18:ca:87:56:
63:9d:07:23:47:56:10:2f:4e:41:44:0f:8f:fa:d6:
dd:1b:f8:3d:d1:0f:80:d8:c7:9d:41:57:35:3d:49:
d9:b8:06:86:c4:cf:a1:bd:6a:de:2a:cd:27:51:24:
c8:10:76:eb:2f:1a:8b:fc:9a:3e:26:62:b8:33:bd:
25:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:15:2E:99:D9:41:51:2C:12:40:AF:73:C1:88:E4:D9:F9:73:77:73
X509v3 Authority Key Identifier:
keyid:E0:EA:88:5A:7E:69:71:C9:93:42:77:7E:7D:DD:BA:65:D0:EB:13:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/4OqIWn5pccmTQnd-fd26ZdDrEx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4OqIWn5pccmTQnd-fd26ZdDrEx8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/pxUumdlBUSwSQK9zwYjk2flzd3M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.228.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:c9:ec:25:75:bf:41:14:0c:a9:ad:1e:67:c9:ad:29:ec:18:
2e:18:f1:36:2a:96:91:42:82:89:e2:4a:11:f5:7d:e5:68:95:
01:b9:07:8b:59:97:1e:b9:2b:d2:a5:20:ed:2f:f6:56:38:4e:
bf:02:e7:9c:06:3e:a5:99:bb:11:09:7a:6e:cc:60:d7:7a:4b:
2c:af:12:7b:2f:f8:4d:7e:00:39:45:33:f1:c9:93:87:5d:00:
b9:8d:07:3e:00:51:6c:c2:ad:b6:1a:0a:32:33:18:42:5e:08:
2c:ad:30:59:7f:8c:7a:0d:ef:88:91:ac:d9:92:9b:3e:c2:46:
e9:c5:6f:ed:6f:0e:85:83:f8:c2:c8:15:f4:43:66:4c:a8:f9:
48:da:f4:d1:00:2e:c7:b7:2a:73:67:ce:db:62:ff:e3:bf:9f:
f8:4a:9e:35:fc:0c:67:65:6a:f9:e8:0d:d4:ac:84:c7:18:63:
53:96:ae:28:7b:f3:a1:bd:49:0f:0b:ac:93:12:9d:6b:57:e7:
ed:3d:16:ba:5d:b5:11:6a:42:88:7e:1b:77:22:b4:c0:55:30:
a9:80:14:20:fd:7a:c4:ca:78:01:19:2d:02:a6:f2:bc:c3:99:
9b:8d:c4:71:4e:38:e7:e8:73:73:1f:f5:f8:6a:10:5e:f3:d7:
c1:17:7c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org