Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/IZpqNwwhFZ_UvzEb6r67HEH0Fig.roa
File: IZpqNwwhFZ_UvzEb6r67HEH0Fig.roa (raw, json)
Hash identifier: ayDZ1Bzl8bKjeV2VVfrj/ACa48hMyn7w2oOvD7jU1O4=
Subject key identifier: 21:9A:6A:37:0C:21:15:9F:D4:BF:31:1B:EA:BE:BB:1C:41:F4:16:28
Certificate issuer: /CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
Certificate serial: 0210
Authority key identifier: 00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/IZpqNwwhFZ_UvzEb6r67HEH0Fig.roa
Signing time: Fri 01 Sep 2023 08:55:54 +0000
ROA not before: Fri 01 Sep 2023 08:55:54 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 396982
IP address blocks: 103.169.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528 (0x210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
Validity
Not Before: Sep 1 08:55:54 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=219A6A370C21159FD4BF311BEABEBB1C41F41628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:eb:f4:ee:93:4c:bc:97:d4:4e:ce:a2:61:90:
e7:67:ab:44:56:be:52:76:bf:93:f1:d2:6e:13:ca:
8b:c9:a8:87:b5:b8:e6:5f:ff:39:49:22:c0:f3:63:
18:f8:76:ac:ff:99:17:06:2c:2c:1a:4f:fe:1e:e6:
4a:a0:c4:bc:3b:a0:34:b8:b6:95:61:c5:ee:ca:46:
31:78:ff:1a:35:59:53:e0:4b:57:6f:79:9f:d9:d1:
64:33:69:98:a5:78:73:17:cc:31:bc:7c:f9:59:ef:
3c:e1:77:61:ff:9a:27:5c:30:b0:10:b4:0b:f6:96:
f4:e3:6f:2e:83:56:e8:62:df:15:8e:fe:e0:09:ff:
ee:34:01:f5:d1:ba:21:d6:b1:5b:2b:a5:3d:25:50:
1a:3b:49:b3:00:61:d3:8a:92:40:06:83:64:ea:82:
6e:07:93:0f:4b:2a:95:df:71:e5:25:91:04:45:bd:
f0:f0:5c:11:f0:9d:02:a5:c7:95:e4:47:da:9d:90:
ef:24:20:29:43:9b:88:16:22:a2:41:68:f1:17:2b:
66:4a:19:36:8f:3a:1d:20:c5:9b:84:10:f4:a0:15:
61:54:78:2d:67:5c:93:63:a9:e6:a0:8e:0d:60:f4:
c3:59:51:e6:41:2a:92:6a:82:8e:c8:82:65:63:00:
37:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9A:6A:37:0C:21:15:9F:D4:BF:31:1B:EA:BE:BB:1C:41:F4:16:28
X509v3 Authority Key Identifier:
keyid:00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/IZpqNwwhFZ_UvzEb6r67HEH0Fig.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.169.213.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:fd:9c:34:0c:62:b5:2e:ed:b9:62:a4:88:72:f8:5b:c3:e0:
7c:27:97:4c:52:4e:8a:c0:24:ce:da:f8:3b:8d:bc:8b:47:41:
68:1d:16:96:76:51:ff:6b:df:f9:c1:88:a7:26:9d:b2:11:e5:
ff:6e:6f:64:11:b4:7c:f9:31:c9:26:b1:5b:75:54:42:bb:bf:
cb:ab:aa:80:38:6d:f7:68:a0:5d:0c:79:76:b0:aa:c7:ce:29:
16:2e:70:4e:d0:f0:dd:7a:f6:56:25:3f:08:8d:39:dc:5c:32:
77:49:09:17:f7:74:0a:53:79:ad:03:36:80:1d:e5:49:0d:96:
fc:a3:e6:4c:19:bd:0f:2e:aa:09:1e:01:fe:48:9e:eb:ad:1b:
25:b3:ff:8a:09:cf:27:c8:40:af:7d:90:61:b4:cd:0f:70:ac:
08:29:dd:d6:4d:c9:76:6d:77:c8:34:87:a9:7b:17:45:d3:ae:
39:3d:21:87:21:29:8c:43:fc:0f:2d:a7:da:df:f2:f5:d9:74:
5f:af:d3:7e:25:b5:6c:02:d1:8e:1c:4a:a2:b5:46:8e:6c:4a:
ea:a3:ee:af:ba:12:7f:87:33:54:36:43:42:58:91:70:1e:a0:
33:74:45:70:16:d8:de:84:52:97:e2:b7:83:89:b5:5e:5c:7d:
ea:32:c4:5f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org