Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/yTTHQdHXZTVSRZpGXqHbZDwkhaw.roa
File: yTTHQdHXZTVSRZpGXqHbZDwkhaw.roa (raw, json)
Hash identifier: e6YkG7gwGAA5t1Q5EYNLl1qtHNzTifjjnj57PBGpJmg=
Subject key identifier: C9:34:C7:41:D1:D7:65:35:52:45:9A:46:5E:A1:DB:64:3C:24:85:AC
Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Certificate serial: 0569
Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/yTTHQdHXZTVSRZpGXqHbZDwkhaw.roa
Signing time: Fri 01 Sep 2023 09:00:32 +0000
ROA not before: Fri 01 Sep 2023 09:00:32 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9678
IP address blocks: 103.98.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1385 (0x569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Validity
Not Before: Sep 1 09:00:32 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C934C741D1D7653552459A465EA1DB643C2485AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:47:87:df:75:78:70:75:a2:99:09:84:76:
36:48:60:16:8e:a0:82:9d:60:e6:50:bd:82:2e:f5:
9a:48:f0:49:28:d7:e5:16:9b:c5:ef:3a:c5:43:cc:
e3:a4:e4:c8:33:d7:ca:b2:bb:77:6a:21:d3:de:e4:
d7:37:6c:d1:e3:a6:b6:5d:fa:2d:7d:20:26:b5:30:
cd:a1:d8:4f:16:66:cf:c1:fa:d1:d8:60:30:aa:f8:
42:6d:35:d4:fd:c5:84:5c:b0:15:57:5a:19:32:3a:
e3:fe:f8:70:73:57:25:37:9d:81:91:5c:ee:b8:c9:
0a:72:89:ec:95:e8:bc:c5:f7:83:71:00:a6:5d:32:
f0:f0:01:33:bd:8c:4d:6e:d4:3f:1f:df:f7:31:ba:
27:10:8a:1c:8d:ec:88:c1:2e:5d:4f:39:c6:46:f9:
f0:a8:91:74:16:06:ad:5d:48:42:8e:1d:62:56:2c:
61:61:a7:81:8c:34:3d:6c:fa:d6:6d:e9:cd:d1:cb:
69:b8:0d:1f:56:21:71:78:2f:3f:d0:72:44:1d:52:
7e:61:61:bb:00:65:a2:24:45:c9:7b:fe:c4:3d:cd:
8b:55:10:9e:0f:f8:f1:19:f2:22:bf:aa:9d:7c:e8:
e4:68:c9:17:db:ee:4b:07:c7:15:9d:7d:6b:a7:3a:
d1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:34:C7:41:D1:D7:65:35:52:45:9A:46:5E:A1:DB:64:3C:24:85:AC
X509v3 Authority Key Identifier:
keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/yTTHQdHXZTVSRZpGXqHbZDwkhaw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.98.75.0/24
Signature Algorithm: sha256WithRSAEncryption
73:34:20:a5:ea:22:67:74:e0:99:6a:ad:dc:fe:05:1e:0c:e9:
92:fc:5b:9f:79:ed:4f:19:e1:f4:17:e2:f5:8a:5d:c3:da:30:
bb:99:95:2c:31:5c:5a:eb:d0:5a:ff:28:cc:e6:af:90:a0:58:
b2:3f:60:3b:67:e1:17:1a:24:06:d8:48:28:3d:43:84:6b:f5:
fe:2c:21:07:b5:85:75:b4:2c:6a:e0:80:0e:10:d7:2f:74:ca:
7d:09:70:14:cc:7b:b4:6e:e8:83:9e:10:31:41:a7:9b:c5:44:
d9:6e:a8:0c:7d:0c:ec:ad:c4:0e:08:f3:ec:57:81:e3:e1:29:
f4:27:73:f6:13:3d:95:30:ed:80:61:2f:d2:e9:28:a1:7c:ba:
d7:1d:2d:18:d3:7d:29:3e:bc:3d:94:c2:a4:a0:57:05:36:2c:
3b:40:a7:39:26:e9:16:24:01:d1:b4:27:a3:e8:60:1b:e6:c8:
e8:b4:93:5a:c9:c2:0b:93:15:5f:b9:99:5c:2a:e7:12:3d:24:
bd:fd:ae:fd:11:dc:7e:2b:ef:49:9d:f6:48:e3:f9:c3:b2:fc:
3e:c6:38:8a:dd:66:25:9f:4d:e0:7d:68:69:11:43:8d:8d:80:
08:ed:19:7e:9b:0c:e3:29:f4:da:f6:33:0b:5b:1a:ea:10:60:
24:c5:c3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org