Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/7ATiKiaFdhJT3khTE3XQ4dcoC_g.roa
File: 7ATiKiaFdhJT3khTE3XQ4dcoC_g.roa (raw, json)
Hash identifier: pqpbYgvhIn7FirQzpxraBvfCh+rd/iVurU7xHkCezjw=
Subject key identifier: EC:04:E2:2A:26:85:76:12:53:DE:48:53:13:75:D0:E1:D7:28:0B:F8
Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial: 05DB
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/7ATiKiaFdhJT3khTE3XQ4dcoC_g.roa
Signing time: Fri 01 Sep 2023 09:20:02 +0000
ROA not before: Fri 01 Sep 2023 09:20:02 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131668
IP address blocks: 103.152.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1499 (0x5db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Validity
Not Before: Sep 1 09:20:02 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=EC04E22A2685761253DE48531375D0E1D7280BF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d1:9b:b1:40:66:a6:e9:b7:65:08:8f:95:46:
db:4c:f4:89:f3:0f:35:be:0a:f2:4e:cd:32:1a:8c:
00:5f:44:30:7e:41:5a:50:49:8d:59:b1:e8:13:a7:
4a:a5:d2:b5:15:da:2a:64:37:ff:dd:1f:77:94:0e:
66:ac:42:f6:a4:ff:7e:9f:6e:cf:8e:25:b5:f1:a0:
87:a8:5d:5f:52:09:1c:df:5f:87:f3:10:a3:70:20:
f2:6d:8d:e6:ce:44:2b:2e:01:cd:e3:5b:a7:fa:20:
67:46:4a:67:0c:33:7d:57:57:6a:a4:34:8c:b0:b2:
83:38:45:63:5f:b8:3a:7b:80:5d:49:76:10:03:84:
21:da:2f:d8:ea:8e:f9:ad:1c:35:bd:eb:5c:ab:d6:
d1:19:28:e6:02:0c:6c:85:57:5a:68:72:d0:87:07:
c2:83:99:4f:36:c3:bb:81:5e:e7:e7:66:88:b6:39:
f1:07:8f:ff:95:1d:39:9e:46:1b:e4:0c:ae:46:37:
c4:9f:ec:87:98:62:3e:21:7a:fc:86:bb:04:19:45:
94:16:13:86:6a:91:df:42:43:a0:95:e1:79:ac:29:
b9:24:8c:6e:2b:95:15:6f:98:cb:fa:39:5b:24:a4:
e1:df:be:ed:91:7c:09:61:79:3b:28:55:aa:a2:c6:
d6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:04:E2:2A:26:85:76:12:53:DE:48:53:13:75:D0:E1:D7:28:0B:F8
X509v3 Authority Key Identifier:
keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/7ATiKiaFdhJT3khTE3XQ4dcoC_g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.202.0/24
Signature Algorithm: sha256WithRSAEncryption
38:61:57:e4:66:c2:71:a8:9c:59:aa:4b:57:86:f5:01:42:18:
fc:44:53:25:2e:03:af:a4:cb:71:d6:cb:3e:7e:69:95:ca:fe:
2f:de:74:87:0f:c8:f0:57:7d:c7:3b:e2:ac:d8:b6:d8:05:23:
51:a5:28:6c:fa:98:9e:cf:93:d3:2e:a7:00:71:2b:64:c5:ad:
ba:1b:1e:e9:26:8d:da:95:00:7d:69:e4:40:78:52:44:8a:3a:
50:73:de:72:a0:28:17:e4:48:9f:e0:bf:e5:c1:82:42:7c:4a:
40:a7:70:6c:76:61:dc:c7:82:e0:91:94:86:09:98:39:30:d5:
3a:7b:a5:6b:4e:03:38:73:e2:3e:19:a5:38:6a:07:46:e9:3c:
0e:6c:e5:9b:73:60:bb:34:a5:cb:af:98:e4:6d:85:44:20:44:
3a:06:e2:13:4e:89:1b:b3:90:cb:67:cf:d4:1e:56:79:7e:91:
b7:ef:4b:6b:e2:5e:61:bd:c7:60:57:38:a2:c4:48:61:cb:c3:
80:18:3c:ca:25:27:48:07:68:1d:97:3a:5d:c5:9b:9b:da:fc:
ff:8d:18:c0:67:13:de:33:2c:ab:90:92:9e:4b:3c:3f:4c:b7:
c4:99:04:15:83:b2:43:9b:33:32:d1:b2:fa:57:2a:09:6c:51:
ee:32:75:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org