Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/META/SnhVHvoyZV-qE8UWz_ukQu7LE4k.roa
File: SnhVHvoyZV-qE8UWz_ukQu7LE4k.roa (raw, json)
Hash identifier: TjfQ/ugwGGVlPp6GlmcV/2wP0528JuaDNnxw3gXurdM=
Subject key identifier: 4A:78:55:1E:FA:32:65:5F:AA:13:C5:16:CF:FB:A4:42:EE:CB:13:89
Certificate issuer: /CN=C87695C6B48F13DD56A76B299DD54D8F1EB369D5
Certificate serial: 0E31
Authority key identifier: C8:76:95:C6:B4:8F:13:DD:56:A7:6B:29:9D:D5:4D:8F:1E:B3:69:D5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/yHaVxrSPE91Wp2spndVNjx6zadU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/META/SnhVHvoyZV-qE8UWz_ukQu7LE4k.roa
Signing time: Tue 29 Sep 2020 10:04:57 +0000
ROA not before: Tue 29 Sep 2020 10:04:57 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131631
IP address blocks: 103.131.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3633 (0xe31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C87695C6B48F13DD56A76B299DD54D8F1EB369D5
Validity
Not Before: Sep 29 10:04:57 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4A78551EFA32655FAA13C516CFFBA442EECB1389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7b:2b:e7:49:3e:f6:27:34:da:d3:55:a7:ab:
85:ce:dc:7f:d6:13:d3:47:1d:4f:42:7a:6e:b3:01:
18:dc:0d:4e:99:da:b4:5b:29:ff:d2:18:22:d8:7c:
a3:29:5b:c5:ac:cb:32:ad:f4:56:23:99:e9:ea:3d:
cb:53:40:4e:e6:37:c0:71:ed:64:35:5a:34:de:13:
50:1e:db:d3:ce:3e:7d:34:2e:41:bc:46:8c:29:37:
22:32:5a:ea:b9:b3:0b:27:b0:9a:a5:3f:a0:d2:11:
3a:91:bb:f1:be:01:9d:a0:cb:9d:c1:2f:48:25:6b:
9b:ec:49:ee:d9:36:94:2e:5e:d1:b9:f3:c8:57:18:
ff:57:43:ad:ea:f6:83:aa:d2:1e:e7:2a:97:a7:cc:
c1:63:36:ec:4c:72:4c:6b:17:15:60:fc:35:79:f2:
8d:52:f8:e4:b3:33:80:29:d9:c6:ac:bc:34:22:d7:
74:f4:13:aa:7b:21:de:3d:ea:f8:2b:60:6c:d5:02:
48:ce:7d:62:43:52:6c:af:f5:e9:a0:1d:6e:a8:88:
02:02:7e:ed:6b:07:5b:ab:02:7f:de:0e:8e:de:74:
70:69:71:a8:3a:f5:1c:f7:6a:11:df:1c:82:78:35:
91:5a:4e:c7:a0:2c:1d:28:13:cf:a4:aa:f7:45:73:
a8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:78:55:1E:FA:32:65:5F:AA:13:C5:16:CF:FB:A4:42:EE:CB:13:89
X509v3 Authority Key Identifier:
keyid:C8:76:95:C6:B4:8F:13:DD:56:A7:6B:29:9D:D5:4D:8F:1E:B3:69:D5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/META/yHaVxrSPE91Wp2spndVNjx6zadU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/yHaVxrSPE91Wp2spndVNjx6zadU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/META/SnhVHvoyZV-qE8UWz_ukQu7LE4k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.149.0/24
Signature Algorithm: sha256WithRSAEncryption
70:82:f7:18:47:62:ed:0e:57:b7:64:55:74:d1:b6:b2:7f:0d:
d7:27:6c:5b:f3:f9:06:ff:40:97:ff:30:3f:39:67:a7:30:22:
a7:85:47:49:4e:b8:b2:21:ee:18:1f:43:8c:1b:89:dd:08:5c:
e6:cd:16:0f:f7:88:71:58:80:44:26:2d:1f:be:1d:00:62:c8:
57:ee:e0:9a:8c:af:74:cd:73:0e:60:8e:02:54:b9:e7:e9:14:
c2:b3:22:31:88:e6:9a:fe:2f:3e:11:28:62:f7:46:b8:e6:ab:
06:95:32:da:11:d2:91:41:99:2e:07:02:ea:c9:d3:43:e2:ea:
37:5c:29:ae:05:10:26:19:fa:0a:30:fe:7f:72:fa:0b:80:61:
e0:34:26:55:97:36:78:a4:e1:cc:b4:3e:e3:fd:c2:55:4d:7d:
4a:97:ee:ee:05:38:31:ff:db:bf:bd:04:ea:1f:7b:06:1f:eb:
24:63:63:a9:96:ca:bc:1b:45:90:90:a2:f4:7f:ce:68:e4:7b:
bd:68:a8:ed:3c:cd:33:e8:e4:a4:1a:2c:69:39:8e:df:11:0d:
f0:d4:6a:f6:84:e9:c4:02:a9:28:c7:18:ed:54:a6:e2:b0:6f:
02:e6:8e:b8:32:6a:75:17:fc:37:ec:ee:d0:36:e3:d5:5b:16:
f5:6e:ea:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org