Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LEEMON/Hh516Y0Qn7gl0UNmU4xtkzLlEuI.roa
File: Hh516Y0Qn7gl0UNmU4xtkzLlEuI.roa (raw, json)
Hash identifier: nQ3hSIQcyUBt63WEB8PTMHGvxGrDKSZfGCC2qShaG0o=
Subject key identifier: 1E:1E:75:E9:8D:10:9F:B8:25:D1:43:66:53:8C:6D:93:32:E5:12:E2
Certificate issuer: /CN=0486F1D511D2C22EC95994B123B3A24962C1E327
Certificate serial: B8
Authority key identifier: 04:86:F1:D5:11:D2:C2:2E:C9:59:94:B1:23:B3:A2:49:62:C1:E3:27
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BIbx1RHSwi7JWZSxI7OiSWLB4yc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/Hh516Y0Qn7gl0UNmU4xtkzLlEuI.roa
Signing time: Sat 14 Oct 2023 13:10:10 +0000
ROA not before: Sat 14 Oct 2023 13:10:10 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131659
IP address blocks: 103.67.160.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0486F1D511D2C22EC95994B123B3A24962C1E327
Validity
Not Before: Oct 14 13:10:10 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1E1E75E98D109FB825D14366538C6D9332E512E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0c:a4:c8:cd:df:46:c5:52:06:2a:70:1c:a6:
1a:ef:e4:7c:27:02:4c:14:2c:aa:a9:f4:eb:4a:fe:
ac:34:bc:2e:56:05:1f:a2:73:b6:0b:e1:c6:04:92:
48:61:5f:44:26:c4:23:de:76:db:09:34:1b:f7:4a:
74:6c:ce:ed:59:47:66:a1:dc:cd:46:c8:08:20:6e:
8a:2b:59:09:df:90:94:fd:fb:8c:3f:b5:cd:2a:bf:
78:99:8b:07:0f:c2:9d:1c:0d:df:49:61:97:07:ba:
69:8f:04:02:f1:7f:b4:ff:eb:48:ed:28:de:fb:81:
08:52:58:6d:07:d0:43:21:92:7a:c4:22:f1:06:be:
f3:9d:50:91:50:76:d9:07:2d:5a:2a:56:33:01:73:
67:ff:84:c9:73:03:0b:86:ca:eb:a4:09:00:7e:27:
cb:f1:de:66:50:f6:80:83:68:b6:f6:5c:bb:ca:92:
82:bf:2c:fc:48:63:73:0b:44:0b:f3:58:29:4c:75:
b3:c2:d1:f1:00:2d:1a:5b:53:32:68:5c:53:9d:51:
21:f0:46:f4:1e:ea:39:0a:c3:72:a3:2c:ed:9a:7f:
50:7b:6f:95:f7:7d:f0:6c:dd:19:89:9f:fe:df:3d:
c3:ad:ea:77:52:9a:86:27:e1:f2:c2:38:55:c9:24:
c2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1E:75:E9:8D:10:9F:B8:25:D1:43:66:53:8C:6D:93:32:E5:12:E2
X509v3 Authority Key Identifier:
keyid:04:86:F1:D5:11:D2:C2:2E:C9:59:94:B1:23:B3:A2:49:62:C1:E3:27
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/BIbx1RHSwi7JWZSxI7OiSWLB4yc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BIbx1RHSwi7JWZSxI7OiSWLB4yc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/Hh516Y0Qn7gl0UNmU4xtkzLlEuI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.67.160.0/23
Signature Algorithm: sha256WithRSAEncryption
40:7f:9a:14:1b:53:0a:2f:70:9b:85:99:d4:5b:c0:38:b2:fd:
6b:35:fa:da:af:d5:58:69:b1:80:07:1b:35:09:47:65:29:50:
15:b9:3c:ef:30:40:a0:d7:e9:98:de:50:a7:ad:36:ec:b4:c0:
f0:82:77:d9:68:e3:16:96:7a:84:e5:18:1e:62:6f:8a:1a:6c:
29:3d:70:b8:d3:8e:7b:97:68:4e:7f:d1:32:8f:33:a7:40:19:
d1:6e:bf:ac:99:34:d3:2f:6b:96:e5:ca:69:a7:15:cd:50:77:
93:e6:f9:c6:e1:30:48:a4:4b:e6:55:62:d0:af:e9:b6:d4:33:
17:01:cd:c4:23:36:46:a1:1d:43:80:e1:44:7d:c7:8d:3a:8c:
e1:82:e1:f2:3c:d2:1f:b4:c8:6a:ab:93:18:5b:23:3a:16:a6:
85:7b:b9:01:87:f9:62:80:d1:49:91:c5:d3:1e:75:bc:8c:e3:
ee:54:3c:17:4f:8a:6f:cd:49:c1:8f:21:b0:d9:f8:36:de:67:
80:c8:cb:3b:f9:6b:9d:2c:62:2d:36:04:27:ee:a1:fe:96:92:
ca:6d:7f:b0:18:38:bb:c0:ae:17:09:5c:22:07:48:0c:0d:d1:
d2:ce:5f:8d:4a:d9:bc:0d:f1:8c:84:e1:c8:73:c7:09:fd:04:
53:33:5c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org