Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GCMM/hpBsyW82b1_VX2UCcp3GbAsdB68.roa
File: hpBsyW82b1_VX2UCcp3GbAsdB68.roa (raw, json)
Hash identifier: qOb7GcBD2Ulq00BvxWVC9IE2dobxtXqsl4ZUbZ4OdSo=
Subject key identifier: 86:90:6C:C9:6F:36:6F:5F:D5:5F:65:02:72:9D:C6:6C:0B:1D:07:AF
Certificate issuer: /CN=8092F614E0EF75395097E896469BC8B7B319D852
Certificate serial: 1018
Authority key identifier: 80:92:F6:14:E0:EF:75:39:50:97:E8:96:46:9B:C8:B7:B3:19:D8:52
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gJL2FODvdTlQl-iWRpvIt7MZ2FI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GCMM/hpBsyW82b1_VX2UCcp3GbAsdB68.roa
Signing time: Wed 29 Sep 2021 02:38:25 +0000
ROA not before: Wed 29 Sep 2021 02:38:25 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18046
IP address blocks: 103.130.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4120 (0x1018)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8092F614E0EF75395097E896469BC8B7B319D852
Validity
Not Before: Sep 29 02:38:25 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=86906CC96F366F5FD55F6502729DC66C0B1D07AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a2:f6:16:8f:36:35:7e:32:e7:c3:a9:ef:6e:
a0:fe:2e:06:af:51:67:31:f1:12:65:40:9e:98:b1:
a2:a5:e9:5b:9b:f5:d2:3a:8a:8d:84:a0:d2:ad:cb:
88:00:e9:5c:c9:44:e7:57:4c:91:c2:eb:17:20:7c:
01:d6:44:4c:9b:6f:66:0a:25:b9:8e:58:e6:ed:ce:
eb:f8:07:e5:bf:e0:af:9e:81:e9:47:77:69:5b:53:
b6:35:20:5b:26:07:0d:e3:ba:fe:e2:df:1d:65:0c:
dd:b7:a6:d8:d7:82:e4:41:8b:18:d2:e0:52:48:58:
4a:e1:c3:df:5a:58:16:46:10:a1:49:58:b4:4f:92:
84:29:dd:8c:86:27:ff:b7:fa:2c:12:ee:9b:08:45:
76:8c:9b:f1:63:23:a2:25:55:45:b8:f8:88:1b:1c:
ac:d9:e6:38:e2:73:98:ae:70:6a:10:fa:4e:d5:83:
fa:4b:cf:5a:4b:ad:0f:d9:ff:05:80:81:ea:a6:48:
95:83:52:18:29:2e:20:10:b3:86:12:b7:d9:71:00:
8a:b7:8a:fc:fb:87:b7:2b:b1:29:2b:3b:4f:3e:ca:
59:d3:7b:cc:42:5f:ba:4d:dc:0d:83:b6:f2:d4:50:
20:41:58:c3:70:cc:ea:ee:b5:f6:5a:2d:13:a4:44:
fd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:90:6C:C9:6F:36:6F:5F:D5:5F:65:02:72:9D:C6:6C:0B:1D:07:AF
X509v3 Authority Key Identifier:
keyid:80:92:F6:14:E0:EF:75:39:50:97:E8:96:46:9B:C8:B7:B3:19:D8:52
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GCMM/gJL2FODvdTlQl-iWRpvIt7MZ2FI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gJL2FODvdTlQl-iWRpvIt7MZ2FI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GCMM/hpBsyW82b1_VX2UCcp3GbAsdB68.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.36.0/22
Signature Algorithm: sha256WithRSAEncryption
28:bf:61:3a:f4:da:8d:87:6f:cd:86:20:38:de:2f:24:3b:e7:
6d:ba:aa:46:9e:34:ec:9f:ed:aa:d9:64:21:6f:64:6f:95:0d:
a8:23:f7:d5:4d:7c:08:e5:ab:4d:fc:69:53:3f:29:77:0c:ff:
98:b0:d4:2c:1d:59:e6:95:14:5f:06:3f:d6:19:73:10:b0:01:
b7:89:9a:30:e9:4a:79:f0:e8:50:52:9a:ca:bb:5d:bf:62:68:
cf:99:a5:b3:86:23:8e:b6:c3:a8:85:40:f9:fa:ee:e1:5d:30:
5c:05:01:b9:17:9c:4e:8c:14:77:08:fc:0a:8b:58:62:8e:aa:
7c:e7:c6:c1:d2:b0:7c:7b:2e:cc:89:19:92:a6:7a:99:07:e4:
79:2b:a6:94:73:85:85:43:a7:6f:c9:36:02:ed:e3:77:65:53:
92:2f:f7:15:34:bd:38:b5:e6:00:d2:fe:3a:1c:78:01:b6:ab:
80:ad:8d:85:3c:d1:61:72:5a:18:65:5a:55:eb:40:5c:71:72:
1c:9e:1e:fd:05:cd:73:4f:43:bf:1c:42:18:08:59:49:0f:b8:
56:df:5a:3d:32:54:a0:82:21:7d:99:ab:b0:ec:b1:b8:ed:bf:
c3:35:04:3e:9a:d5:0b:cc:d5:10:04:6d:a8:fe:1d:0a:64:1f:
5e:78:2f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org