Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LINGCAI/NJIU9JmINncfPD3FgUrCcRpp4NQ.roa
File: NJIU9JmINncfPD3FgUrCcRpp4NQ.roa (raw, json)
Hash identifier: tknukpEd9kknqxlE99GJjOKDwCZ5yeHevn9rCLFeiFc=
Subject key identifier: 34:92:14:F4:99:88:36:77:1F:3C:3D:C5:81:4A:C2:71:1A:69:E0:D4
Certificate issuer: /CN=8AB99EC90607B96019516ECA604C7B7FF2474A9A
Certificate serial: F0
Authority key identifier: 8A:B9:9E:C9:06:07:B9:60:19:51:6E:CA:60:4C:7B:7F:F2:47:4A:9A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/irmeyQYHuWAZUW7KYEx7f_JHSpo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LINGCAI/NJIU9JmINncfPD3FgUrCcRpp4NQ.roa
Signing time: Fri 09 Aug 2024 15:41:46 +0000
ROA not before: Fri 09 Aug 2024 15:41:46 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131642
IP address blocks: 103.20.98.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AB99EC90607B96019516ECA604C7B7FF2474A9A
Validity
Not Before: Aug 9 15:41:46 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=349214F4998836771F3C3DC5814AC2711A69E0D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:29:c3:14:76:a6:7e:6a:58:81:50:31:50:4f:
95:38:42:da:54:ed:07:8e:9e:aa:91:81:d8:ae:4a:
d6:d7:d3:a8:98:7e:4e:c1:58:65:99:eb:cf:d8:77:
b5:28:d6:40:04:48:7e:6a:7c:2c:c5:ff:c1:1c:d6:
9e:30:73:c8:5d:07:6c:fd:d2:11:19:e9:31:1d:8c:
f1:f9:cc:99:56:05:c2:9f:c1:fb:b2:59:dc:28:c2:
09:bb:7d:68:d6:68:ec:e8:97:ee:fb:ac:06:32:bc:
c3:9b:8a:a9:64:9b:72:03:29:af:71:36:0b:99:56:
be:b1:e6:83:97:86:0e:18:9d:02:c7:7c:7e:d9:86:
a2:cf:1c:69:30:ce:bb:75:43:76:c3:9c:ec:20:82:
3a:4f:4c:34:c9:81:6b:c6:39:4e:9c:26:17:de:33:
cf:31:4a:51:ac:7d:13:9f:9c:b5:05:cf:20:0c:42:
08:ec:0e:a4:b5:7e:1f:6a:db:37:a4:10:8f:79:5e:
7d:2e:07:c2:42:25:09:4c:84:45:7b:27:e5:0e:f4:
55:ff:d1:64:49:fe:c6:26:6c:4e:58:cf:68:04:a3:
62:7c:0c:8d:a7:c3:e2:b1:b7:20:a4:42:74:13:1d:
46:7d:e9:31:51:44:66:33:e6:90:dc:3b:b8:5c:ff:
25:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:92:14:F4:99:88:36:77:1F:3C:3D:C5:81:4A:C2:71:1A:69:E0:D4
X509v3 Authority Key Identifier:
keyid:8A:B9:9E:C9:06:07:B9:60:19:51:6E:CA:60:4C:7B:7F:F2:47:4A:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINGCAI/irmeyQYHuWAZUW7KYEx7f_JHSpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/irmeyQYHuWAZUW7KYEx7f_JHSpo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINGCAI/NJIU9JmINncfPD3FgUrCcRpp4NQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.20.98.0/23
Signature Algorithm: sha256WithRSAEncryption
78:95:ce:78:f1:47:2b:b7:7d:dd:29:09:b0:bc:ad:e8:1c:43:
79:c1:48:41:5a:d4:45:5d:8a:f2:98:44:9c:87:e2:26:93:9b:
7e:70:33:06:e5:9f:49:8b:ea:36:c6:2b:c1:81:a4:9b:e0:53:
4b:57:39:9d:58:4d:4c:46:09:ff:0f:90:94:51:ca:87:a1:c5:
8f:fc:c8:e7:18:2f:6d:01:79:96:7a:64:d0:a9:b2:fa:01:a1:
83:2c:d4:83:ba:62:21:8f:28:d3:50:7b:b4:88:2c:fa:ee:d0:
b5:33:e7:93:67:24:12:52:9f:9f:fc:83:44:93:f3:77:ba:92:
fe:9f:53:c7:e5:31:fe:56:c9:49:29:4b:41:9d:7e:dc:1f:66:
a2:69:6b:96:6b:8b:9f:a3:97:96:4c:49:d5:21:9e:df:53:25:
b1:3f:8a:c1:65:dc:20:12:bf:7b:cb:dc:80:c6:8f:ad:0d:6b:
91:fd:e3:4a:09:84:e5:f9:f9:95:2f:17:77:42:aa:1d:d4:9b:
13:6c:06:e3:a3:7e:97:1f:5f:e3:58:1e:2e:7c:a8:8b:72:5a:
07:d7:07:e6:4f:b5:f3:43:1f:89:79:cd:25:2f:7b:25:09:9f:
ce:97:32:bd:3e:2c:38:e1:79:77:da:b5:b9:5d:08:1b:db:14:
00:6b:d8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:21 2024 by rpki-client on console-fra.rpki-client.org