Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GU/hthpHAlgprmSkOjC8KvnS8eUPMY.roa
File: hthpHAlgprmSkOjC8KvnS8eUPMY.roa (raw, json)
Hash identifier: 6qxYX4KOKoTo/Pn52HKtJI/Y17Ex58hR+Pv4VvY5MIo=
Subject key identifier: 86:D8:69:1C:09:60:A6:B9:92:90:E8:C2:F0:AB:E7:4B:C7:94:3C:C6
Certificate issuer: /CN=FD6A604FD79AF3477008E71EA4ED5CDF588CA664
Certificate serial: 0F75
Authority key identifier: FD:6A:60:4F:D7:9A:F3:47:70:08:E7:1E:A4:ED:5C:DF:58:8C:A6:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_WpgT9ea80dwCOcepO1c31iMpmQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GU/hthpHAlgprmSkOjC8KvnS8eUPMY.roa
Signing time: Sun 07 Feb 2021 11:46:50 +0000
ROA not before: Sun 07 Feb 2021 11:46:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18046
IP address blocks: 103.130.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3957 (0xf75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD6A604FD79AF3477008E71EA4ED5CDF588CA664
Validity
Not Before: Feb 7 11:46:50 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=86D8691C0960A6B99290E8C2F0ABE74BC7943CC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:80:62:33:6d:99:ce:68:f5:12:f3:05:3e:f7:
36:9e:b2:3f:5c:7c:77:f6:74:26:34:de:4a:45:bd:
40:6c:0b:51:76:ee:98:a1:d3:f0:a1:9a:60:aa:8e:
d7:cf:e8:c8:e1:13:0c:14:b7:d6:d5:32:5d:6a:5c:
b2:fa:68:dd:3a:25:9c:3c:68:dc:d0:15:9c:7e:b7:
33:03:09:b3:0b:13:02:84:b2:ca:8e:02:c6:f3:51:
74:b7:ae:15:0a:3b:98:d6:5a:0e:34:d0:6b:2a:62:
2e:34:08:5c:89:89:b6:c4:5d:f2:63:69:2e:bc:32:
69:95:19:df:a8:9d:cc:f0:ca:b5:cd:b7:0d:fe:c6:
83:36:bd:fa:a8:b9:62:a3:20:0d:10:d8:6f:17:47:
9c:ea:7b:4c:6c:07:f9:55:93:0d:2f:45:88:03:16:
4b:40:b4:af:8c:28:95:c2:15:65:a5:13:eb:a2:03:
f7:14:76:85:13:69:8e:c4:55:66:30:6c:f1:11:60:
63:39:d6:4c:cd:b7:07:c7:f4:5b:7e:dc:73:80:35:
c2:1f:0a:f8:26:84:ac:50:14:c2:0f:df:2d:ff:1f:
19:58:2c:64:2a:73:8a:60:e5:72:3c:23:5c:27:c1:
d9:b4:fa:e4:f8:e9:3b:19:e7:2d:00:d8:7f:b6:9f:
e0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D8:69:1C:09:60:A6:B9:92:90:E8:C2:F0:AB:E7:4B:C7:94:3C:C6
X509v3 Authority Key Identifier:
keyid:FD:6A:60:4F:D7:9A:F3:47:70:08:E7:1E:A4:ED:5C:DF:58:8C:A6:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GU/_WpgT9ea80dwCOcepO1c31iMpmQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_WpgT9ea80dwCOcepO1c31iMpmQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GU/hthpHAlgprmSkOjC8KvnS8eUPMY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.32.0/22
Signature Algorithm: sha256WithRSAEncryption
08:9b:78:3d:51:12:06:46:e8:8a:2d:48:d8:1b:93:ed:b7:2e:
1d:a4:30:b0:95:69:c3:07:85:a2:e4:c8:e4:e4:68:f1:1a:b9:
f4:2f:f2:d1:b5:e4:aa:f4:af:cf:6b:91:3c:d9:d0:08:fa:e1:
c0:cb:4f:b3:39:a7:f4:8d:cd:0a:31:80:09:ce:42:2a:e3:46:
54:5d:38:bc:1c:f9:a1:b1:5b:1c:78:4f:08:3a:b8:b8:69:c1:
12:8b:90:46:ff:17:d9:94:2d:d6:c0:24:a5:5b:58:42:0f:1c:
1e:5c:9c:ad:61:cb:af:85:fc:5c:12:1e:5f:a3:7c:19:da:11:
84:f1:5d:d9:12:e6:51:33:0f:82:27:7c:96:ee:78:d1:40:a2:
bf:a1:39:bc:27:3a:19:8b:a2:fe:58:99:7d:9b:5e:9f:68:7f:
35:f5:02:9f:ed:d2:bb:b2:a1:fa:46:a9:24:64:b2:a8:6d:22:
c2:b4:e2:fe:ac:a6:7e:75:d4:9a:f0:92:62:15:f2:79:88:29:
e9:9d:ff:97:81:41:49:f1:c5:b1:cf:26:bf:c9:73:00:c3:6d:
fa:6c:cf:c8:75:13:89:10:df:a1:eb:43:c2:d8:7f:13:fb:b0:
17:d1:c3:a8:5a:0e:81:e6:21:ea:5c:58:7b:54:04:e9:1a:ff:
c1:d8:ae:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org