Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LILIANG/yCws3rEkWijMkW09JQxDAygiNhA.roa
File: yCws3rEkWijMkW09JQxDAygiNhA.roa (raw, json)
Hash identifier: O2zLbcCU1vk5yQv8Ep4TI+lHAcWu0D/qdN5PPYM6VkM=
Subject key identifier: C8:2C:2C:DE:B1:24:5A:28:CC:91:6D:3D:25:0C:43:03:28:22:36:10
Certificate issuer: /CN=FBE0E2FD417A37B1B56BB37DA16834229A399256
Certificate serial: 03
Authority key identifier: FB:E0:E2:FD:41:7A:37:B1:B5:6B:B3:7D:A1:68:34:22:9A:39:92:56
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/--Di_UF6N7G1a7N9oWg0Ipo5klY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LILIANG/yCws3rEkWijMkW09JQxDAygiNhA.roa
Signing time: Fri 08 Sep 2023 12:06:21 +0000
ROA not before: Fri 08 Sep 2023 12:06:21 +0000
ROA not after: Thu 05 Sep 2024 08:24:24 +0000
asID: 131642
IP address blocks: 103.69.52.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBE0E2FD417A37B1B56BB37DA16834229A399256
Validity
Not Before: Sep 8 12:06:21 2023 GMT
Not After : Sep 5 08:24:24 2024 GMT
Subject: CN=C82C2CDEB1245A28CC916D3D250C430328223610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:29:b9:48:0a:75:95:15:46:35:33:1f:2a:
1d:76:5d:99:ac:42:bc:c2:61:ee:90:4d:54:41:c6:
ff:9d:0a:33:95:ad:f4:9b:2d:5f:34:2e:68:8b:6f:
d9:73:6e:56:1f:f9:ed:fc:2d:ca:57:74:75:31:43:
b9:80:6f:15:39:75:54:e9:23:54:91:b7:46:99:90:
8e:cb:bb:bd:5d:87:7b:06:b3:8d:65:c6:8f:e8:f0:
57:7d:eb:19:ae:97:92:61:3a:6d:d4:64:28:9b:9c:
84:5a:1c:e3:02:ef:26:b7:51:c5:c8:d5:ce:69:93:
79:17:24:2b:c7:bf:1a:1e:ed:fa:1c:d4:aa:3e:e6:
b2:95:8e:dd:28:a2:ed:cc:35:3f:c3:17:09:59:25:
03:37:81:4f:f3:28:cb:9a:00:4f:7e:da:a7:95:69:
44:d0:e3:f9:1d:6c:85:f1:89:15:00:cc:21:9c:51:
98:77:5f:c8:fc:75:65:e7:42:ae:82:2b:c0:71:08:
d7:6b:c3:37:50:d7:f0:c0:93:d2:b5:68:cb:af:84:
75:03:32:49:81:f1:a0:fb:bb:fc:f6:b6:7d:77:2e:
55:c4:19:44:0a:ca:57:c3:1b:76:46:e2:e1:4e:25:
b2:72:6e:fd:e6:39:f7:13:6a:f7:72:12:e7:b1:35:
46:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2C:2C:DE:B1:24:5A:28:CC:91:6D:3D:25:0C:43:03:28:22:36:10
X509v3 Authority Key Identifier:
keyid:FB:E0:E2:FD:41:7A:37:B1:B5:6B:B3:7D:A1:68:34:22:9A:39:92:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LILIANG/--Di_UF6N7G1a7N9oWg0Ipo5klY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/--Di_UF6N7G1a7N9oWg0Ipo5klY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LILIANG/yCws3rEkWijMkW09JQxDAygiNhA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.52.0/23
Signature Algorithm: sha256WithRSAEncryption
42:ff:24:c3:b5:a8:71:00:44:8a:94:f2:7e:86:fb:a3:55:ee:
ce:34:cf:d7:77:fc:5d:9e:2d:cf:20:b9:db:5f:54:dd:88:7b:
0a:f6:63:0c:75:d4:92:b0:fc:35:5e:a8:db:9b:e1:15:1b:7b:
e3:22:ef:96:a6:62:f6:fc:d4:cf:e8:93:f2:be:55:f4:8b:30:
f4:c9:95:d4:22:d4:53:1f:51:ec:d0:68:28:7b:10:f9:a8:c6:
f6:d4:df:e6:92:b0:26:d1:4b:cf:e6:3e:8a:55:2a:d8:ea:71:
10:12:ae:f7:98:41:9c:bd:7b:3c:31:ef:39:75:23:70:52:d0:
60:21:f5:86:1d:57:65:c4:8b:0c:d2:65:e9:23:46:0f:82:4a:
d8:ca:a0:df:90:87:e5:81:d9:29:e7:72:62:ce:7d:a0:eb:24:
5f:6e:31:28:09:0a:b2:b2:e4:99:cc:5d:d0:41:a6:eb:c5:4d:
66:4f:b7:21:c5:ef:44:bc:dc:40:c7:73:1c:22:8a:fb:12:a6:
dc:08:77:c2:c7:ca:2a:79:61:a1:c8:85:2d:01:06:4d:6f:0c:
47:a0:51:40:cb:36:74:6d:95:48:ec:e8:7f:67:2c:f5:6e:e8:
dc:e0:76:9f:0e:3c:9e:a6:ff:23:1a:dc:b0:87:d6:4c:68:4c:
b4:3d:f5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org