Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GH/GhwButO0roIMwWqNUMzJjAoMxjw.roa
File: GhwButO0roIMwWqNUMzJjAoMxjw.roa (raw, json)
Hash identifier: h2sMbTgWaTW9RmRCAaTAYrlYZKz5+jp/3sX/+SNoB4U=
Subject key identifier: 1A:1C:01:BA:D3:B4:AE:82:0C:C1:6A:8D:50:CC:C9:8C:0A:0C:C6:3C
Certificate issuer: /CN=E63C5A15B7CE90030108F4AD38E541E6CDB5BEFE
Certificate serial: 0E3B
Authority key identifier: E6:3C:5A:15:B7:CE:90:03:01:08:F4:AD:38:E5:41:E6:CD:B5:BE:FE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/5jxaFbfOkAMBCPStOOVB5s21vv4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GH/GhwButO0roIMwWqNUMzJjAoMxjw.roa
Signing time: Tue 29 Sep 2020 10:03:48 +0000
ROA not before: Tue 29 Sep 2020 10:03:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18046
IP address blocks: 103.130.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3643 (0xe3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E63C5A15B7CE90030108F4AD38E541E6CDB5BEFE
Validity
Not Before: Sep 29 10:03:48 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1A1C01BAD3B4AE820CC16A8D50CCC98C0A0CC63C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:ea:c1:51:ed:12:ea:6c:9e:91:b5:8f:bf:
8d:b3:6e:81:87:3d:04:36:0f:16:ef:07:d0:c4:55:
1a:08:36:bb:71:b9:8d:3d:ea:ce:3d:37:4c:cc:05:
c9:e6:81:6e:8f:e5:84:01:a1:5a:e0:e4:44:bd:89:
c5:0c:96:47:00:c7:06:14:36:59:49:f3:75:e4:ee:
4b:51:95:5d:42:ad:bd:b5:f2:b0:1d:dc:df:b6:c9:
18:de:1e:2e:47:10:c5:c0:72:4a:60:b6:4a:7f:55:
7a:6f:ea:62:58:2f:45:41:c7:2c:39:0b:be:a7:96:
8b:d0:80:0d:b6:8a:8d:cd:34:e4:2c:23:9f:01:f2:
0b:1d:56:13:15:5f:b9:07:a5:28:14:9e:04:ba:e4:
19:66:02:62:e8:5a:5f:aa:1b:89:e2:a1:33:97:bc:
22:c5:d6:88:bf:75:a2:ef:f6:4f:91:3a:b9:6f:10:
a4:e6:6f:d8:a5:93:de:eb:c5:05:31:41:35:b4:56:
ef:a4:99:b3:14:65:43:05:35:2e:c2:2a:95:81:74:
00:36:de:fa:73:9b:75:83:f8:72:38:cc:45:a8:03:
15:0d:c6:f4:29:62:50:86:0b:12:48:eb:68:d9:c6:
53:73:bf:c5:11:fe:71:47:1c:20:eb:87:9f:eb:af:
70:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1C:01:BA:D3:B4:AE:82:0C:C1:6A:8D:50:CC:C9:8C:0A:0C:C6:3C
X509v3 Authority Key Identifier:
keyid:E6:3C:5A:15:B7:CE:90:03:01:08:F4:AD:38:E5:41:E6:CD:B5:BE:FE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GH/5jxaFbfOkAMBCPStOOVB5s21vv4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/5jxaFbfOkAMBCPStOOVB5s21vv4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GH/GhwButO0roIMwWqNUMzJjAoMxjw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.44.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:67:2f:d8:90:f8:e0:62:b8:5b:ec:9e:0a:75:38:15:b8:da:
bb:1f:e0:cf:b8:fe:fc:f0:89:08:ec:0c:60:e2:c6:60:98:48:
62:32:55:20:a3:ea:45:5e:cb:7a:5c:fd:f6:1e:28:98:13:4b:
82:32:69:be:cf:34:94:8e:9e:55:6f:ee:d0:40:d6:b2:ed:2c:
d1:38:fe:32:c9:0c:f3:bf:82:03:cf:cf:8c:f4:20:82:93:c2:
31:e5:e7:09:aa:35:cb:bf:b7:9c:f9:b0:8b:8e:a0:fe:b6:28:
f1:20:cd:08:90:7c:59:5f:5e:51:fa:78:52:dd:87:05:eb:9b:
53:a1:d0:ae:6d:60:5f:94:aa:4e:5b:4e:0d:e4:14:16:29:79:
aa:c4:09:d5:a5:29:89:0e:16:54:52:5e:54:07:be:03:8e:20:
65:6d:8b:76:d7:cd:3a:05:0d:af:e8:03:e2:eb:59:a4:a2:11:
64:c7:3b:e8:25:01:4d:a4:af:a9:b1:70:0a:b1:37:d8:44:7b:
35:1c:db:50:bf:36:5c:db:cf:31:08:c4:a4:22:8a:e8:67:71:
ca:47:31:37:06:29:89:99:8f:20:63:5f:34:e2:37:4f:ab:d9:
7c:29:1f:76:40:55:95:89:b2:b6:36:16:a2:70:db:de:52:d1:
ee:99:b3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org