Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/LBSFdp3DLJ8GcdTcdVq9GDTARec.roa
File: LBSFdp3DLJ8GcdTcdVq9GDTARec.roa (raw, json)
Hash identifier: XfM46iQIJwmhy4ewrTSPy0AfbCBRQrwkSyhM7IV5Msc=
Subject key identifier: 2C:14:85:76:9D:C3:2C:9F:06:71:D4:DC:75:5A:BD:18:34:C0:45:E7
Certificate issuer: /CN=27109AE250EF2ECAF79BF4890F0D6CBE5E2D7CC6
Certificate serial: 0DA9
Authority key identifier: 27:10:9A:E2:50:EF:2E:CA:F7:9B:F4:89:0F:0D:6C:BE:5E:2D:7C:C6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JxCa4lDvLsr3m_SJDw1svl4tfMY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/LBSFdp3DLJ8GcdTcdVq9GDTARec.roa
Signing time: Fri 01 Sep 2023 09:15:23 +0000
ROA not before: Fri 01 Sep 2023 09:15:23 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 134823
IP address blocks: 103.136.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3497 (0xda9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27109AE250EF2ECAF79BF4890F0D6CBE5E2D7CC6
Validity
Not Before: Sep 1 09:15:23 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2C1485769DC32C9F0671D4DC755ABD1834C045E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:03:3a:65:8e:02:24:6f:a9:ed:72:da:f2:85:
90:77:e6:42:2e:d4:79:2e:f2:17:6f:ba:e1:c8:d5:
42:5e:98:d7:43:34:94:3f:5f:d1:c1:4a:24:3c:9c:
38:58:b4:a9:08:83:cf:1f:cb:e1:07:11:bb:cd:eb:
6d:66:4a:e5:ed:b7:e5:03:2d:e3:f1:b3:cc:b7:d9:
45:4f:07:7c:4a:20:40:fe:79:d7:a6:39:86:ee:ed:
d4:ab:3e:0a:f1:32:36:48:8b:d2:e2:60:bb:9e:7b:
cf:d7:3e:38:5f:c3:04:b5:70:bb:32:f7:59:a2:ee:
0d:a9:86:3f:7b:39:2b:a8:d3:1b:bc:d6:d2:d9:a2:
36:6a:20:e5:a6:0f:4a:db:2e:86:aa:6b:7f:1d:d5:
b8:1b:81:00:cc:41:9b:44:e7:3d:69:0f:ff:0e:76:
65:df:49:75:8f:c2:37:ab:f9:d9:41:d0:ad:2a:c4:
13:96:14:38:df:f0:43:5d:f9:28:67:7a:56:cb:90:
f7:a8:8c:df:55:bf:02:c5:e0:6d:14:41:5f:c5:00:
f7:05:57:f7:c5:34:7e:ec:38:76:1e:1e:28:b2:57:
af:e7:e8:ff:87:6b:ff:59:66:da:9b:44:12:32:2c:
a5:89:d7:1c:d2:76:bf:e6:7b:36:f1:cb:f8:50:e3:
ef:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:14:85:76:9D:C3:2C:9F:06:71:D4:DC:75:5A:BD:18:34:C0:45:E7
X509v3 Authority Key Identifier:
keyid:27:10:9A:E2:50:EF:2E:CA:F7:9B:F4:89:0F:0D:6C:BE:5E:2D:7C:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/JxCa4lDvLsr3m_SJDw1svl4tfMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JxCa4lDvLsr3m_SJDw1svl4tfMY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/LBSFdp3DLJ8GcdTcdVq9GDTARec.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.210.0/23
Signature Algorithm: sha256WithRSAEncryption
71:51:a1:17:d4:e4:10:e4:92:a4:02:c6:73:e2:c0:4c:50:b1:
ad:4f:d0:27:40:a0:11:0f:70:ed:bf:27:52:4c:8c:3f:3e:6e:
dd:47:34:1d:34:e5:17:be:ae:61:42:04:fd:bd:84:69:62:ac:
3d:fe:1f:27:48:e8:48:e9:eb:2a:18:74:61:21:c3:6e:38:a1:
c4:b4:62:63:17:0c:75:16:36:a7:89:28:a6:ee:43:d4:d5:78:
57:90:50:95:e5:96:62:d1:8b:d4:6f:5e:8a:35:db:da:64:e1:
64:e8:a9:4e:1b:91:f9:df:b5:34:dc:ae:08:09:fb:b6:a6:9b:
bf:1c:40:ec:0e:9b:85:f9:47:07:61:12:37:d5:c3:ec:3a:71:
d5:14:80:3c:3e:49:ae:a8:d8:f0:a4:91:85:88:69:23:c7:e7:
a2:45:68:01:5e:09:9a:e6:4f:53:70:8e:76:aa:06:8b:82:23:
bf:5c:c3:bf:b9:bb:b4:66:9e:e0:6c:b2:45:7a:83:e5:af:1d:
2f:5e:44:e4:37:f1:bd:86:3a:22:2a:b0:a7:c9:ca:2a:ff:c6:
d3:c2:ec:3a:a1:83:3d:d1:64:46:9f:6d:72:bc:0d:35:f9:ed:
69:41:bd:4e:d9:0b:e0:c6:bb:32:4f:1e:77:ec:4f:73:f9:6a:
04:65:e8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:21 2024 by rpki-client on console-fra.rpki-client.org