Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GOEASY/sjfIqL1HVh6Kxa9VgaPzAy6-vHY.roa
File: sjfIqL1HVh6Kxa9VgaPzAy6-vHY.roa (raw, json)
Hash identifier: TD8eJ74XTQhXM3if5QRN7iN20is5IE+jmmS4jBkz92I=
Subject key identifier: B2:37:C8:A8:BD:47:56:1E:8A:C5:AF:55:81:A3:F3:03:2E:BE:BC:76
Certificate issuer: /CN=66B69E5B178B8C9444C4D64A6963B0BC9FA35762
Certificate serial: 0215
Authority key identifier: 66:B6:9E:5B:17:8B:8C:94:44:C4:D6:4A:69:63:B0:BC:9F:A3:57:62
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/sjfIqL1HVh6Kxa9VgaPzAy6-vHY.roa
Signing time: Fri 01 Sep 2023 08:54:17 +0000
ROA not before: Fri 01 Sep 2023 08:54:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7483
IP address blocks: 103.170.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 533 (0x215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66B69E5B178B8C9444C4D64A6963B0BC9FA35762
Validity
Not Before: Sep 1 08:54:17 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B237C8A8BD47561E8AC5AF5581A3F3032EBEBC76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:db:b5:3c:71:70:bd:4a:39:86:5b:e7:45:
4c:41:95:50:38:ff:8f:df:d4:86:85:29:a3:8b:59:
88:6f:53:f8:13:e3:72:5a:88:3c:f0:72:a6:64:09:
fe:19:7d:bf:9b:a9:0a:23:c5:17:20:9b:cb:e4:27:
ef:c5:de:9b:e7:25:99:a2:20:20:c9:c0:16:53:4e:
10:df:76:fa:2c:14:67:5b:96:48:34:8d:db:6e:12:
a9:79:13:9b:24:56:b6:85:88:a5:f0:ed:be:3e:f1:
c1:09:27:35:23:c5:e1:c5:57:91:45:b9:92:8c:6d:
4e:86:c2:68:e6:cc:7b:41:e2:34:fd:f2:35:a8:54:
fd:b1:f2:13:3f:34:86:c1:80:8c:eb:62:68:bb:4d:
0d:a5:2d:04:82:0b:8a:7b:85:17:32:f6:75:3a:8b:
8d:f5:55:95:97:01:cc:c3:e7:95:09:00:99:f9:23:
6c:20:02:99:77:b1:f0:05:bb:a5:fc:28:71:e8:8c:
2d:11:7e:a8:c3:f1:57:ee:5b:34:6d:25:64:3c:89:
ec:0c:32:6d:f2:11:aa:15:82:94:97:ca:44:db:bf:
a8:06:aa:c8:ca:74:98:ce:74:2a:14:c9:01:e8:e8:
3e:7d:1a:b4:cd:9f:05:38:48:90:78:8d:6b:69:57:
c5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:37:C8:A8:BD:47:56:1E:8A:C5:AF:55:81:A3:F3:03:2E:BE:BC:76
X509v3 Authority Key Identifier:
keyid:66:B6:9E:5B:17:8B:8C:94:44:C4:D6:4A:69:63:B0:BC:9F:A3:57:62
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/sjfIqL1HVh6Kxa9VgaPzAy6-vHY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.170.14.0/24
Signature Algorithm: sha256WithRSAEncryption
94:69:ff:41:8d:d2:88:8b:af:74:7e:30:62:c6:f2:75:13:2a:
f1:fb:26:12:63:25:44:fe:e5:e4:01:fa:89:08:68:3c:b8:03:
8f:fc:9b:c6:1c:ee:77:40:16:ad:1e:3b:02:80:ee:29:e0:ed:
e4:b5:24:de:eb:e6:b2:3c:6b:eb:18:f3:14:0b:f1:03:70:0e:
55:d5:aa:4c:db:e1:2a:1a:d3:5b:68:10:fe:4f:b7:10:a1:8e:
dd:38:a3:03:10:d7:38:2e:56:ca:84:84:68:f5:43:10:f7:31:
0c:39:2a:cc:da:ae:37:fb:a5:4a:61:e0:ed:8a:7f:4e:2b:6b:
75:aa:e4:1b:a1:f7:66:65:10:7f:f7:dc:dd:48:64:e3:83:af:
16:d8:c9:22:ac:45:2c:1b:d1:cb:98:1d:34:47:58:11:b5:ba:
f7:e0:30:4f:f8:c8:e4:ab:38:5d:9d:d6:2a:3c:2f:e3:31:e5:
b4:52:24:8a:d0:67:b4:f0:35:30:1d:e4:28:4a:25:a2:e9:ac:
fc:69:2e:06:29:89:19:a8:e1:31:4f:45:ee:95:95:c5:87:04:
7a:14:08:8b:49:d9:57:d7:a0:ad:76:27:95:96:92:6e:95:7f:
e0:a4:c6:f4:61:70:b1:9f:a1:d1:27:f6:25:6a:73:93:f1:71:
45:95:fc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org