Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LIBO/91YdhzpuudI-KqNQ90wG50BeinU.roa
File: 91YdhzpuudI-KqNQ90wG50BeinU.roa (raw, json)
Hash identifier: lTzXTwuAqwCnFc107gIM9qWcoyr7sLzau41omIsUeeY=
Subject key identifier: F7:56:1D:87:3A:6E:B9:D2:3E:2A:A3:50:F7:4C:06:E7:40:5E:8A:75
Certificate issuer: /CN=6D0EDF410C499A7FC419BB4BB09219673E74614B
Certificate serial: EE
Authority key identifier: 6D:0E:DF:41:0C:49:9A:7F:C4:19:BB:4B:B0:92:19:67:3E:74:61:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bQ7fQQxJmn_EGbtLsJIZZz50YUs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LIBO/91YdhzpuudI-KqNQ90wG50BeinU.roa
Signing time: Thu 27 Jun 2024 02:02:40 +0000
ROA not before: Thu 27 Jun 2024 02:02:40 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131149
IP address blocks: 103.237.48.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D0EDF410C499A7FC419BB4BB09219673E74614B
Validity
Not Before: Jun 27 02:02:40 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F7561D873A6EB9D23E2AA350F74C06E7405E8A75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:78:f2:8d:19:4f:81:4a:21:12:24:56:1a:32:
e4:4f:87:6c:08:8e:77:bf:6c:e6:86:ff:a2:1e:51:
76:28:b4:89:bf:01:93:ab:0a:10:3e:89:a8:05:6b:
b2:95:f4:36:27:55:3e:87:98:51:c4:dc:ab:be:e0:
c6:25:47:6c:b3:fe:e2:6b:90:de:84:b3:89:35:88:
b5:e3:1f:86:3c:f8:ab:cc:90:d7:20:0f:11:ab:f2:
5c:2c:10:bb:62:c7:70:e0:d4:33:d3:44:f2:27:79:
d2:be:84:18:07:90:fa:7c:76:72:e5:92:a0:30:b8:
88:75:35:f0:4d:1f:c6:62:16:b7:0a:a0:69:2f:b9:
7d:fd:4f:ca:39:52:7c:be:dc:d9:8f:f1:c8:17:38:
ad:b6:38:b7:48:4f:2c:65:e4:39:90:d1:e3:a3:c5:
1c:e6:bf:90:bd:4a:e7:78:12:0c:f3:17:72:b7:87:
0b:4c:b0:e3:4d:0c:63:b3:e9:00:79:20:55:7d:ff:
3d:7e:73:21:2d:db:63:b4:63:29:90:9f:19:54:8c:
45:84:5a:fe:63:76:fa:6b:4b:23:2f:e2:f7:b4:c4:
18:c7:0a:7c:dc:50:82:de:ab:02:c1:ca:d9:2e:20:
be:cd:5c:15:f0:d3:f4:7e:89:e5:69:cf:ce:56:6b:
58:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:56:1D:87:3A:6E:B9:D2:3E:2A:A3:50:F7:4C:06:E7:40:5E:8A:75
X509v3 Authority Key Identifier:
keyid:6D:0E:DF:41:0C:49:9A:7F:C4:19:BB:4B:B0:92:19:67:3E:74:61:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIBO/bQ7fQQxJmn_EGbtLsJIZZz50YUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bQ7fQQxJmn_EGbtLsJIZZz50YUs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIBO/91YdhzpuudI-KqNQ90wG50BeinU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.237.48.0/23
Signature Algorithm: sha256WithRSAEncryption
69:ac:8e:0d:8d:7e:1a:0b:c3:85:f0:db:95:7f:4d:14:aa:b0:
ae:e6:46:a7:63:d1:ff:de:0b:9c:f4:55:62:fe:65:1e:66:09:
65:95:df:3c:3d:f0:34:1e:e1:e9:35:af:8c:38:00:e2:80:5f:
ad:2b:db:45:b7:a9:e2:97:e1:a9:3d:61:bc:52:fa:96:b6:1d:
96:46:e1:40:cb:ee:ca:f8:16:e7:3b:13:7c:63:5b:6a:a1:af:
0f:4f:3e:d6:be:f7:9a:6c:0a:57:39:14:bb:bf:69:a7:20:fe:
d2:de:32:1c:c6:75:be:59:fc:07:fd:5c:8d:53:f4:4c:77:d9:
ab:d4:1a:eb:01:fd:45:47:16:33:9b:b7:e6:a8:22:5f:84:33:
a4:0a:35:99:5a:a3:df:19:1b:1e:e9:e9:12:bd:88:6f:90:85:
33:01:d1:9d:17:46:98:bd:fd:9c:fd:3f:24:c2:d2:25:ec:45:
82:75:d8:04:58:5d:c6:10:ed:e0:bd:b2:46:46:ed:d0:5a:2e:
e9:50:a5:20:6f:b2:a5:7f:8f:04:20:dd:88:cb:e1:b9:82:be:
fd:05:05:1c:c3:cf:27:17:33:f7:19:7c:1e:67:ef:22:8c:97:
66:80:fb:0a:3d:9c:6d:53:ca:be:82:f1:cc:b0:5a:62:c9:6d:
8a:52:5a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org