Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/uNyi-WeaB3zSjaNokztduar_phw.roa
File: uNyi-WeaB3zSjaNokztduar_phw.roa (raw, json)
Hash identifier: OE9zLaCXab8fFfomnKlnSxbmL9z+RrWyC1cqCnYKDTs=
Subject key identifier: B8:DC:A2:F9:67:9A:07:7C:D2:8D:A3:68:93:3B:5D:B9:AA:FF:A6:1C
Certificate issuer: /CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26
Certificate serial: 0B31
Authority key identifier: 6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/uNyi-WeaB3zSjaNokztduar_phw.roa
Signing time: Fri 01 Sep 2023 09:20:17 +0000
ROA not before: Fri 01 Sep 2023 09:20:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18179
IP address blocks: 103.20.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2865 (0xb31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26
Validity
Not Before: Sep 1 09:20:17 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B8DCA2F9679A077CD28DA368933B5DB9AAFFA61C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e8:80:d3:b8:d7:26:e8:d5:ef:64:e8:38:cb:
6b:aa:04:d3:02:83:bb:af:ea:14:df:92:81:a1:75:
a5:35:30:96:1e:3e:ba:45:5c:97:35:de:6e:91:32:
32:3d:63:f5:43:cc:fe:64:2f:08:31:2f:a6:3f:8b:
a9:42:75:86:b5:fc:59:12:34:cf:a4:74:ad:0a:c5:
f1:d3:f8:13:5d:1f:bd:ad:91:90:8a:8d:9f:95:ab:
79:74:b4:9e:31:bf:7c:74:77:a6:f3:5b:b1:39:60:
68:04:00:0f:f5:b0:c6:94:5c:39:2a:d8:20:db:18:
ad:20:e1:c4:a8:62:da:58:59:67:a9:d5:a7:e3:a7:
c3:cc:17:f3:bf:55:63:a3:ef:74:d1:00:47:36:3f:
ce:f5:68:31:ad:54:80:ed:c8:bb:dc:18:06:59:66:
53:83:75:ab:8d:c2:28:3d:14:b9:65:98:f4:13:b1:
97:0d:4e:d5:83:ed:4a:f4:32:c4:ae:51:43:c5:8e:
26:51:5b:a0:4f:a1:11:99:d3:43:90:10:f3:50:af:
17:2e:e6:1f:0b:0f:ca:e7:1c:74:5e:11:ba:79:50:
03:1d:49:44:ed:75:0a:f7:01:7d:e2:4e:9c:79:9a:
8f:34:29:da:55:b8:78:cc:35:ff:ca:a7:66:e6:a6:
4f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DC:A2:F9:67:9A:07:7C:D2:8D:A3:68:93:3B:5D:B9:AA:FF:A6:1C
X509v3 Authority Key Identifier:
keyid:6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/uNyi-WeaB3zSjaNokztduar_phw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.20.176.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:15:31:b2:cf:5a:7d:55:59:61:5f:2f:c4:a9:82:64:fd:72:
ed:5c:68:ca:ba:1d:d0:cf:11:99:95:32:39:69:de:17:4e:9a:
0c:de:8b:fe:be:9d:d9:b3:0c:67:80:be:92:22:8a:ee:f4:04:
1b:ba:32:79:60:3e:ba:86:cb:04:1d:c9:dd:99:ba:13:f7:73:
d6:3a:39:88:4e:23:3e:7f:6a:18:f0:f9:dd:a3:76:8c:9b:45:
22:9e:b0:50:6e:41:9a:6b:93:68:26:48:6b:5b:87:2a:ca:a4:
ce:65:4e:26:23:8d:c6:ca:0a:92:66:91:18:77:01:30:2f:fb:
66:f0:7b:80:f7:56:8d:b0:95:5a:f6:da:24:a3:13:e9:2e:d5:
cc:5d:a8:86:a3:ed:dc:6a:d1:ce:24:32:92:cb:93:2c:ff:92:
1f:38:f8:81:35:22:d6:30:96:48:c0:e4:03:30:bb:ca:78:78:
b4:6d:fe:ba:31:34:dc:65:e6:f8:53:74:5b:41:e6:e4:03:43:
af:b4:ae:6f:80:4f:6d:7f:56:6a:23:43:5f:31:b1:85:91:2d:
3c:78:87:55:b4:51:a5:43:05:1a:c8:33:ba:fa:ef:fc:4d:2f:
45:5a:a9:76:ba:08:67:bc:ef:75:a7:8a:7e:d7:25:7e:bb:80:
a0:19:49:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org