Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GCMM/aQ49opz2Pmfcrrnfg0pSqVOAG-M.roa
File: aQ49opz2Pmfcrrnfg0pSqVOAG-M.roa (raw, json)
Hash identifier: GuIG73UwX3Yy2Hf5yCBGA2s31rwcDp9W3bRp5Y+aJ1c=
Subject key identifier: 69:0E:3D:A2:9C:F6:3E:67:DC:AE:B9:DF:83:4A:52:A9:53:80:1B:E3
Certificate issuer: /CN=8092F614E0EF75395097E896469BC8B7B319D852
Certificate serial: 0E3C
Authority key identifier: 80:92:F6:14:E0:EF:75:39:50:97:E8:96:46:9B:C8:B7:B3:19:D8:52
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gJL2FODvdTlQl-iWRpvIt7MZ2FI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GCMM/aQ49opz2Pmfcrrnfg0pSqVOAG-M.roa
Signing time: Tue 29 Sep 2020 10:03:46 +0000
ROA not before: Tue 29 Sep 2020 10:03:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18046
IP address blocks: 103.130.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3644 (0xe3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8092F614E0EF75395097E896469BC8B7B319D852
Validity
Not Before: Sep 29 10:03:46 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=690E3DA29CF63E67DCAEB9DF834A52A953801BE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:8d:69:a9:07:ac:4e:d8:f3:6b:14:ce:a9:
36:53:28:8c:83:1d:9f:b9:87:51:53:0e:14:12:68:
6e:40:e7:9b:0f:bb:54:70:7f:b4:de:a8:27:80:d1:
48:88:a7:7c:20:5f:46:02:e3:ad:17:12:c8:0a:38:
82:5c:af:0d:df:93:b4:2a:2f:5c:5a:e6:df:7b:a5:
a2:fa:f3:70:09:3b:91:9e:99:21:12:e8:5c:fc:cc:
f8:d8:05:2b:66:e3:0a:3d:c8:b1:ae:c3:51:96:49:
0e:e9:cb:a4:5f:c0:33:40:fd:8a:ed:22:47:06:81:
b5:1c:6c:eb:79:fd:5f:3f:86:dc:58:f7:7f:3d:1f:
d1:e1:5c:23:c9:8d:74:bc:ec:67:7d:7f:16:ad:fd:
a9:25:86:6a:04:f3:b8:75:2f:09:fa:a9:66:44:7b:
a9:fc:27:93:c2:57:da:50:a0:5c:e4:4f:1d:c7:ea:
96:0f:c6:55:7b:bc:e1:5c:66:a8:c8:04:e5:11:bd:
ab:94:0e:25:43:94:85:f4:b0:f5:8b:b1:16:2f:14:
92:3a:8c:24:14:86:96:b2:f2:ae:28:c1:a9:2c:a2:
2e:8d:d9:e0:1e:c6:bc:02:2a:1b:46:6e:bf:26:82:
37:c2:38:be:7e:df:82:75:ed:fa:a2:1d:9e:63:8c:
b0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0E:3D:A2:9C:F6:3E:67:DC:AE:B9:DF:83:4A:52:A9:53:80:1B:E3
X509v3 Authority Key Identifier:
keyid:80:92:F6:14:E0:EF:75:39:50:97:E8:96:46:9B:C8:B7:B3:19:D8:52
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GCMM/gJL2FODvdTlQl-iWRpvIt7MZ2FI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gJL2FODvdTlQl-iWRpvIt7MZ2FI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GCMM/aQ49opz2Pmfcrrnfg0pSqVOAG-M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.36.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:d0:e9:29:a1:4f:51:a5:8c:6c:16:84:46:1e:e2:91:d1:a9:
01:c2:f3:4a:68:6f:43:de:86:74:b0:0a:95:5d:0b:83:46:58:
40:7d:23:ed:2a:a8:80:92:ef:22:74:aa:a1:ad:14:7d:2e:89:
7b:0a:eb:4f:e1:52:5f:94:5b:1d:bf:da:60:3f:f3:db:42:b2:
ef:09:23:52:27:99:d9:da:38:73:22:31:56:2a:7a:72:a2:f9:
d1:ef:b6:db:e4:5d:81:cd:09:3e:a8:17:79:ec:21:0f:bf:32:
73:2c:11:7b:28:8c:30:85:6d:76:1e:d1:8b:d1:96:3f:d2:50:
a6:cb:66:1c:34:09:be:7f:0d:09:e8:6b:d7:be:4b:9d:cc:24:
93:08:c3:48:cf:ef:a6:f5:bc:fa:b2:9d:84:b6:d5:ec:f9:e6:
f6:64:b7:c6:04:3e:1c:50:69:de:0a:ce:13:99:6b:f0:83:50:
d4:ac:fb:bd:66:60:18:12:19:5e:d7:69:0e:00:de:7f:e0:ff:
53:31:b5:76:0f:3b:d1:31:dc:a9:f1:d8:d0:73:ed:8c:96:f4:
ca:ea:62:7f:b5:92:07:70:ea:c0:d9:9b:55:67:2d:26:db:8d:
e7:96:96:9f:ae:93:f4:b4:65:e7:c8:6e:8f:64:9a:56:43:79:
61:c0:28:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org