Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/wpe4M4LwX8ekl5TYj8R20arfRd4.roa
File: wpe4M4LwX8ekl5TYj8R20arfRd4.roa (raw, json)
Hash identifier: C9WgN2C+jkvKzxTXHtdT3RwNOapLivio7tHRc3SdTbI=
Subject key identifier: C2:97:B8:33:82:F0:5F:C7:A4:97:94:D8:8F:C4:76:D1:AA:DF:45:DE
Certificate issuer: /CN=27109AE250EF2ECAF79BF4890F0D6CBE5E2D7CC6
Certificate serial: 0DA8
Authority key identifier: 27:10:9A:E2:50:EF:2E:CA:F7:9B:F4:89:0F:0D:6C:BE:5E:2D:7C:C6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JxCa4lDvLsr3m_SJDw1svl4tfMY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/wpe4M4LwX8ekl5TYj8R20arfRd4.roa
Signing time: Fri 01 Sep 2023 09:15:22 +0000
ROA not before: Fri 01 Sep 2023 09:15:22 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17502
IP address blocks: 103.136.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3496 (0xda8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27109AE250EF2ECAF79BF4890F0D6CBE5E2D7CC6
Validity
Not Before: Sep 1 09:15:22 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C297B83382F05FC7A49794D88FC476D1AADF45DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b2:68:38:cc:10:5d:58:82:dc:41:25:50:ce:
9a:d2:cb:66:54:5f:0f:7b:cb:ad:a9:84:6a:f1:31:
66:ef:44:fc:53:fb:42:b8:28:7e:49:fa:8d:ef:b6:
86:eb:5a:4f:34:18:1f:ed:7a:ba:a2:34:98:ff:10:
18:3b:97:2f:30:01:b2:78:1d:bd:26:92:af:03:4e:
17:dc:a7:a3:61:c8:d6:53:6d:48:aa:5b:5c:57:b7:
33:26:15:a6:54:27:67:3b:44:fe:66:bc:79:66:c9:
ef:db:1f:cc:c9:ec:48:ed:19:a3:2d:a3:9c:32:70:
0a:94:5a:e9:de:fe:07:fc:e5:b0:3f:d3:0f:15:87:
8d:8b:49:a1:cc:6e:04:66:d2:cc:b0:51:65:5d:8a:
af:36:ea:97:73:7f:d7:bd:92:11:57:22:c2:2e:26:
2f:4e:83:cc:b1:91:d1:30:ae:6e:66:b0:11:54:a8:
00:72:82:51:fe:ff:6b:a4:5b:0e:b7:a7:68:5d:3d:
38:ab:57:e4:54:17:5c:7a:59:12:fe:09:1c:62:3c:
80:c9:b7:9d:eb:99:26:23:3b:c8:ec:e2:2d:2f:64:
5f:0a:ce:9c:85:18:84:c6:e2:f8:ba:40:99:86:27:
91:8c:43:ee:90:fe:8e:6d:9c:34:85:76:4b:6f:88:
c6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:97:B8:33:82:F0:5F:C7:A4:97:94:D8:8F:C4:76:D1:AA:DF:45:DE
X509v3 Authority Key Identifier:
keyid:27:10:9A:E2:50:EF:2E:CA:F7:9B:F4:89:0F:0D:6C:BE:5E:2D:7C:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/JxCa4lDvLsr3m_SJDw1svl4tfMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JxCa4lDvLsr3m_SJDw1svl4tfMY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KUANGSHIH/wpe4M4LwX8ekl5TYj8R20arfRd4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.210.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:37:ee:a2:73:72:2f:16:27:2c:ff:da:57:4b:99:d9:69:42:
d1:ed:f4:98:1d:46:38:86:60:3e:c7:88:3c:c2:0e:83:ae:ca:
09:13:6f:c4:2f:66:bb:15:de:f2:a8:ba:6c:09:9b:87:0b:a7:
57:2a:94:3e:89:67:e4:26:b6:eb:4a:71:a1:0b:28:b0:42:51:
66:15:53:b3:49:09:40:33:64:f7:8e:16:57:82:cb:11:fc:34:
e7:0c:43:65:8d:65:b4:d1:e7:d1:f4:d3:24:f6:29:94:cf:ab:
43:f9:83:c0:11:22:d0:57:b6:f7:55:ef:8f:26:f3:e2:b3:53:
b5:a3:ce:4f:9d:1b:c7:f2:45:dd:60:6a:2a:47:a7:89:25:8f:
cb:bd:0a:41:11:fb:28:d6:b4:7d:9d:93:a9:e7:ce:88:4a:80:
65:29:ad:e7:06:c3:5a:a2:9b:b2:b2:ce:e7:9f:43:be:a1:22:
2a:4e:3d:2c:db:68:9e:fe:cf:83:1c:cb:2f:f3:47:7c:fe:96:
81:d6:fe:f5:42:96:41:5c:72:07:40:8a:86:9a:47:91:95:d6:
8a:a1:6e:ef:2c:26:eb:e6:86:1b:7b:a5:11:85:65:e1:21:80:
f7:70:75:bd:ec:c8:ae:90:f4:73:c5:43:93:bc:32:e3:4d:5f:
b0:5b:17:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org