Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/vt2vEisF-4OMNcrZ6TsU1BFOIx0.roa
File: vt2vEisF-4OMNcrZ6TsU1BFOIx0.roa (raw, json)
Hash identifier: pvHj/Lj5ZFca/VFiXVFMqw2MWgl2q0SpLAq47lHE+gI=
Subject key identifier: BE:DD:AF:12:2B:05:FB:83:8C:35:CA:D9:E9:3B:14:D4:11:4E:23:1D
Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial: 05A7
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/vt2vEisF-4OMNcrZ6TsU1BFOIx0.roa
Signing time: Thu 12 Oct 2023 08:25:33 +0000
ROA not before: Thu 12 Oct 2023 08:25:33 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 134823
IP address blocks: 103.122.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1447 (0x5a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
Validity
Not Before: Oct 12 08:25:33 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=BEDDAF122B05FB838C35CAD9E93B14D4114E231D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9d:ea:36:cd:5f:81:80:69:37:51:9c:2b:41:
15:9b:ac:65:12:e8:73:4a:5a:83:c0:da:1b:50:58:
b8:2d:91:c5:e4:86:87:bd:16:73:26:ce:31:38:c5:
d8:07:17:c9:e5:f9:d4:95:42:83:43:86:f4:16:c8:
7f:3b:00:24:ad:5b:2e:e8:b8:66:5d:ce:eb:6b:b3:
71:dd:99:72:21:c4:7d:65:ec:63:0f:06:12:3a:79:
d7:5a:7b:2d:98:db:5f:b4:1b:79:20:5b:41:a6:8c:
41:b0:bf:30:dd:be:b9:1c:b1:90:78:bd:b6:32:b4:
20:fb:85:f9:2c:d1:df:af:c3:c6:d1:46:a0:e7:a2:
d1:f4:01:0a:16:c5:e1:60:13:b6:4f:72:d0:4a:2d:
3e:ba:29:ea:f1:f1:73:d7:40:53:e2:95:82:4a:e3:
a9:17:2a:9e:85:19:3e:a2:15:bd:dc:dd:8f:16:5c:
34:fa:9f:d9:9d:8c:07:2e:54:b2:c6:bc:4a:e0:fa:
f8:54:4d:0c:2f:00:b7:4a:3c:6e:56:15:91:ce:9d:
6e:19:ca:bf:d0:83:03:26:bc:9a:83:3a:2c:a9:27:
08:4b:b2:fb:11:06:9a:7b:92:4a:7e:35:6b:56:77:
07:f2:35:1f:25:4f:e8:b8:3b:f9:df:a9:fd:78:45:
a6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DD:AF:12:2B:05:FB:83:8C:35:CA:D9:E9:3B:14:D4:11:4E:23:1D
X509v3 Authority Key Identifier:
keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/vt2vEisF-4OMNcrZ6TsU1BFOIx0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.188.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:f9:9b:67:7b:4e:8d:65:2b:36:35:59:ad:3a:47:21:96:63:
6a:be:0c:63:2d:47:2f:65:93:6a:42:24:11:3c:4f:da:3e:68:
f3:a4:fd:e0:41:4d:6b:53:8b:16:ef:6c:a2:3a:80:91:f5:52:
98:37:99:c7:cc:82:10:1f:c5:83:93:3f:d6:3d:ea:b6:db:bc:
4e:eb:c3:8d:f6:60:ec:6b:1b:09:5b:e6:73:e9:ca:c2:37:e8:
9a:c1:4c:33:20:d1:cc:44:62:bb:28:c2:81:94:bd:61:6a:25:
86:c7:3a:d3:6d:fb:6b:50:8f:91:57:8b:97:a0:fd:3f:29:0a:
97:46:ef:4b:13:3f:d7:a7:9c:52:94:d5:be:b9:71:44:95:c4:
0f:ae:f2:fd:d5:a7:a4:14:3a:18:74:4e:27:b1:ef:d7:24:e3:
26:7e:7b:c1:54:45:16:3f:f2:57:ae:20:4a:68:94:4c:b5:01:
75:eb:33:9d:bd:da:b1:79:9d:2a:92:57:be:ef:cf:d5:20:87:
ab:b4:66:71:c7:a3:a0:7f:02:41:b7:a6:c0:63:81:b7:09:00:
34:d3:11:c0:ac:c9:7e:e3:61:b6:70:79:cb:ab:46:60:ae:bb:
ca:44:7e:6d:64:db:ce:7b:de:78:76:64:7d:46:b8:97:e0:55:
27:35:81:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org