Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HWACOM/v7YpWWI2Ih_T1rbFkkhnlb04wuc.roa
File: v7YpWWI2Ih_T1rbFkkhnlb04wuc.roa (raw, json)
Hash identifier: zbX2iojj9+R64MdcntfPfWb0K66QZMpYzCy30vpzxLc=
Subject key identifier: BF:B6:29:59:62:36:22:1F:D3:D6:B6:C5:92:48:67:95:BD:38:C2:E7
Certificate issuer: /CN=D39A02AE150862D15FB727C511B104D63EFB4686
Certificate serial: 10FA
Authority key identifier: D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/v7YpWWI2Ih_T1rbFkkhnlb04wuc.roa
Signing time: Fri 01 Sep 2023 09:01:00 +0000
ROA not before: Fri 01 Sep 2023 09:01:00 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 63199
IP address blocks: 103.124.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4346 (0x10fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D39A02AE150862D15FB727C511B104D63EFB4686
Validity
Not Before: Sep 1 09:01:00 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=BFB629596236221FD3D6B6C592486795BD38C2E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:f0:6b:d6:22:14:1a:63:a5:b1:41:3b:89:
a3:c0:34:4f:94:34:0d:30:0f:93:51:92:51:a7:f5:
e1:f3:df:99:18:c2:06:e7:fb:3e:67:8a:66:ab:34:
03:66:16:21:fe:16:a9:d9:43:52:ce:af:60:05:e5:
2c:d8:e3:d2:e5:a4:d2:f3:5e:55:94:40:ed:0b:2e:
86:06:f5:f7:6d:38:f1:87:6f:b7:c2:cf:29:66:14:
5a:c5:c4:48:08:f4:94:74:f0:ed:e0:a7:96:60:04:
ad:9a:92:5a:bd:2f:5d:f7:e4:e0:fd:72:7a:50:ce:
78:fb:70:89:c8:62:4d:fd:f6:99:83:fa:16:22:a9:
46:a5:01:6b:53:fc:21:24:a5:6a:82:30:9d:71:b9:
0e:52:4e:d9:f4:ba:10:c4:35:4b:0c:58:58:af:0e:
34:6f:6c:7b:18:f0:c0:87:4e:1b:75:b4:58:08:f9:
ff:ae:5c:97:07:7b:1c:67:cb:d2:7f:4b:7a:42:6e:
7f:5d:ee:fa:1f:0c:e5:ff:b7:a6:3b:8b:5e:cf:98:
27:f2:a2:dd:d3:72:9f:d3:62:5f:5f:34:2e:53:44:
e5:1a:4b:a7:b1:e3:3f:d1:a5:88:31:94:01:df:5c:
54:f5:12:91:35:2f:64:3b:d0:ea:0b:e0:b4:ab:0c:
95:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B6:29:59:62:36:22:1F:D3:D6:B6:C5:92:48:67:95:BD:38:C2:E7
X509v3 Authority Key Identifier:
keyid:D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/05oCrhUIYtFftyfFEbEE1j77RoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/v7YpWWI2Ih_T1rbFkkhnlb04wuc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.124.149.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ed:ae:4c:a0:81:f0:f2:ac:4d:72:1b:86:61:83:9f:04:1b:
a4:bf:d0:f0:6f:7b:70:ff:08:6a:f4:67:c9:fb:ae:a9:51:4d:
63:c7:f2:c8:fa:4e:6c:6b:fc:f2:a5:b9:ec:75:dc:2c:2f:44:
7f:01:df:9d:8a:7e:c3:9e:f5:3c:ac:83:bc:d5:07:22:ea:c3:
0d:05:c8:02:a0:e3:f4:00:de:1c:dc:06:00:4f:c2:61:af:d7:
65:8e:2e:44:4b:98:7c:43:d1:0e:9a:f6:48:87:28:3e:e7:5f:
1e:b9:dc:a8:74:b4:47:eb:2a:36:e2:7e:8d:40:5b:ef:72:4d:
50:9a:0e:0d:08:04:4a:1e:37:05:47:b1:50:de:03:a2:b5:cf:
b0:03:45:15:20:3a:7b:fe:ad:76:d6:0d:83:c0:e0:7f:43:66:
c0:da:50:7d:05:e8:c5:46:d5:54:29:f2:ed:73:09:c7:44:eb:
16:ba:b6:84:98:d2:58:8f:7b:9d:53:f3:ff:78:e1:66:5d:e5:
e7:bf:4e:ef:8b:12:fc:6b:44:cc:02:9e:c6:cd:47:ed:1b:97:
3e:09:c8:38:1b:fd:ff:7b:2d:60:e2:b8:fd:13:ab:16:6e:9d:
00:3b:03:79:78:27:61:71:72:28:7f:29:0b:2f:aa:98:02:7b:
23:9f:ee:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org