Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKTSL/RWnHjrbuaIjwB94J_eZONcsTiEA.roa
File: RWnHjrbuaIjwB94J_eZONcsTiEA.roa (raw, json)
Hash identifier: ggBt2Oq9APPC3Qp4tjUpFGp3fb9kguL4aAm0V6sh1+s=
Subject key identifier: 45:69:C7:8E:B6:EE:68:88:F0:07:DE:09:FD:E6:4E:35:CB:13:88:40
Certificate issuer: /CN=90EE69984840D1E0325E8C013DFFB7B2841047E4
Certificate serial: 0C35
Authority key identifier: 90:EE:69:98:48:40:D1:E0:32:5E:8C:01:3D:FF:B7:B2:84:10:47:E4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/kO5pmEhA0eAyXowBPf-3soQQR-Q.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKTSL/RWnHjrbuaIjwB94J_eZONcsTiEA.roa
Signing time: Fri 01 Sep 2023 09:15:10 +0000
ROA not before: Fri 01 Sep 2023 09:15:10 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131645
IP address blocks: 103.142.44.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3125 (0xc35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90EE69984840D1E0325E8C013DFFB7B2841047E4
Validity
Not Before: Sep 1 09:15:10 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4569C78EB6EE6888F007DE09FDE64E35CB138840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:e1:44:37:d6:0a:34:81:74:71:07:68:07:
11:3f:ea:86:f5:e3:f4:3c:cc:a7:87:da:29:98:3d:
b9:69:29:55:28:5c:63:33:b1:51:c9:09:3a:53:9a:
04:2e:c5:df:a1:2f:e8:d6:f7:b3:cc:30:83:42:cd:
48:3f:ce:f0:34:22:87:1a:c8:6e:8b:78:56:e7:7c:
56:12:3a:90:6b:5f:05:d8:74:23:f6:5a:8f:77:3a:
ed:dd:ac:8e:b3:6f:6d:46:9a:74:eb:15:0c:23:d9:
9c:08:db:7c:d7:16:78:a1:11:2d:fd:cf:eb:e7:22:
97:d7:8c:1a:8d:83:b1:0d:16:e5:07:94:d0:4d:e7:
97:20:58:08:d1:d8:4b:09:b9:f5:bd:e2:8a:91:77:
00:c7:8a:73:8f:cb:a5:6f:2f:4e:9f:e3:76:cb:d7:
94:c6:11:da:ee:f3:6e:91:df:3c:5d:4a:6c:e8:13:
78:61:11:0d:f3:5a:27:4f:ae:b5:77:d8:b5:65:e4:
54:64:d8:b9:ff:b7:05:61:ce:f3:6a:16:c7:55:7c:
d2:28:ad:ac:3f:29:81:9a:1b:0b:de:71:28:55:b2:
de:71:fe:bd:59:7e:7c:53:df:92:f6:85:64:fb:85:
e3:a2:66:e7:83:67:7e:9d:98:d8:06:2c:5a:12:29:
7e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:69:C7:8E:B6:EE:68:88:F0:07:DE:09:FD:E6:4E:35:CB:13:88:40
X509v3 Authority Key Identifier:
keyid:90:EE:69:98:48:40:D1:E0:32:5E:8C:01:3D:FF:B7:B2:84:10:47:E4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKTSL/kO5pmEhA0eAyXowBPf-3soQQR-Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kO5pmEhA0eAyXowBPf-3soQQR-Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKTSL/RWnHjrbuaIjwB94J_eZONcsTiEA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.44.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:ba:26:7e:79:71:9e:7a:c8:5d:0a:97:f8:89:76:eb:a6:46:
b9:a9:b9:07:54:27:ab:9a:98:22:f0:88:8b:b8:f7:7e:af:1f:
6d:2a:78:1f:16:d0:8d:f9:bb:57:e2:a7:17:14:0a:c0:5d:5c:
9f:76:8d:f8:6b:7a:8d:bb:27:87:99:ae:69:47:a1:82:a8:81:
ea:ab:b8:19:26:17:ea:e6:e3:71:25:db:57:fb:48:43:04:bb:
75:78:5d:29:a5:37:93:ee:4d:c7:c1:22:c6:92:10:17:91:d8:
49:20:9f:8a:d8:d7:ec:16:24:e6:ca:ec:60:5a:56:42:0d:b3:
b3:48:3d:1f:76:68:24:c5:9b:62:77:95:45:82:1f:81:de:b8:
5d:05:cd:41:22:7f:82:fd:be:7a:11:0f:ba:98:89:f3:22:f3:
77:e4:04:20:a4:14:d3:f6:67:33:33:40:16:e2:cc:bc:36:46:
71:33:73:41:33:11:1b:73:3f:8e:33:e3:9c:e9:2a:20:8e:56:
66:01:8b:cf:ce:9e:a0:38:ff:20:ad:cd:0e:4e:3a:27:7e:f3:
3e:fb:07:6e:50:52:5e:3e:68:1f:dc:0e:f0:13:37:69:21:44:
11:65:8c:ea:12:03:f1:9f:e7:9c:d2:4c:68:94:03:af:33:5b:
c6:dd:e1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org