Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/NwNCJU7lWkNNG4vCvEOb1kmqqSE.roa
File: NwNCJU7lWkNNG4vCvEOb1kmqqSE.roa (raw, json)
Hash identifier: 9tuqEYkoNTmgTR6OTYH172TTzHmvLOGgpqOxHhkB8KY=
Subject key identifier: 37:03:42:25:4E:E5:5A:43:4D:1B:8B:C2:BC:43:9B:D6:49:AA:A9:21
Certificate issuer: /CN=4E609BA74186D0B0E3A1A9C010DA1DF0559A1982
Certificate serial: 0AF5
Authority key identifier: 4E:60:9B:A7:41:86:D0:B0:E3:A1:A9:C0:10:DA:1D:F0:55:9A:19:82
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TmCbp0GG0LDjoanAENod8FWaGYI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/NwNCJU7lWkNNG4vCvEOb1kmqqSE.roa
Signing time: Fri 01 Sep 2023 09:00:19 +0000
ROA not before: Fri 01 Sep 2023 09:00:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131149
IP address blocks: 103.129.168.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2805 (0xaf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E609BA74186D0B0E3A1A9C010DA1DF0559A1982
Validity
Not Before: Sep 1 09:00:19 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=370342254EE55A434D1B8BC2BC439BD649AAA921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:35:e9:5f:21:da:27:f8:a1:23:52:2d:64:e8:
d7:e8:59:f7:11:d9:b3:2d:69:73:94:07:06:c8:bc:
44:2e:46:a9:f4:c5:87:98:0f:76:38:c4:2c:7f:79:
df:62:5d:d0:5b:0e:5b:08:ac:bb:e8:b5:3b:9b:a4:
82:a3:ef:9d:e0:56:be:b1:90:70:00:4a:8c:f4:19:
9d:c8:8f:a4:00:ea:bc:60:88:1e:b2:e0:a2:52:3a:
91:1e:ee:63:f4:03:2e:17:a1:fa:55:cd:72:75:7f:
a7:c9:e1:3e:f6:9c:58:ec:b6:d4:c1:e7:39:a0:3a:
0a:1c:68:f5:c5:c6:4e:0a:99:f0:b0:f0:54:92:9f:
3f:32:cf:c9:00:ed:74:24:0d:9b:4b:e7:6b:ce:a8:
3e:cc:8d:55:b5:38:62:8b:32:b2:ce:f0:64:da:51:
c3:c1:8f:31:76:c0:86:e9:0e:95:ed:4f:2c:bb:4f:
0d:95:7e:b3:6b:54:02:87:cb:e8:f3:e2:cc:ef:ca:
89:1a:c9:e1:65:60:93:f5:73:5b:91:3d:df:7d:ec:
6a:44:b7:5e:87:ec:9c:dd:49:cb:ae:7b:29:2f:70:
df:a8:52:66:d1:3d:53:d5:66:b3:de:c8:a0:9f:51:
fd:3e:8b:66:78:2c:91:a1:4c:28:a4:bc:c3:1f:8d:
6b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:03:42:25:4E:E5:5A:43:4D:1B:8B:C2:BC:43:9B:D6:49:AA:A9:21
X509v3 Authority Key Identifier:
keyid:4E:60:9B:A7:41:86:D0:B0:E3:A1:A9:C0:10:DA:1D:F0:55:9A:19:82
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/TmCbp0GG0LDjoanAENod8FWaGYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TmCbp0GG0LDjoanAENod8FWaGYI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/NwNCJU7lWkNNG4vCvEOb1kmqqSE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.129.168.0/22
Signature Algorithm: sha256WithRSAEncryption
24:79:12:f0:58:b3:78:63:6c:dd:68:8d:d9:8d:b3:78:e0:41:
33:95:ae:ee:68:df:9a:d2:e6:98:7a:17:09:e2:f3:2a:e2:91:
13:e4:88:e4:6d:5a:c5:12:9a:e7:f8:f4:b8:32:bd:24:2d:c8:
7b:d3:44:a4:bc:1a:c8:8f:4c:74:42:b4:69:bd:ac:3d:8c:ca:
48:83:a3:7e:ae:1d:f5:d4:fe:a7:e8:30:07:cf:d6:a0:87:dd:
4b:b7:cb:9d:92:25:3c:1c:a1:3e:97:d8:a1:29:3f:2b:eb:0c:
60:b5:8a:8b:66:37:30:42:f4:3c:d7:3c:40:85:19:0a:10:ef:
b2:27:bd:34:8b:93:08:22:27:43:a7:0c:a1:6c:d8:38:99:cc:
fe:4d:42:ee:53:fb:6f:ef:dc:24:4e:fa:d8:df:1d:7b:19:9a:
a7:81:01:3f:34:23:03:82:ab:aa:31:8c:36:ba:3b:a7:ef:2c:
11:a2:6a:09:a2:d8:44:18:60:5b:bd:9c:a3:6a:bd:0b:1d:7b:
c1:f4:20:08:9e:0b:b5:c5:e3:43:0f:b1:d9:3d:82:8b:8f:8d:
0b:3f:9c:64:b9:67:53:e8:c8:d0:af:7d:6b:f7:23:ff:b2:1d:
43:fa:a3:8b:aa:60:7e:1a:6b:35:94:52:98:d3:2c:fa:24:66:
bc:ba:18:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org