Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKTSL/5mzSvYTKsjDUAMH_G0ZS1XsBpQI.roa
File: 5mzSvYTKsjDUAMH_G0ZS1XsBpQI.roa (raw, json)
Hash identifier: Yp/Be3XVe9y/n+/MdKtOI+vYoAGYgG9u/5b4iIycDVk=
Subject key identifier: E6:6C:D2:BD:84:CA:B2:30:D4:00:C1:FF:1B:46:52:D5:7B:01:A5:02
Certificate issuer: /CN=90EE69984840D1E0325E8C013DFFB7B2841047E4
Certificate serial: 0B45
Authority key identifier: 90:EE:69:98:48:40:D1:E0:32:5E:8C:01:3D:FF:B7:B2:84:10:47:E4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/kO5pmEhA0eAyXowBPf-3soQQR-Q.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKTSL/5mzSvYTKsjDUAMH_G0ZS1XsBpQI.roa
Signing time: Thu 15 Sep 2022 02:38:14 +0000
ROA not before: Thu 15 Sep 2022 02:38:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131645
IP address blocks: 103.142.44.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2885 (0xb45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90EE69984840D1E0325E8C013DFFB7B2841047E4
Validity
Not Before: Sep 15 02:38:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E66CD2BD84CAB230D400C1FF1B4652D57B01A502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:6b:e1:ab:b8:f1:99:9e:ce:7e:86:68:58:
a2:46:28:70:ea:f7:7c:1c:da:4c:9a:ae:c0:e9:78:
60:23:45:bc:93:b5:00:82:d2:54:19:20:2c:b9:cc:
71:9c:0c:05:34:33:63:e3:27:c1:0b:11:78:30:4d:
ff:34:df:8e:65:30:c0:20:97:ed:b0:e7:e7:7c:01:
74:8b:66:36:e3:ad:db:1e:78:4d:79:eb:38:93:98:
75:50:ef:1c:e9:09:9b:57:23:82:d9:95:c5:15:8c:
16:2d:f7:06:f4:9f:75:35:0e:82:a3:14:f9:fb:5d:
95:92:36:7a:ad:f7:5a:a8:4a:12:c6:39:ae:61:ad:
f9:35:22:df:e1:f4:ea:5b:37:39:8f:1f:e2:b7:4e:
d8:f0:c4:83:bb:b8:ae:e5:4a:37:a3:36:f9:22:b0:
b4:f9:d2:17:e5:cc:a0:a6:be:a1:5f:42:4c:2c:8a:
38:d3:ec:7d:93:b1:e1:c1:62:a5:d9:a4:20:4c:0d:
d9:94:1c:ef:b7:c2:20:c8:43:ae:b5:3b:2d:06:74:
c6:bb:d4:ff:2e:c5:20:b7:2b:f7:2c:d8:ac:62:28:
71:9b:45:df:57:5b:45:be:65:52:10:58:99:58:12:
d7:90:90:9c:fb:4e:cf:7b:4d:b7:f2:42:24:39:66:
53:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6C:D2:BD:84:CA:B2:30:D4:00:C1:FF:1B:46:52:D5:7B:01:A5:02
X509v3 Authority Key Identifier:
keyid:90:EE:69:98:48:40:D1:E0:32:5E:8C:01:3D:FF:B7:B2:84:10:47:E4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKTSL/kO5pmEhA0eAyXowBPf-3soQQR-Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kO5pmEhA0eAyXowBPf-3soQQR-Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKTSL/5mzSvYTKsjDUAMH_G0ZS1XsBpQI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.44.0/23
Signature Algorithm: sha256WithRSAEncryption
89:79:60:e5:26:73:65:4a:d4:ac:13:f4:04:57:f2:8e:a5:46:
dd:d6:64:d8:2e:9b:4a:58:09:ae:9c:4b:f8:9e:86:81:32:fa:
99:3f:c4:c1:11:92:d6:8d:11:73:35:8e:b2:b5:9e:24:9c:37:
0c:1d:1d:1f:3e:db:35:fc:5c:7d:30:32:9f:14:1a:66:44:c5:
35:1b:9c:df:c5:40:84:bd:08:e6:0a:45:fa:0b:b5:3f:df:f5:
39:e3:bd:f4:00:b1:b8:ce:db:31:33:9e:8a:9b:3e:95:77:40:
3e:aa:75:1b:22:93:48:3c:45:96:42:c1:7e:ad:61:7d:ae:ba:
57:14:d3:46:5f:9e:db:6c:cb:96:13:88:ee:e9:2e:98:89:8c:
9a:c3:c8:c6:99:82:1b:fe:c5:d3:22:3d:17:97:1a:7f:ab:2f:
70:50:21:f4:b5:9f:03:3f:37:9f:3f:12:d7:f4:d8:83:73:5d:
1d:b4:45:cf:eb:51:35:2a:07:8b:c6:97:df:3a:2b:23:d6:55:
d8:eb:bc:c3:cb:26:50:f5:91:e3:d1:50:9f:c0:62:bc:e3:55:
84:ca:89:b7:76:23:7d:44:2f:e9:5d:8c:fe:4f:2b:97:93:1f:
37:fb:11:3f:f8:4a:7f:b9:53:7f:e7:f8:96:0b:68:34:0a:45:
5d:e3:dc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org