Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GCMM/a8RWtbsU50hj7kJTFRgapLG-xQI.roa
File: a8RWtbsU50hj7kJTFRgapLG-xQI.roa (raw, json)
Hash identifier: cXu3e8oRJCecf1HNA9tBZ/MjlaotBP7FfyA5NQhOfxY=
Subject key identifier: 6B:C4:56:B5:BB:14:E7:48:63:EE:42:53:15:18:1A:A4:B1:BE:C5:02
Certificate issuer: /CN=8092F614E0EF75395097E896469BC8B7B319D852
Certificate serial: 11F0
Authority key identifier: 80:92:F6:14:E0:EF:75:39:50:97:E8:96:46:9B:C8:B7:B3:19:D8:52
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gJL2FODvdTlQl-iWRpvIt7MZ2FI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GCMM/a8RWtbsU50hj7kJTFRgapLG-xQI.roa
Signing time: Fri 01 Sep 2023 08:52:13 +0000
ROA not before: Fri 01 Sep 2023 08:52:13 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18046
IP address blocks: 103.130.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4592 (0x11f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8092F614E0EF75395097E896469BC8B7B319D852
Validity
Not Before: Sep 1 08:52:13 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6BC456B5BB14E74863EE425315181AA4B1BEC502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:18:a1:91:2f:20:7f:a5:b9:b8:fc:7f:08:
78:7c:dc:c5:a6:7c:56:e4:2b:a6:ac:2e:68:67:2e:
3d:ed:c9:2e:93:e1:68:33:5d:d0:0a:53:2c:f5:a7:
aa:be:d5:dc:b3:64:f2:dc:5c:9b:9f:fc:4b:a6:ac:
a8:fa:46:bf:31:b9:cf:c0:aa:ba:ef:96:0f:64:48:
64:9e:53:f3:40:30:55:e0:9c:a7:26:01:3c:2a:9d:
11:b3:f3:a9:a3:7d:73:d9:d9:17:fa:88:8c:6c:92:
09:08:0b:8f:45:13:ae:ba:77:e1:9f:26:e3:34:93:
d7:f6:9d:7d:68:1a:44:23:d5:27:ab:62:bc:21:81:
88:39:da:24:4a:86:65:d3:1c:5b:1e:ac:f8:1c:90:
11:ff:f2:8d:a6:28:56:a8:b5:61:7a:b9:b2:ff:52:
7c:f8:ad:46:e5:c1:19:52:cd:6f:a8:15:1a:3d:55:
79:9f:f6:e8:8a:ce:df:d8:bf:11:cb:5f:aa:29:e6:
20:98:9c:cc:ba:90:5c:07:da:f7:6e:29:ee:9a:a4:
f2:68:63:16:d3:99:d8:1c:d5:fa:37:b5:73:8e:b8:
fc:2b:8e:37:8a:1f:02:bd:4d:a9:97:62:b2:56:a1:
3f:31:17:d9:1f:1f:3c:f8:38:9f:1b:d1:ee:52:9c:
c7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C4:56:B5:BB:14:E7:48:63:EE:42:53:15:18:1A:A4:B1:BE:C5:02
X509v3 Authority Key Identifier:
keyid:80:92:F6:14:E0:EF:75:39:50:97:E8:96:46:9B:C8:B7:B3:19:D8:52
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GCMM/gJL2FODvdTlQl-iWRpvIt7MZ2FI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gJL2FODvdTlQl-iWRpvIt7MZ2FI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GCMM/a8RWtbsU50hj7kJTFRgapLG-xQI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.36.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:d9:0e:de:fb:79:af:16:70:47:05:31:a8:87:24:ad:1d:e2:
0a:b5:0b:60:5f:30:da:41:49:57:3e:ab:6d:67:43:de:88:6b:
5b:09:c3:01:1f:2b:c4:d9:0b:bb:76:1f:e6:99:cf:38:ff:48:
cf:fb:ac:30:36:bf:68:40:0a:65:64:ee:16:2d:fb:f0:4c:cb:
49:a8:db:34:93:76:8b:2d:97:89:b7:22:47:c8:32:67:b8:40:
4a:7d:9c:39:cf:a1:32:28:82:c8:58:a8:69:b3:d5:e5:cd:3f:
c4:a5:86:d2:5f:a8:8c:86:6b:10:d1:ed:e1:be:6b:ed:f0:ba:
d1:52:11:e1:61:e9:b2:1c:01:b3:be:43:b1:3a:66:5c:99:f2:
6e:86:a2:9b:11:49:2f:5c:e0:d8:19:a5:51:2b:39:bd:f3:9c:
c1:ed:fc:14:0e:7e:d5:ad:29:78:63:98:89:a1:b0:44:ad:64:
f0:fb:81:67:6a:0f:f1:bc:81:41:cc:33:b3:54:f4:3d:6d:88:
1e:88:29:2e:52:04:54:96:2c:c6:78:b5:8c:73:8c:b5:40:07:
66:a0:10:2c:2f:1f:9c:d8:21:ae:b6:8a:c9:95:a9:7a:01:39:
74:b6:b0:9f:86:83:7a:4f:90:ee:0c:ca:9a:f2:d7:5e:0d:3c:
73:05:a2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org