Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LEEMON/BQw82WLNJFzBs-IYPVegF70V9k0.roa
File: BQw82WLNJFzBs-IYPVegF70V9k0.roa (raw, json)
Hash identifier: HdnpK1q9ssEbelslEHKI+1i4N6ENDINVp1pVqI9IOpM=
Subject key identifier: 05:0C:3C:D9:62:CD:24:5C:C1:B3:E2:18:3D:57:A0:17:BD:15:F6:4D
Certificate issuer: /CN=0486F1D511D2C22EC95994B123B3A24962C1E327
Certificate serial: EC
Authority key identifier: 04:86:F1:D5:11:D2:C2:2E:C9:59:94:B1:23:B3:A2:49:62:C1:E3:27
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BIbx1RHSwi7JWZSxI7OiSWLB4yc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/BQw82WLNJFzBs-IYPVegF70V9k0.roa
Signing time: Thu 28 Dec 2023 15:30:55 +0000
ROA not before: Thu 28 Dec 2023 15:30:55 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9915
IP address blocks: 103.67.160.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0486F1D511D2C22EC95994B123B3A24962C1E327
Validity
Not Before: Dec 28 15:30:55 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=050C3CD962CD245CC1B3E2183D57A017BD15F64D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:19:12:f0:18:48:96:fe:a9:60:e3:16:e8:
8f:a4:03:51:70:b7:48:c5:14:44:eb:b2:7d:c9:3f:
28:87:47:a9:36:41:ab:73:ce:07:96:22:76:70:61:
e1:75:ff:97:0f:7b:bb:52:0c:07:71:15:a5:d9:5b:
9f:64:91:b6:d9:11:02:9e:94:e2:19:91:3e:24:a0:
7b:db:3b:71:63:8c:4b:c7:df:08:05:5b:ba:c6:94:
06:76:d8:1b:80:b5:be:d7:b3:6a:f0:c2:a6:f5:8e:
80:e9:b7:c0:93:1d:31:ee:fe:8f:54:9b:68:54:fc:
c5:7c:99:4d:93:da:79:be:eb:2a:84:be:b5:45:1e:
1e:b6:60:52:1c:65:60:82:4d:2e:97:37:26:e5:c1:
0f:35:22:f7:ea:f3:17:18:35:d5:9d:ee:c5:26:1e:
77:46:26:22:7f:dc:1b:8b:b1:37:ac:f2:8d:cc:35:
d2:a7:5a:50:6a:47:ed:8d:17:af:a3:29:71:3d:1e:
45:c8:56:ab:2e:fb:59:44:40:c4:18:4f:0d:d1:07:
15:e8:77:9e:5e:2f:13:74:97:50:91:f6:1e:29:43:
88:7c:60:6b:76:0b:7c:7e:6b:1b:84:b5:59:2a:df:
48:1b:6a:21:5a:4e:d8:3f:be:5a:e3:11:f7:d4:1e:
69:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0C:3C:D9:62:CD:24:5C:C1:B3:E2:18:3D:57:A0:17:BD:15:F6:4D
X509v3 Authority Key Identifier:
keyid:04:86:F1:D5:11:D2:C2:2E:C9:59:94:B1:23:B3:A2:49:62:C1:E3:27
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/BIbx1RHSwi7JWZSxI7OiSWLB4yc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BIbx1RHSwi7JWZSxI7OiSWLB4yc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/BQw82WLNJFzBs-IYPVegF70V9k0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.67.160.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:37:65:bf:e1:2d:1d:8f:d6:3a:c6:fe:d4:37:9b:24:62:ed:
5f:39:52:0f:17:9a:e6:2a:3c:39:a0:ea:93:72:cf:62:f0:20:
44:a0:0d:b6:54:d5:36:33:35:b6:4d:6b:32:57:95:3c:57:04:
93:86:f8:1c:ad:b9:04:a0:83:c0:ed:5a:c0:3e:42:38:22:16:
97:b1:ee:1e:73:0a:90:8d:5b:f5:47:07:9c:80:9f:0c:75:a7:
5c:54:19:b6:e4:8e:13:30:52:4f:18:06:3f:c9:e1:73:a2:72:
0a:33:0c:4b:a4:8f:d6:40:86:b7:6c:eb:65:7d:47:00:07:4c:
bb:c8:88:53:08:ba:fc:b2:66:51:46:cb:ed:46:c7:16:7c:8a:
9a:20:7f:d4:95:be:54:9b:17:f8:0a:41:f0:4a:bc:23:f7:47:
6e:db:58:c4:a1:2e:6e:99:6a:2e:c6:b6:07:23:27:d0:b3:bb:
13:3d:ec:7c:33:f2:c8:31:8a:e2:55:c0:53:31:18:85:b8:eb:
d0:73:45:cc:fa:f3:26:9d:fe:59:32:e8:81:df:e6:ec:d9:b9:
99:77:d4:e8:8e:db:aa:94:4a:b3:78:26:b6:e0:37:3e:9e:a9:
f5:ed:54:c9:81:7d:e9:a1:1b:e7:11:a9:be:a2:f1:b1:3c:90:
6a:c5:83:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:21 2024 by rpki-client on console-fra.rpki-client.org