Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/TR3H_rwL053wtQdFdOOMDKkoYFs.roa
File: TR3H_rwL053wtQdFdOOMDKkoYFs.roa (raw, json)
Hash identifier: PAiIHzcQFYz0on8BSiYwxB1j2m8BPAdrmv93ZZmoshk=
Subject key identifier: 4D:1D:C7:FE:BC:0B:D3:9D:F0:B5:07:45:74:E3:8C:0C:A9:28:60:5B
Certificate issuer: /CN=EDC0457A140B2D436CE7FAE67D8491CFFC6E7F3E
Certificate serial: 0AE6
Authority key identifier: ED:C0:45:7A:14:0B:2D:43:6C:E7:FA:E6:7D:84:91:CF:FC:6E:7F:3E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7cBFehQLLUNs5_rmfYSRz_xufz4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/TR3H_rwL053wtQdFdOOMDKkoYFs.roa
Signing time: Fri 01 Sep 2023 09:16:02 +0000
ROA not before: Fri 01 Sep 2023 09:16:02 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9676
IP address blocks: 103.123.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2790 (0xae6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDC0457A140B2D436CE7FAE67D8491CFFC6E7F3E
Validity
Not Before: Sep 1 09:16:02 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4D1DC7FEBC0BD39DF0B5074574E38C0CA928605B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:a6:7f:fe:de:b2:64:70:1d:d8:60:5d:38:42:
a0:47:eb:62:0f:b3:59:73:c3:9a:75:fa:da:1b:84:
e8:96:02:8a:ad:d9:89:8b:8b:a1:a2:5e:63:9e:62:
62:1e:1b:8a:b5:01:53:1c:8b:ca:ac:bd:32:d1:12:
06:af:3f:70:c8:1b:92:e2:95:5e:c8:42:a8:3c:6f:
df:dc:c2:2b:35:8e:a8:50:88:d6:80:20:24:1d:0f:
04:c1:70:1f:49:3c:ba:e6:94:13:22:83:22:7d:01:
ec:95:ba:ff:36:a4:55:37:a0:89:df:1f:9e:46:dd:
f9:d8:33:f6:c5:ee:b8:e8:50:ef:51:a6:4e:a3:23:
f4:74:97:c2:5b:de:af:5c:29:64:b5:fc:56:90:2c:
67:67:3d:87:91:96:4a:4e:73:67:95:cd:c1:8c:ff:
07:e9:3d:61:a2:e5:e9:4f:fc:2c:ad:6d:72:8e:ad:
9b:d6:dd:34:66:62:5f:eb:5a:8f:a9:cb:b5:d5:78:
c6:da:e5:2d:3d:a1:82:3b:e7:53:d6:a9:f2:6b:be:
4d:92:6f:40:50:a7:f4:d1:75:79:46:f6:97:c3:5d:
15:e4:4e:db:c9:86:68:ae:bb:0c:b0:a2:94:40:ea:
c6:33:9a:77:ca:38:1d:40:26:ea:1b:e8:67:8c:4b:
d7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1D:C7:FE:BC:0B:D3:9D:F0:B5:07:45:74:E3:8C:0C:A9:28:60:5B
X509v3 Authority Key Identifier:
keyid:ED:C0:45:7A:14:0B:2D:43:6C:E7:FA:E6:7D:84:91:CF:FC:6E:7F:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/7cBFehQLLUNs5_rmfYSRz_xufz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7cBFehQLLUNs5_rmfYSRz_xufz4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/TR3H_rwL053wtQdFdOOMDKkoYFs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.1.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:a1:56:1b:f5:a0:78:7d:65:8f:e7:61:d9:c3:e4:24:22:8f:
42:e2:36:ec:4d:95:e2:bf:75:f3:8c:ab:9f:b9:05:b3:7d:2c:
cb:32:aa:2d:27:39:aa:a1:c6:0d:52:36:85:08:a1:cd:34:d6:
9f:67:68:ef:e6:47:22:a9:33:3a:d8:e1:a3:4d:af:dd:37:2b:
f8:ad:f3:cc:88:29:c3:82:ae:62:9d:af:9e:bc:fa:32:df:f3:
2b:1c:12:84:89:bd:99:bf:a2:95:47:d3:72:df:17:a1:c7:79:
fc:7a:02:3b:b5:8d:92:3f:22:4a:86:be:5a:2a:5d:26:38:ea:
b6:1e:cd:3c:10:30:af:38:c0:dd:4e:ef:82:78:03:cc:5d:f1:
f8:01:8e:7b:d5:32:43:0f:27:79:31:0f:ab:b6:20:18:13:3b:
9d:d0:4a:94:28:2f:00:f4:f0:e8:c2:bd:18:5d:a0:ce:3c:09:
cc:2e:cd:7b:a4:04:08:72:f7:3b:cb:7c:63:6a:2d:86:e2:48:
4b:ac:b3:5c:23:de:74:81:55:eb:1d:a7:e6:57:97:53:fe:57:
c0:a1:d5:58:12:1d:0c:1e:a1:a0:89:a2:be:ba:0b:ff:98:5d:
1e:86:03:c5:e9:d4:e6:3c:fe:ec:01:e2:74:1a:f5:06:cb:e4:
6c:c7:91:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org