Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCHC/xpXQ60tA1nxYs0bJAcvFYsrZ5Mw.roa
File: xpXQ60tA1nxYs0bJAcvFYsrZ5Mw.roa (raw, json)
Hash identifier: f7BlVT8osfm5te2VzFk/aBbR0xtrJoAJWDO5d0UjZrc=
Subject key identifier: C6:95:D0:EB:4B:40:D6:7C:58:B3:46:C9:01:CB:C5:62:CA:D9:E4:CC
Certificate issuer: /CN=ED38685FF3EA1F46685DE5F57C6A4B8104481891
Certificate serial: 0BEB
Authority key identifier: ED:38:68:5F:F3:EA:1F:46:68:5D:E5:F5:7C:6A:4B:81:04:48:18:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCHC/xpXQ60tA1nxYs0bJAcvFYsrZ5Mw.roa
Signing time: Mon 13 May 2024 00:21:16 +0000
ROA not before: Mon 13 May 2024 00:21:16 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7539
IP address blocks: 103.160.220.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3051 (0xbeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED38685FF3EA1F46685DE5F57C6A4B8104481891
Validity
Not Before: May 13 00:21:16 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C695D0EB4B40D67C58B346C901CBC562CAD9E4CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f9:0f:7d:95:7d:e8:64:02:bb:35:b0:38:0c:
3c:c4:97:56:83:a1:2f:99:c7:4c:9b:99:ed:cf:e6:
9d:c2:42:3e:61:3d:b0:fe:ac:5f:20:94:47:fa:8b:
61:84:7c:8d:17:cc:b4:e7:e1:a0:e8:bb:ac:9c:ae:
ab:b2:9e:3d:a2:e1:46:6d:f5:fd:66:f8:c1:29:87:
1f:70:eb:03:f3:32:68:d6:25:7e:eb:68:cd:bf:08:
f4:8c:6d:6a:0e:6e:73:d7:0b:b1:96:a2:40:22:67:
f8:92:fa:fd:88:0f:07:34:83:c1:b6:8b:09:e0:42:
e2:62:a9:4b:9c:ca:18:84:c9:9a:b9:d2:2e:79:ee:
c7:89:3f:44:75:f0:8a:48:5a:64:db:4e:57:cc:c1:
07:52:2f:8e:86:20:37:34:d4:1f:c3:14:50:e3:fa:
14:8a:eb:ac:df:36:54:fc:2e:dc:7a:2e:e4:67:a2:
bb:86:28:20:8a:fd:4e:a1:6e:e1:16:c1:12:7a:ce:
13:eb:d1:db:fe:4d:d5:4f:bb:21:0d:4a:bd:b3:6f:
f9:1e:af:a5:d4:2b:cc:64:e8:d8:2c:3d:89:09:03:
22:e1:a5:da:d4:f7:63:24:94:da:f8:96:97:c4:44:
f3:5b:9a:e3:04:a3:86:0d:f2:0a:d4:42:73:dd:f4:
00:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:95:D0:EB:4B:40:D6:7C:58:B3:46:C9:01:CB:C5:62:CA:D9:E4:CC
X509v3 Authority Key Identifier:
keyid:ED:38:68:5F:F3:EA:1F:46:68:5D:E5:F5:7C:6A:4B:81:04:48:18:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCHC/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCHC/xpXQ60tA1nxYs0bJAcvFYsrZ5Mw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.220.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:5e:a6:c3:c6:18:13:97:c8:28:bb:c1:5b:68:db:0e:aa:be:
e0:8a:06:42:a7:51:1e:42:33:9b:68:74:b2:27:06:03:93:05:
80:33:35:02:e7:19:34:56:74:d4:ba:36:4e:27:82:a0:4f:e1:
e9:ac:87:13:08:19:62:fb:9d:4d:b2:e7:13:95:71:4e:ae:34:
e8:71:72:55:c2:23:4f:58:19:f1:58:62:4a:5f:d3:64:17:19:
2d:1f:a9:47:5b:cf:09:f3:6a:d2:e2:f1:e4:34:ec:df:0e:12:
66:fd:0c:73:52:43:7e:3e:cb:fa:52:fb:a3:bf:a4:55:f2:2f:
e4:fc:cc:de:19:b5:c5:00:04:16:c0:42:0b:9e:43:42:53:7f:
83:45:47:91:4d:9f:e3:72:d7:54:54:a4:89:49:54:ae:c8:77:
44:ed:70:73:4d:1b:f2:8b:99:a6:52:d6:6b:49:4b:6d:27:e9:
ae:86:d6:82:68:ce:0e:5f:1b:4a:c5:ed:c8:7e:46:4f:8d:33:
0e:18:79:eb:d5:92:0e:58:bd:37:d6:c2:7a:71:4d:c7:c4:a2:
9b:1a:13:33:59:37:b3:89:b7:ef:bc:1d:13:11:4d:4e:9d:7c:
a5:7d:4a:69:d6:73:4c:e2:a4:e2:5b:7f:c1:e8:dc:39:3d:ed:
71:c9:18:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org