Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/oWgJqeG5wJiTcLVgitCblvwYMyc.roa
File: oWgJqeG5wJiTcLVgitCblvwYMyc.roa (raw, json)
Hash identifier: 4nu0yhAnSKEBAR4xLK+6/dlFfqU1HQjsQVeDTYH0HSo=
Subject key identifier: A1:68:09:A9:E1:B9:C0:98:93:70:B5:60:8A:D0:9B:96:FC:18:33:27
Certificate issuer: /CN=324A7E6EBF678F98B87228EC8466C3690A43DDB6
Certificate serial: 0BA4
Authority key identifier: 32:4A:7E:6E:BF:67:8F:98:B8:72:28:EC:84:66:C3:69:0A:43:DD:B6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/oWgJqeG5wJiTcLVgitCblvwYMyc.roa
Signing time: Wed 03 Apr 2024 10:52:19 +0000
ROA not before: Wed 03 Apr 2024 10:52:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 133948
IP address blocks: 103.197.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2980 (0xba4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324A7E6EBF678F98B87228EC8466C3690A43DDB6
Validity
Not Before: Apr 3 10:52:19 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A16809A9E1B9C0989370B5608AD09B96FC183327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:de:6a:f7:aa:79:d5:33:4a:ff:04:d7:ed:7e:
ce:05:0d:7a:69:30:2f:9f:f6:29:d0:f9:6b:59:c4:
89:4d:81:c7:61:bb:63:6d:04:93:e7:be:ab:17:f9:
1a:30:fa:c3:2b:9b:38:41:62:c3:3d:2c:c1:d2:ee:
8f:4d:cb:32:7a:81:43:f4:3a:ba:b5:99:1b:25:f9:
9a:e9:e1:c5:bf:f6:f6:cb:22:9b:6e:b5:bf:a4:8f:
ae:6e:b7:84:74:d1:bf:c9:39:a3:d2:9d:85:9c:b5:
49:e1:a5:0b:ba:e0:3e:5c:44:ed:e8:9f:4b:c2:a1:
a3:54:d0:87:05:bf:a5:c3:71:3f:5b:4e:ee:7f:37:
18:46:2f:34:d3:05:28:15:fb:31:fc:07:e1:bc:bb:
93:33:9e:68:d8:8b:c8:26:fe:e0:b9:73:02:29:c2:
2a:b9:60:be:9f:1f:ff:48:ad:fd:a5:60:c0:9d:5f:
0b:38:be:3f:80:4f:66:08:94:57:c1:4e:ed:16:00:
d3:8c:5e:2b:b0:d8:c9:d7:48:70:2f:02:26:dd:4b:
ad:6e:91:68:53:04:7a:03:aa:7f:f7:ff:81:61:d4:
97:c0:65:0b:ef:bf:9a:1a:46:89:f0:4e:83:8d:4b:
a0:b7:34:1e:2f:83:b4:73:e7:73:16:ca:4d:c5:bd:
56:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:68:09:A9:E1:B9:C0:98:93:70:B5:60:8A:D0:9B:96:FC:18:33:27
X509v3 Authority Key Identifier:
keyid:32:4A:7E:6E:BF:67:8F:98:B8:72:28:EC:84:66:C3:69:0A:43:DD:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/Mkp-br9nj5i4cijshGbDaQpD3bY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/oWgJqeG5wJiTcLVgitCblvwYMyc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.197.172.0/24
Signature Algorithm: sha256WithRSAEncryption
85:65:e0:ea:0e:33:d5:10:cb:52:cf:8e:1e:1f:b7:9d:62:7e:
7b:60:72:50:0a:93:01:96:25:0f:a3:1c:33:69:be:15:40:ba:
b6:c6:df:66:47:1b:6d:a6:d3:5b:16:a0:68:cf:ef:53:d5:f5:
98:b4:4c:3b:ed:c1:a5:01:f9:95:36:44:d8:96:33:64:80:af:
ae:6d:5f:73:61:a4:a2:01:51:50:fb:27:a6:ef:a3:9b:86:d1:
01:80:0d:9e:63:bb:4a:f6:31:55:2f:a2:c4:95:5e:62:e2:6b:
74:a8:63:df:8f:b1:91:b4:77:5c:35:11:9e:bc:4e:c5:98:a0:
68:58:6d:01:1d:7a:40:28:bf:5c:f7:ef:52:f3:75:19:45:42:
2e:1b:ae:f8:93:2a:08:31:36:cd:e9:d4:ae:22:89:0e:3a:41:
9a:41:d3:5e:75:66:38:67:c7:db:bc:99:ef:17:58:6d:a9:ca:
aa:df:ba:1d:73:c7:ba:33:82:33:5d:a9:f2:c2:76:ec:ff:44:
09:7f:af:cc:61:70:fe:d4:e5:b2:81:6b:4a:2c:1f:3a:2e:82:
30:55:dc:b8:c5:27:e4:98:95:48:d3:f5:d3:87:0d:81:57:73:
04:7d:9d:e4:09:06:0f:d0:04:c9:88:ad:ac:e8:3e:a8:3f:83:
97:33:7a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org