Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ISHISH/NNSY5rQ6vinXiSRO6GxApI03oU4.roa
File: NNSY5rQ6vinXiSRO6GxApI03oU4.roa (raw, json)
Hash identifier: 8FFvpZY7NbqKzaoEk8pio9eMkm7sqFlrAXaJr32c6II=
Subject key identifier: 34:D4:98:E6:B4:3A:BE:29:D7:89:24:4E:E8:6C:40:A4:8D:37:A1:4E
Certificate issuer: /CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF
Certificate serial: 0182
Authority key identifier: 7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/NNSY5rQ6vinXiSRO6GxApI03oU4.roa
Signing time: Fri 01 Sep 2023 09:04:19 +0000
ROA not before: Fri 01 Sep 2023 09:04:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38047
IP address blocks: 103.182.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF
Validity
Not Before: Sep 1 09:04:19 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=34D498E6B43ABE29D789244EE86C40A48D37A14E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:1e:ac:97:4d:83:90:2d:f7:90:fe:b3:88:
2f:69:7f:b9:a2:db:ce:29:67:d9:56:69:84:89:4a:
73:26:31:23:f8:5b:33:80:87:4e:5c:be:39:99:3c:
51:d0:ec:18:0e:36:bd:04:f9:d3:cb:47:5e:79:00:
b6:3d:86:da:62:ea:2b:86:ab:2d:79:2b:27:2a:9a:
0b:43:8f:e3:75:a7:2e:47:28:29:e1:b4:9f:38:d2:
cf:73:70:09:42:9d:4e:6f:bf:06:04:fc:b8:86:3b:
51:7e:54:a5:2d:23:11:d6:f5:43:eb:57:de:0c:35:
56:69:95:86:dd:bb:1c:55:9b:17:36:b4:ea:ff:a6:
21:37:ee:52:5c:3b:40:0a:27:74:51:f2:a0:36:71:
a4:7a:87:ef:4a:e6:3f:76:92:75:85:31:99:92:e3:
09:99:d6:c2:ad:81:ca:81:00:56:c0:47:e8:0f:6b:
50:2a:d2:bc:f3:ed:f8:ed:8d:71:28:b3:91:f8:e7:
b0:5c:cf:46:da:7e:3e:bd:19:76:3f:4f:b4:15:6a:
3b:2c:e0:fd:67:2f:a4:5f:a5:a9:f1:d3:a1:f9:71:
8f:9b:d1:b5:58:d7:ba:16:ae:fa:d3:08:1b:03:af:
bf:3b:50:8e:b9:f8:22:66:66:3d:af:38:91:4e:09:
47:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D4:98:E6:B4:3A:BE:29:D7:89:24:4E:E8:6C:40:A4:8D:37:A1:4E
X509v3 Authority Key Identifier:
keyid:7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/NNSY5rQ6vinXiSRO6GxApI03oU4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.182.227.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ab:60:09:35:a3:ab:1c:c8:41:09:d5:1f:bb:17:09:21:c1:
5a:03:c8:ef:7f:cd:30:fd:35:d0:1a:04:b7:fc:0e:b9:7c:13:
16:6d:38:af:6d:3e:c8:24:a3:34:60:54:43:e8:cb:ca:02:7d:
5d:9a:14:8b:64:4b:b0:a2:62:a9:20:c3:04:15:2e:20:c6:22:
19:8b:9c:82:c5:e3:e5:e4:9a:e1:46:34:e7:dd:bd:a8:a4:3d:
b5:b9:70:a8:b4:0f:f1:cc:70:38:56:c9:75:4b:ca:45:68:bf:
c9:b2:a7:35:ea:2b:17:40:81:20:a0:cb:2c:34:a8:be:2b:28:
00:22:c2:68:da:a8:cd:64:50:e8:41:26:20:9d:bb:50:28:14:
14:52:a0:05:97:2d:9a:0a:f8:fe:df:d1:16:c0:9c:e7:c0:e2:
1d:24:99:a8:9a:ca:48:ee:bc:3f:3c:51:34:56:17:be:69:23:
01:61:2e:44:1d:b4:df:a5:eb:a2:8f:c1:54:5b:28:3e:62:6a:
41:26:28:81:8f:2e:fc:15:64:29:ee:b6:74:28:6a:ca:55:03:
e3:c4:5f:18:15:82:4b:66:8b:d0:78:15:04:8d:6c:f2:8b:7a:
2b:07:35:c4:88:1c:99:05:1d:b5:8f:c9:56:cb:dc:02:18:23:
06:8b:db:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org