Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/nwuF90ZQPZlD7VsxSaNP1caTPOE.roa
File: nwuF90ZQPZlD7VsxSaNP1caTPOE.roa (raw, json)
Hash identifier: h6g6WdIHMGqQysm/vxCjJ/MGzxKwg4IJ7sNSK6Gg2gI=
Subject key identifier: 9F:0B:85:F7:46:50:3D:99:43:ED:5B:31:49:A3:4F:D5:C6:93:3C:E1
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0BB2
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/nwuF90ZQPZlD7VsxSaNP1caTPOE.roa
Signing time: Fri 01 Sep 2023 08:50:53 +0000
ROA not before: Fri 01 Sep 2023 08:50:53 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9674
IP address blocks: 103.122.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2994 (0xbb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Sep 1 08:50:53 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9F0B85F746503D9943ED5B3149A34FD5C6933CE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:9f:53:8a:f7:e3:2c:5f:83:61:1c:86:ca:
7d:7c:6e:c7:90:8a:e3:23:18:16:8b:2d:5d:d1:1f:
db:4f:61:f1:c3:d5:44:a3:57:e1:1c:ab:3f:bd:fb:
89:5a:eb:41:bf:6a:ff:e8:76:40:51:42:08:01:45:
b3:1e:23:be:5f:c7:ee:8a:bf:bc:4e:d5:55:71:bc:
e5:50:01:a1:22:93:e7:99:6b:53:3e:35:d8:76:e2:
96:28:ff:4a:83:ac:b8:fc:4b:12:6e:77:4f:f4:4a:
f7:17:cb:ca:5c:60:8c:d0:92:e0:ea:c4:92:7c:e6:
11:2d:8e:2f:bf:51:a0:d1:7b:8a:7c:cc:35:33:8f:
5f:7b:7c:20:f1:15:b1:94:d5:42:59:9b:64:2a:98:
38:b4:6d:05:8c:c4:a9:77:5b:ea:a3:93:5a:5e:cc:
af:71:c9:64:5c:0e:13:23:d8:91:97:1c:70:cf:77:
04:33:37:08:1e:b0:df:96:d4:04:49:1b:2e:33:e4:
76:54:ba:87:81:28:df:71:df:c6:8d:64:f1:c5:e4:
70:72:f9:35:9f:be:a1:ba:a9:fd:82:7e:a3:ed:39:
a2:fc:e3:a8:99:19:d6:a2:9a:c0:e7:58:e7:05:8f:
b9:89:0f:5a:c0:49:67:43:e3:b9:ff:df:f8:72:5d:
4f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0B:85:F7:46:50:3D:99:43:ED:5B:31:49:A3:4F:D5:C6:93:3C:E1
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/nwuF90ZQPZlD7VsxSaNP1caTPOE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.148.0/22
Signature Algorithm: sha256WithRSAEncryption
34:33:d8:8a:e0:88:e9:0f:3a:0f:87:32:bb:d1:4c:72:77:2b:
c2:e5:74:0d:80:00:d9:8a:d5:20:c8:a1:45:08:0d:a9:bd:34:
60:50:2c:ea:b9:21:eb:11:46:1a:76:40:28:fe:2a:e2:03:21:
0e:fe:27:f1:3d:17:b9:cf:75:99:0f:43:74:37:b8:8c:ed:c3:
83:19:41:ff:d3:4f:0f:f6:ac:69:ec:1f:4a:f4:44:1b:6e:ef:
cc:cb:38:c7:9b:53:92:cb:88:64:de:ff:b7:84:64:cc:db:3e:
c9:a2:e0:ce:00:40:81:b2:74:58:bd:12:6c:5f:c4:80:e8:05:
64:5a:b0:32:e1:68:0a:e9:61:42:82:be:37:7c:c7:c6:d5:02:
d1:49:c7:c8:76:f9:c1:3c:2d:36:89:0d:10:6f:d9:c3:ee:3b:
d0:51:74:bb:0e:5b:21:00:ff:15:57:62:fa:66:c8:fa:2c:00:
0f:d4:65:22:72:96:c7:ff:1d:43:90:f7:b6:eb:2a:54:0c:c7:
54:48:8e:5e:db:6c:1b:64:13:0d:fa:41:83:87:17:67:c0:74:
6e:ab:01:87:e9:3a:d9:5f:4a:0f:e2:8b:89:58:53:86:7f:33:
3a:f1:44:80:32:2e:4f:9f:f2:fb:24:1d:b6:be:7b:6d:06:dc:
37:26:41:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org