Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/INFORICH/nny4tcz5gQBTTGJSx4oldkL8ly0.roa
File: nny4tcz5gQBTTGJSx4oldkL8ly0.roa (raw, json)
Hash identifier: UPLmLGkqlXl7vB+nyoZgFH2Eig9AraT9M8F1F0ctgTk=
Subject key identifier: 9E:7C:B8:B5:CC:F9:81:00:53:4C:62:52:C7:8A:25:76:42:FC:97:2D
Certificate issuer: /CN=9197E979AFBB1BEC2EFC2647207560561BE900B6
Certificate serial: 040C
Authority key identifier: 91:97:E9:79:AF:BB:1B:EC:2E:FC:26:47:20:75:60:56:1B:E9:00:B6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/kZfpea-7G-wu_CZHIHVgVhvpALY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/nny4tcz5gQBTTGJSx4oldkL8ly0.roa
Signing time: Fri 01 Sep 2023 09:04:05 +0000
ROA not before: Fri 01 Sep 2023 09:04:05 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131677
IP address blocks: 103.152.252.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1036 (0x40c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9197E979AFBB1BEC2EFC2647207560561BE900B6
Validity
Not Before: Sep 1 09:04:05 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9E7CB8B5CCF98100534C6252C78A257642FC972D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:30:06:ca:13:2a:cc:ea:5b:80:64:80:ba:
83:b2:02:56:7d:96:7d:36:16:c9:94:42:cd:44:c4:
01:15:67:cc:01:2d:c2:d1:52:d0:6e:05:41:a5:54:
7e:5d:b2:87:9e:33:76:34:35:54:0b:02:bc:22:37:
a1:85:8a:6d:c9:3e:43:86:f3:b7:29:e1:d1:ab:18:
3b:c0:92:39:e6:9e:f7:4f:1d:25:d0:11:f4:e7:69:
b0:f8:1d:0c:28:b5:94:2d:b6:6e:bc:03:54:f7:5e:
92:0e:9d:de:fc:ac:f2:f2:3d:56:49:64:30:52:c3:
f1:69:e5:95:f8:0d:ae:e8:a9:df:67:2b:7b:1b:ec:
86:87:bc:5d:c8:54:4e:8f:98:ce:b5:ab:40:50:b4:
37:62:0c:fc:54:0d:0c:91:8b:5c:c0:a4:3d:51:f3:
b1:35:03:56:b1:59:dd:b7:5c:54:2e:94:4a:d8:07:
5b:25:d4:cd:e3:39:8f:8b:1e:7a:47:90:70:f1:87:
fe:a5:51:5e:19:35:97:14:6e:8d:94:c6:6c:15:a2:
2f:3a:9d:72:e6:3a:94:a4:65:6c:b9:15:a4:43:7f:
57:52:95:53:85:9a:19:fb:13:e1:ca:67:90:ce:c9:
8b:7b:02:fa:ff:39:bb:ac:ab:30:5b:57:eb:84:88:
ed:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7C:B8:B5:CC:F9:81:00:53:4C:62:52:C7:8A:25:76:42:FC:97:2D
X509v3 Authority Key Identifier:
keyid:91:97:E9:79:AF:BB:1B:EC:2E:FC:26:47:20:75:60:56:1B:E9:00:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/kZfpea-7G-wu_CZHIHVgVhvpALY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kZfpea-7G-wu_CZHIHVgVhvpALY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/nny4tcz5gQBTTGJSx4oldkL8ly0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.252.0/23
Signature Algorithm: sha256WithRSAEncryption
98:61:d1:f6:9a:ee:16:67:9e:d5:79:cb:4c:3a:0f:2a:ec:92:
ce:4d:07:47:6d:8f:a8:42:be:c7:2b:92:5e:15:92:f8:2c:d9:
8b:67:c1:71:ff:43:e6:25:6c:71:13:f7:7f:4b:f8:a0:ed:e8:
27:7c:a1:ab:37:f4:19:73:ad:3c:b3:cc:05:63:6b:71:ba:67:
b7:12:4e:82:d0:21:60:43:18:6d:86:5f:4d:48:88:8b:d4:55:
a0:ff:1c:8e:e2:e1:70:5d:0b:16:4a:f6:fc:07:a7:3a:6b:70:
2e:80:3c:e1:a1:43:17:84:92:a1:b1:34:89:a8:88:39:51:ef:
61:6c:c8:67:50:6a:3d:f7:1a:c5:7e:53:9c:03:9b:c7:4c:30:
ae:48:f7:11:07:42:31:c6:2b:44:95:dc:c2:4f:5c:28:0b:fc:
df:48:3f:f4:66:24:2a:64:a1:56:46:dd:f6:0c:5e:ed:42:84:
dc:b7:54:12:8b:00:20:db:01:cf:9c:29:84:a2:e6:16:9e:71:
1c:57:f9:b9:39:10:b7:1d:41:65:57:99:a3:d1:51:5d:48:40:
4b:48:1b:32:a0:f1:65:03:5f:eb:60:4b:f9:f6:05:8d:cf:90:
0b:77:b4:c1:1b:d2:8e:42:86:c8:ce:6f:54:7e:0b:ec:ff:c2:
1c:6b:a0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org