Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MAGICCUBE/AtX-B_QpRXVfznq_URFVaaKH0DY.roa
File: AtX-B_QpRXVfznq_URFVaaKH0DY.roa (raw, json)
Hash identifier: wCGoLy1iFp1b9lEBnJcWiOwF+APzPidWZxRvNym7t8Y=
Subject key identifier: 02:D5:FE:07:F4:29:45:75:5F:CE:7A:BF:51:11:55:69:A2:87:D0:36
Certificate issuer: /CN=2B3B89AD32F3B95B7AF165F4C8A4CD08E754D5AB
Certificate serial: 01C4
Authority key identifier: 2B:3B:89:AD:32:F3:B9:5B:7A:F1:65:F4:C8:A4:CD:08:E7:54:D5:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KzuJrTLzuVt68WX0yKTNCOdU1as.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MAGICCUBE/AtX-B_QpRXVfznq_URFVaaKH0DY.roa
Signing time: Fri 01 Sep 2023 09:16:27 +0000
ROA not before: Fri 01 Sep 2023 09:16:27 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7483
IP address blocks: 103.175.194.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452 (0x1c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B3B89AD32F3B95B7AF165F4C8A4CD08E754D5AB
Validity
Not Before: Sep 1 09:16:27 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=02D5FE07F42945755FCE7ABF51115569A287D036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:00:52:62:c9:6b:42:18:e9:74:7b:69:f7:d2:
fd:99:e6:8b:40:61:49:d6:92:b1:2a:ac:d8:8c:23:
44:ca:69:27:92:1e:f8:28:15:55:d6:22:50:9a:2e:
d2:6d:a5:70:eb:ed:c3:cc:6a:4c:f0:15:05:a8:e0:
23:63:47:fe:f1:96:cf:35:94:7a:e3:1e:15:f4:9b:
79:8f:4a:c3:86:fd:6a:b8:cf:4e:5f:6b:b7:3b:e2:
c2:85:45:f1:12:19:8b:c0:3a:18:88:c6:96:ca:24:
7f:34:87:59:1f:53:22:1b:0d:d5:22:e3:7c:18:78:
f3:c3:5d:19:38:f4:a7:c4:4b:c4:a0:3a:1e:93:2b:
53:a8:13:45:ba:b5:a5:38:d7:a5:db:3d:c3:78:e7:
23:9a:4a:8c:56:f9:f7:89:a1:d1:91:53:bf:e6:f5:
f0:9c:d4:5d:35:72:fc:10:8b:5a:b4:ff:d6:ce:67:
37:95:19:7c:a7:f7:92:33:8e:66:5d:77:75:c3:4c:
30:15:2e:32:74:5b:fa:49:b0:85:51:4b:b0:72:c3:
ac:c6:48:6f:d3:d5:d4:9b:5c:f8:bb:0c:e9:3e:3e:
27:47:52:e4:b5:02:84:f3:79:34:47:03:c9:9d:98:
67:aa:a4:98:30:99:40:8b:af:1e:e8:5e:b7:20:54:
c9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D5:FE:07:F4:29:45:75:5F:CE:7A:BF:51:11:55:69:A2:87:D0:36
X509v3 Authority Key Identifier:
keyid:2B:3B:89:AD:32:F3:B9:5B:7A:F1:65:F4:C8:A4:CD:08:E7:54:D5:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MAGICCUBE/KzuJrTLzuVt68WX0yKTNCOdU1as.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KzuJrTLzuVt68WX0yKTNCOdU1as.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MAGICCUBE/AtX-B_QpRXVfznq_URFVaaKH0DY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.194.0/23
Signature Algorithm: sha256WithRSAEncryption
79:25:ef:5b:05:17:d5:47:d8:1b:56:4f:10:8d:5a:8e:38:5f:
cb:e1:0b:65:2a:b8:9a:66:9f:65:0e:14:d8:9c:ee:31:37:98:
1b:de:9e:9e:b5:9d:7c:73:9a:fa:50:d5:79:7b:ab:be:51:69:
c7:0d:b5:43:22:2c:d0:73:90:9c:68:c2:3c:ab:66:2a:e9:92:
33:ab:bf:4a:52:dd:47:ea:3a:a4:55:75:1b:fe:3c:05:04:06:
54:b0:fe:b3:eb:27:31:5f:44:7b:b0:5a:ae:7b:88:0b:2a:78:
b1:60:6d:0c:40:ab:28:bb:3f:a3:92:b9:a7:39:67:5d:ac:6b:
a3:54:2f:d7:40:ab:08:e1:95:eb:4c:3b:ba:9f:9f:9e:db:45:
45:5c:e9:81:53:1f:57:81:df:91:b5:f7:dc:e0:72:ab:0c:af:
33:9d:12:15:41:1f:67:41:80:4a:2a:04:40:3c:6f:8a:fd:2d:
16:aa:2a:4a:af:6d:0d:78:66:e4:84:d3:bf:28:ea:80:ac:da:
4d:87:25:2c:92:9c:ce:18:9e:d6:02:4e:c6:6c:4a:ca:67:ed:
f0:78:0b:08:ce:14:95:d9:51:5f:ef:37:87:9b:43:4f:70:2d:
fc:e6:03:d0:6a:7d:0b:3b:5d:4b:48:b4:19:27:cf:f4:8c:e0:
73:e6:c1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org