Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/GdohcJHeDl51vR2nbNRF8Tlh4rE.roa
File: GdohcJHeDl51vR2nbNRF8Tlh4rE.roa (raw, json)
Hash identifier: TzLLgO1zapxxanqgKH3bPA32BR5xMSS+dkJYW1dCKTE=
Subject key identifier: 19:DA:21:70:91:DE:0E:5E:75:BD:1D:A7:6C:D4:45:F1:39:61:E2:B1
Certificate issuer: /CN=5B6B6F9DD4E2976144344002CF16293A0CA0A7D5
Certificate serial: F1
Authority key identifier: 5B:6B:6F:9D:D4:E2:97:61:44:34:40:02:CF:16:29:3A:0C:A0:A7:D5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/W2tvndTil2FENEACzxYpOgygp9U.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/GdohcJHeDl51vR2nbNRF8Tlh4rE.roa
Signing time: Tue 06 Aug 2024 03:41:04 +0000
ROA not before: Tue 06 Aug 2024 03:41:04 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131642
IP address blocks: 103.255.40.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B6B6F9DD4E2976144344002CF16293A0CA0A7D5
Validity
Not Before: Aug 6 03:41:04 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=19DA217091DE0E5E75BD1DA76CD445F13961E2B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b2:45:6a:27:e2:22:54:19:61:05:47:cc:a8:
31:96:3b:fc:3c:8d:a1:1e:5f:df:be:12:10:a9:ee:
3d:55:c7:15:82:c6:34:c6:39:f4:dd:36:ea:4c:67:
82:df:4a:34:73:60:a2:80:87:b4:48:5d:c5:38:5c:
87:98:6e:b1:6f:24:58:af:ee:ee:46:cb:51:5b:f6:
73:12:e4:f8:1d:2c:c7:8a:03:d3:e1:d6:50:6f:15:
c3:98:fd:13:ca:3e:1f:f7:61:c8:24:17:5e:80:ac:
8c:6c:ed:ed:e7:cb:b1:89:6e:ff:e8:e0:f9:d0:30:
0c:8a:3b:72:b1:28:34:fd:7e:fb:07:6e:ec:70:9a:
ce:24:e6:cf:33:4f:9a:03:c3:47:0c:95:02:82:08:
9a:22:f4:60:94:ba:45:da:00:a1:b2:35:d4:db:02:
02:ff:04:91:0f:48:1b:8b:91:99:d2:a9:9c:d6:25:
c3:d5:2e:d7:12:0d:65:06:21:48:08:31:27:39:fe:
b0:2d:4c:6c:22:c4:b7:5d:08:14:95:3f:2d:07:3b:
f2:c5:44:e9:0c:6c:fa:59:7b:28:fe:f5:f4:34:22:
78:96:aa:d7:94:b3:4d:26:ce:dc:87:70:a7:8a:fd:
d9:af:4f:15:8c:6b:43:02:44:07:f4:b5:99:d8:46:
c3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DA:21:70:91:DE:0E:5E:75:BD:1D:A7:6C:D4:45:F1:39:61:E2:B1
X509v3 Authority Key Identifier:
keyid:5B:6B:6F:9D:D4:E2:97:61:44:34:40:02:CF:16:29:3A:0C:A0:A7:D5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/W2tvndTil2FENEACzxYpOgygp9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/W2tvndTil2FENEACzxYpOgygp9U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/GdohcJHeDl51vR2nbNRF8Tlh4rE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.255.40.0/23
Signature Algorithm: sha256WithRSAEncryption
af:33:83:28:94:dc:74:2f:a5:5a:83:89:94:48:98:0f:83:f5:
58:e8:9c:9c:2e:48:36:32:9c:b2:5d:88:3a:48:0a:2c:87:f8:
4d:ee:02:8f:e4:73:13:c3:64:44:95:9a:68:85:a3:60:25:8b:
11:18:46:0a:74:2e:58:13:8f:e0:de:b7:db:79:e1:9e:00:1e:
6d:89:cf:f4:35:b3:4c:7b:91:56:e1:e1:75:c0:dd:50:80:86:
3e:ef:15:c3:9d:30:a0:cc:fe:d4:3f:8d:95:7d:89:94:23:5d:
05:f8:ba:a3:de:0c:52:13:be:bf:43:37:94:96:d3:da:ac:f9:
6e:0c:76:34:4b:4b:e5:b5:8c:7c:22:01:53:09:43:a8:e7:d5:
a6:e4:57:56:c2:1d:8e:21:a6:6d:26:c3:80:56:34:d2:57:3c:
ad:5b:2e:e7:33:d8:a6:f1:83:75:ee:82:af:87:fe:ba:78:9d:
0c:c0:08:86:7d:a6:07:a4:a8:b3:c5:2b:7e:4f:73:8e:83:07:
f9:50:94:81:10:dc:a8:d5:3b:5d:d0:10:fb:c5:d4:35:9e:ee:
24:f9:22:61:05:86:d0:7e:8c:eb:eb:cd:4d:6d:4d:1e:71:90:
d4:e0:2e:e2:79:0e:d6:cd:1e:13:c8:f7:af:52:9e:a1:4c:46:
18:8b:61:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org