Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/2PbR2iB80FBDhiZ3b9oEJwh6VAo.roa
File: 2PbR2iB80FBDhiZ3b9oEJwh6VAo.roa (raw, json)
Hash identifier: oJY6kNlNyb9TGbyfdgm6/JZK5/v4sKJIKoMARNbq3XE=
Subject key identifier: D8:F6:D1:DA:20:7C:D0:50:43:86:26:77:6F:DA:04:27:08:7A:54:0A
Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial: 0574
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/2PbR2iB80FBDhiZ3b9oEJwh6VAo.roa
Signing time: Fri 01 Sep 2023 08:59:49 +0000
ROA not before: Fri 01 Sep 2023 08:59:49 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131657
IP address blocks: 103.153.176.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1396 (0x574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
Validity
Not Before: Sep 1 08:59:49 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D8F6D1DA207CD050438626776FDA0427087A540A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:39:17:1d:7b:5e:ba:f9:69:45:de:02:fa:8d:
18:bb:b1:ef:0d:3d:dc:34:00:ae:e4:4f:31:ab:c3:
30:8f:87:84:e1:e2:76:9e:69:9b:05:7d:31:a5:42:
6c:b8:bb:50:da:51:81:85:49:60:7c:b0:2c:ad:0e:
3f:fd:b4:e1:ac:db:7a:08:03:5c:12:15:d9:5a:8c:
60:c6:50:23:48:57:76:67:74:57:3e:85:0b:4b:07:
db:8d:63:30:01:75:7e:2a:fa:0c:a3:30:65:97:03:
2d:d2:85:35:2f:01:95:02:00:ad:77:bb:c7:f7:67:
67:99:60:7d:2e:f0:9a:ee:b8:32:da:25:64:22:8e:
2e:f1:48:fb:69:35:79:87:45:16:c4:85:da:27:1e:
f8:53:e2:29:70:f8:1c:b5:59:89:95:3a:32:2e:bf:
67:9a:f4:fd:75:e2:de:31:16:45:aa:c6:5b:68:c9:
dc:20:cf:e7:dd:ad:5e:6a:e5:3b:c6:66:8a:a5:2f:
38:72:e6:a8:8a:fe:e9:d5:04:8d:a3:db:e4:1b:b1:
2c:4d:33:88:4a:98:03:6e:e5:14:2f:4c:9b:30:db:
b3:eb:b3:b6:6f:01:bd:8f:5d:6e:db:a4:8e:c5:0f:
13:bc:11:d9:d9:c9:40:19:97:fa:d3:01:a2:6b:ea:
41:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F6:D1:DA:20:7C:D0:50:43:86:26:77:6F:DA:04:27:08:7A:54:0A
X509v3 Authority Key Identifier:
keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/2PbR2iB80FBDhiZ3b9oEJwh6VAo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.176.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:61:1f:53:d5:44:a9:74:62:ab:05:78:d9:ec:98:06:0c:4f:
04:b6:6a:1b:29:19:35:ac:8b:48:89:5d:fa:65:d7:a0:b4:bf:
ed:0e:fa:a7:a8:94:80:a2:50:4c:62:fe:56:15:7e:bb:35:44:
eb:25:68:3b:b0:37:ec:ee:44:c5:8b:1a:71:7d:1a:f3:00:d3:
cd:10:5b:b4:99:28:34:94:15:f0:39:6b:8a:50:e6:d0:79:66:
c6:93:36:1d:09:6d:c5:f5:b4:7b:55:41:15:bf:50:4c:32:a2:
ab:e0:0f:3f:8c:c9:9d:70:e3:16:b5:53:7a:03:8f:1b:34:15:
b4:74:98:8d:ae:78:5d:69:c2:19:47:a1:58:0b:1a:75:eb:43:
8e:13:22:da:73:55:59:5c:31:19:98:09:1c:a3:a4:52:bb:58:
5f:a6:e5:d7:00:f7:b0:40:25:83:8c:60:b4:c6:70:5d:c9:8f:
dc:9f:87:ad:59:e7:77:54:aa:8f:ff:d4:df:ae:5b:05:3d:e0:
a6:a8:d1:e2:b2:cf:7f:cd:5a:a7:29:30:f5:cc:0b:4a:d9:1a:
48:2e:5f:b9:00:44:a3:c3:b7:c0:ce:df:3f:94:81:37:ab:34:
78:49:8e:43:8e:08:d9:28:7d:02:a6:ca:7a:f8:7f:4b:88:e3:
f4:5d:13:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org