Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKIS/mSvjbD08yMTD1kionwzrIZW4AWM.roa
File: mSvjbD08yMTD1kionwzrIZW4AWM.roa (raw, json)
Hash identifier: GwBF9ewfqBoOh4qLjtVWpOqkdOVvVXSIFVc8htR8VWo=
Subject key identifier: 99:2B:E3:6C:3D:3C:C8:C4:C3:D6:48:A8:9F:0C:EB:21:95:B8:01:63
Certificate issuer: /CN=1FF0C43AE612FD57EAAC71DC208AEC4E56D2D665
Certificate serial: 0968
Authority key identifier: 1F:F0:C4:3A:E6:12:FD:57:EA:AC:71:DC:20:8A:EC:4E:56:D2:D6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/H_DEOuYS_VfqrHHcIIrsTlbS1mU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKIS/mSvjbD08yMTD1kionwzrIZW4AWM.roa
Signing time: Tue 29 Sep 2020 10:04:39 +0000
ROA not before: Tue 29 Sep 2020 10:04:39 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131652
IP address blocks: 103.139.92.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2408 (0x968)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FF0C43AE612FD57EAAC71DC208AEC4E56D2D665
Validity
Not Before: Sep 29 10:04:39 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=992BE36C3D3CC8C4C3D648A89F0CEB2195B80163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6c:3d:64:f8:e5:78:34:24:26:d1:c4:bd:4d:
73:f5:f6:61:10:8a:f2:ed:bd:6d:ea:ff:a5:1f:0c:
b6:02:a5:90:10:37:91:95:75:4d:0d:cc:bd:fd:e9:
63:7b:b6:a2:b9:6a:5c:87:60:da:9c:0a:ce:c4:8f:
01:8b:c5:1d:25:a9:d4:71:f3:4f:ac:ba:1f:bd:42:
04:b6:42:69:f5:bf:1f:01:99:43:0b:b1:1a:e7:c4:
dc:0f:1b:ee:a2:1d:2f:e7:27:dd:95:57:13:23:bc:
4b:3c:07:a1:56:8e:62:e8:80:73:c5:53:2c:fa:b7:
fd:12:20:f5:f6:41:02:5d:5b:30:f4:4c:7a:12:38:
9a:6c:e8:80:73:bc:c0:9b:95:87:d1:a0:be:0e:bd:
93:4f:1f:17:6c:54:05:63:33:26:07:10:b2:e8:ad:
61:99:cf:72:b6:bc:44:f2:c6:1e:46:c2:42:f7:17:
2e:20:51:8c:b2:ac:79:fc:9a:f8:99:89:94:79:51:
5b:37:5a:63:35:a0:ef:1a:d3:d0:e5:ed:bb:e1:c2:
6e:fd:7f:39:f9:b7:6e:db:e4:6d:05:68:0a:49:5a:
e7:89:a8:a9:63:86:98:90:97:f9:db:71:29:37:a4:
5a:01:90:c2:89:dd:f8:fd:d0:2d:a0:8c:21:22:f7:
51:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2B:E3:6C:3D:3C:C8:C4:C3:D6:48:A8:9F:0C:EB:21:95:B8:01:63
X509v3 Authority Key Identifier:
keyid:1F:F0:C4:3A:E6:12:FD:57:EA:AC:71:DC:20:8A:EC:4E:56:D2:D6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKIS/H_DEOuYS_VfqrHHcIIrsTlbS1mU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/H_DEOuYS_VfqrHHcIIrsTlbS1mU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKIS/mSvjbD08yMTD1kionwzrIZW4AWM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.92.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:f8:bb:65:c6:05:3c:b1:d2:09:52:16:c7:d7:f4:61:02:8e:
e4:5a:6c:41:ac:ec:ed:c6:44:50:da:cd:b3:d4:df:6b:74:12:
60:7f:1e:73:ed:19:8e:83:bc:03:61:b5:4a:89:f3:0c:bf:48:
53:c9:8a:24:b5:6b:f1:3e:cd:43:48:33:5c:ce:62:19:1b:ae:
da:49:7f:b9:49:af:88:12:4e:1a:39:e2:b2:77:bf:9d:23:c3:
0b:c1:25:15:c5:d8:f5:0d:1a:47:a4:b4:03:11:dc:ff:1b:62:
dd:55:ca:51:ad:ba:71:2d:2b:65:a3:10:c6:45:a9:5e:87:92:
af:b0:a6:a0:21:63:97:84:72:93:4d:2e:55:78:88:cd:61:c8:
4d:e6:62:ec:c5:20:7f:5f:60:f1:68:6d:0e:17:33:5b:82:ab:
77:23:5f:b6:c0:5e:20:01:dd:6f:99:83:bd:df:04:e9:53:cd:
28:4a:64:e9:2d:f2:63:d3:fd:70:26:1a:ec:a4:83:7a:b6:00:
ba:75:d5:9d:a2:13:16:ef:75:f8:08:02:96:11:c0:c6:7e:17:
80:64:73:2b:17:82:71:ff:3a:21:49:b2:ed:85:a0:6f:e7:cc:
2f:2f:44:14:6f:d5:1f:87:56:cb:df:2e:c2:1a:2e:55:f1:27:
ec:4c:bf:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org