Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NEBULAX/REV801WMQxUHL8M46D7z9Jlh3AU.roa
File: REV801WMQxUHL8M46D7z9Jlh3AU.roa (raw, json)
Hash identifier: +CF0FNTLHQ6aAKydXBw446arcVHHdU186ZGh+Fyb3vk=
Subject key identifier: 44:45:7C:D3:55:8C:43:15:07:2F:C3:38:E8:3E:F3:F4:99:61:DC:05
Certificate issuer: /CN=1D4D78F56750C7598953366D459A12B658B7FF38
Certificate serial: 01E6
Authority key identifier: 1D:4D:78:F5:67:50:C7:59:89:53:36:6D:45:9A:12:B6:58:B7:FF:38
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HU149WdQx1mJUzZtRZoStli3_zg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NEBULAX/REV801WMQxUHL8M46D7z9Jlh3AU.roa
Signing time: Fri 01 Sep 2023 09:26:05 +0000
ROA not before: Fri 01 Sep 2023 09:26:05 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18041
IP address blocks: 103.158.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 486 (0x1e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D4D78F56750C7598953366D459A12B658B7FF38
Validity
Not Before: Sep 1 09:26:05 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=44457CD3558C4315072FC338E83EF3F49961DC05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:55:1b:bb:c8:32:47:f4:5e:35:e2:93:96:bd:
b8:e4:7c:1b:ab:71:ea:71:d0:e8:fc:ca:50:65:f2:
4e:ce:9c:26:95:32:bc:1a:45:2c:b8:f1:37:e1:17:
77:67:dd:b5:66:ac:c9:ce:ad:aa:75:3c:00:91:c1:
80:63:bc:4a:ec:fe:ae:8e:60:a7:8d:d7:b6:38:91:
65:14:89:60:34:2d:d3:60:31:fa:57:48:72:09:ed:
84:63:2d:ce:83:d7:85:44:c1:d8:d0:54:41:b9:51:
6d:be:01:c7:ee:70:01:47:65:74:24:0b:4c:30:ba:
73:7d:0e:f9:ee:8f:2a:24:52:ab:a4:a9:11:d8:4a:
c0:48:7d:f6:be:47:9c:d6:89:9b:14:59:e5:0b:1e:
06:98:79:2c:94:fc:33:41:6a:ef:e2:3b:73:b3:de:
25:e8:23:ad:8a:30:6c:e7:aa:69:05:62:3e:e2:87:
ac:ad:c6:e9:bc:7a:bb:23:ad:d9:e9:8f:94:32:2a:
79:a8:ec:95:9f:c3:5c:ee:1c:28:ae:8e:3c:08:10:
3e:85:2d:38:89:e5:dd:96:d4:f7:d7:d8:ab:01:86:
d2:05:06:5f:47:c7:33:b0:d0:92:3b:08:1b:f7:26:
73:ee:db:88:f6:e6:08:ca:7e:d4:a6:64:11:50:31:
3f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:45:7C:D3:55:8C:43:15:07:2F:C3:38:E8:3E:F3:F4:99:61:DC:05
X509v3 Authority Key Identifier:
keyid:1D:4D:78:F5:67:50:C7:59:89:53:36:6D:45:9A:12:B6:58:B7:FF:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NEBULAX/HU149WdQx1mJUzZtRZoStli3_zg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HU149WdQx1mJUzZtRZoStli3_zg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NEBULAX/REV801WMQxUHL8M46D7z9Jlh3AU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.186.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e8:c8:1c:f5:e4:b3:b1:f0:db:58:d1:c8:2a:41:f1:5c:c5:
69:36:f8:c7:be:10:a8:7e:6b:f0:1a:30:5a:51:fc:e4:a1:72:
11:00:09:11:33:6e:e7:98:78:b2:87:79:2f:4a:67:4e:0e:c1:
b1:6a:61:08:80:8b:62:fd:39:d5:83:b3:c8:a4:5e:b2:73:b2:
48:36:2b:95:b6:48:90:37:0d:9a:6c:a4:63:e2:c4:68:b2:e7:
38:33:3e:86:ba:7c:f6:a9:18:a9:9d:87:e1:53:95:bd:35:54:
f4:e4:f8:3b:60:82:a9:08:9f:66:c2:6a:f8:a0:e1:8d:94:75:
d9:85:88:dd:86:4a:60:93:fb:75:9b:18:e9:da:74:ce:95:7f:
07:2a:d4:08:8e:94:2c:8e:a5:2f:55:fe:df:b0:5d:3e:5f:87:
60:9d:d1:47:ac:43:46:5e:f2:44:80:16:cb:74:e0:7f:e7:89:
31:b6:0c:75:5b:81:e2:35:02:02:0b:f8:a1:35:62:c2:41:9e:
05:94:6c:38:6d:51:cc:85:a6:93:4d:ed:1b:ac:93:e9:b1:a3:
3f:4f:d5:f7:f1:8b:d6:47:64:e4:ca:c1:1c:10:0d:4c:aa:65:
0b:be:fa:2a:cb:34:a0:cc:b4:72:c5:ab:db:56:28:e8:db:45:
4b:8d:3c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org