Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ISHISH/ZJF3iuFLVy81rvb6J5gioj8KvE8.roa
File: ZJF3iuFLVy81rvb6J5gioj8KvE8.roa (raw, json)
Hash identifier: RQ/ND2uj8ET3rIRUkX2HU1QSbrkK9LomwD4BbCXeiIM=
Subject key identifier: 64:91:77:8A:E1:4B:57:2F:35:AE:F6:FA:27:98:22:A2:3F:0A:BC:4F
Certificate issuer: /CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF
Certificate serial: 0184
Authority key identifier: 7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/ZJF3iuFLVy81rvb6J5gioj8KvE8.roa
Signing time: Fri 01 Sep 2023 09:04:19 +0000
ROA not before: Fri 01 Sep 2023 09:04:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38047
IP address blocks: 103.182.226.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF
Validity
Not Before: Sep 1 09:04:19 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6491778AE14B572F35AEF6FA279822A23F0ABC4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:e2:89:96:3a:4d:4c:53:91:a3:bb:fc:79:
35:af:7c:77:52:a9:24:5a:07:45:68:37:a8:d5:66:
d6:ac:2f:9f:95:bb:e3:b8:0f:e4:e4:6c:d0:00:2d:
9d:f4:75:73:f2:b9:01:fd:d1:c6:7a:06:5d:f8:8d:
2f:69:76:e9:09:61:c6:22:00:95:0c:f0:30:2a:a5:
2d:c7:3f:b5:c0:65:a3:bb:bb:59:cf:27:8a:5e:86:
64:28:34:10:64:af:16:a6:e6:a9:15:14:56:01:36:
26:a6:57:6f:06:fd:7b:78:73:eb:8d:44:e2:05:9f:
29:42:b1:59:81:7e:8a:d0:98:52:5d:d9:f3:e1:be:
18:ad:52:0e:93:c5:3a:2f:ef:f5:cf:55:21:c1:d7:
66:16:95:f7:ec:96:ce:b8:73:63:da:a5:1e:55:d8:
15:a7:5a:99:0b:6b:f6:94:a6:34:5d:e1:59:ac:2c:
77:dc:33:ac:76:5d:76:1b:59:7e:e4:4f:35:9b:8e:
61:d9:6d:cb:6d:6c:bc:e3:6b:47:c8:57:75:35:bd:
20:ba:ad:46:dc:a4:d5:1c:16:56:bd:b9:7b:7a:b6:
e1:11:75:38:64:20:94:d4:0b:ac:7c:8a:7e:ee:66:
a2:bd:b0:c8:4a:9f:0e:e7:a1:db:c8:e8:d5:a3:fa:
94:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:91:77:8A:E1:4B:57:2F:35:AE:F6:FA:27:98:22:A2:3F:0A:BC:4F
X509v3 Authority Key Identifier:
keyid:7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/ZJF3iuFLVy81rvb6J5gioj8KvE8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.182.226.0/23
Signature Algorithm: sha256WithRSAEncryption
32:29:6d:97:73:9a:90:9c:03:08:d9:42:55:c1:8a:14:6e:84:
1f:15:a3:ac:05:66:14:1b:3c:c5:e8:c3:cb:0c:a6:69:71:63:
dd:a5:84:61:59:92:eb:03:e0:fe:f9:10:85:d2:20:6c:02:c9:
2f:91:0c:77:99:76:5b:b3:89:d9:f8:e1:42:2f:ba:1d:6f:49:
b2:e1:38:fa:39:2e:b4:d3:83:5d:db:7a:98:9f:a7:55:cc:32:
8a:70:24:e1:ad:72:2e:7b:ae:b9:7c:d1:ae:aa:87:9e:bb:9d:
34:bd:02:b5:e9:81:89:f4:6c:a6:60:5b:80:7b:29:05:7b:80:
6c:b5:29:b9:bb:61:1d:40:13:55:93:3d:fd:a9:30:1a:94:14:
1b:09:28:90:7b:45:0b:8a:42:06:f7:a8:2c:5a:92:3d:b5:9a:
57:be:56:78:40:96:13:c8:f2:bb:a6:55:98:53:32:a2:b3:9c:
29:ef:13:68:54:5a:cb:0e:3b:2f:26:20:7e:41:09:10:9f:4a:
81:85:66:f3:31:de:57:5c:bb:98:e8:2d:f9:d4:be:37:41:90:
de:74:68:53:6f:d8:42:41:4a:49:32:0d:c2:1d:67:c4:c6:75:
aa:68:4b:56:71:e2:ff:5c:fd:30:e2:3f:e1:ca:87:dd:19:d7:
4c:65:b3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org