Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HWACOM/x2h1u8ytSKksP9h7Am7L2S8qBO0.roa
File: x2h1u8ytSKksP9h7Am7L2S8qBO0.roa (raw, json)
Hash identifier: I/RNkauwWZrKS9E5AWOQFsIIVhxFHBdRWvmjM5R3mDI=
Subject key identifier: C7:68:75:BB:CC:AD:48:A9:2C:3F:D8:7B:02:6E:CB:D9:2F:2A:04:ED
Certificate issuer: /CN=D39A02AE150862D15FB727C511B104D63EFB4686
Certificate serial: 10FB
Authority key identifier: D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/x2h1u8ytSKksP9h7Am7L2S8qBO0.roa
Signing time: Fri 01 Sep 2023 09:01:00 +0000
ROA not before: Fri 01 Sep 2023 09:01:00 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131616
IP address blocks: 103.124.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4347 (0x10fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D39A02AE150862D15FB727C511B104D63EFB4686
Validity
Not Before: Sep 1 09:01:00 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C76875BBCCAD48A92C3FD87B026ECBD92F2A04ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:93:96:9c:a0:61:a8:d9:a7:4a:b7:bf:ba:85:
42:80:10:07:cc:ec:a6:66:62:5e:f2:aa:59:e0:7b:
77:4d:bc:bd:43:a7:e8:0e:1c:2b:64:fb:5d:c8:60:
2c:ff:01:54:6b:98:03:52:4a:cc:63:91:4d:41:68:
43:5b:63:82:99:4a:62:7e:ef:21:be:6d:5b:ea:dd:
76:50:05:72:60:16:73:89:79:6b:f8:de:01:23:cf:
1c:76:e4:16:ed:3f:96:be:99:86:b1:4e:8d:4a:f4:
a5:69:51:05:39:91:34:17:bd:7e:37:17:dc:6d:12:
a6:03:a4:35:10:7e:a8:d5:ac:04:e6:d5:55:e6:9f:
f9:d2:e5:c9:d9:94:55:53:91:7e:51:bb:9a:ab:dc:
0a:76:f1:a8:de:98:92:75:28:d8:ac:a0:4b:7c:43:
bc:9a:32:30:f1:0c:4a:a8:7c:05:53:1e:39:49:34:
36:55:07:f8:0a:5c:7d:90:db:16:82:3f:55:bf:0d:
75:5b:44:a5:ce:86:11:69:11:a2:17:96:06:65:6b:
9b:d5:15:0d:2c:f8:c9:4f:ff:14:9d:c4:6b:ec:d5:
1c:b7:88:60:2d:27:19:6a:77:b0:a9:cb:70:c4:d9:
40:d0:d6:cb:2c:4a:a1:42:27:a2:7b:1e:64:f8:38:
9c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:68:75:BB:CC:AD:48:A9:2C:3F:D8:7B:02:6E:CB:D9:2F:2A:04:ED
X509v3 Authority Key Identifier:
keyid:D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/05oCrhUIYtFftyfFEbEE1j77RoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/x2h1u8ytSKksP9h7Am7L2S8qBO0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.124.148.0/24
Signature Algorithm: sha256WithRSAEncryption
53:db:50:1c:f0:9c:e8:d6:71:56:48:9b:5d:3d:6a:ff:bb:7a:
3c:d7:b5:27:0d:ae:37:2d:e3:5d:f6:35:76:6a:21:d8:48:7c:
a8:13:b5:fe:8b:e5:dd:27:3b:6e:1e:cd:15:d2:79:15:46:6f:
17:42:6b:ef:e4:9e:5b:37:1a:7d:99:ee:b2:9b:69:87:61:ee:
7a:6d:be:a9:20:22:c4:e0:c0:b3:4f:8e:3e:d1:dc:fe:93:17:
e6:76:fb:8d:53:2a:2d:b6:46:d0:8a:5c:a0:c8:9f:cd:76:7c:
13:78:66:a3:f9:35:39:52:f1:7c:fa:70:6a:69:45:10:56:46:
4b:92:d7:b4:3e:88:fd:2d:ef:97:32:4a:7e:82:f2:23:13:c2:
88:07:48:84:fa:f1:b1:85:37:b8:d8:5a:18:61:81:3a:69:af:
29:d9:64:0d:86:7c:41:d5:4b:08:3d:f7:35:a6:c1:80:6d:66:
53:75:ca:2b:19:0a:c4:da:bb:1d:25:aa:3d:7e:9c:2a:df:2d:
2a:52:5c:55:ae:f9:b7:ed:f9:03:98:5d:cb:96:67:8a:32:c5:
9b:65:bd:03:53:46:38:6d:f9:8c:cb:c2:90:aa:c4:c2:a1:ae:
c2:df:73:2e:18:9d:e1:e5:ca:90:57:36:95:8f:8b:57:7a:e7:
21:dd:2e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org