Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/AMJFnHrdrR6kWpqvHrVIDEO4xdY.roa
File: AMJFnHrdrR6kWpqvHrVIDEO4xdY.roa (raw, json)
Hash identifier: XER2DOLY2wwZsmzOgoJwaDv/kFuX077K1oXOSPMlrdY=
Subject key identifier: 00:C2:45:9C:7A:DD:AD:1E:A4:5A:9A:AF:1E:B5:48:0C:43:B8:C5:D6
Certificate issuer: /CN=3122A9292CC930152ADE5A25848C1BDC4044C902
Certificate serial: 029F
Authority key identifier: 31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/AMJFnHrdrR6kWpqvHrVIDEO4xdY.roa
Signing time: Fri 01 Sep 2023 09:26:30 +0000
ROA not before: Fri 01 Sep 2023 09:26:30 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 31972
IP address blocks: 103.159.88.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 671 (0x29f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3122A9292CC930152ADE5A25848C1BDC4044C902
Validity
Not Before: Sep 1 09:26:30 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=00C2459C7ADDAD1EA45A9AAF1EB5480C43B8C5D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d7:0c:8a:8f:04:9b:90:79:8d:21:46:ff:77:
8c:3b:ea:54:46:94:76:39:94:00:b4:e0:97:71:0a:
fa:1e:41:66:8e:0f:5f:32:28:1c:43:1c:3d:1e:58:
8f:c6:ef:79:8c:09:41:2a:60:b1:e2:c6:b1:00:8c:
a6:23:12:73:03:65:ca:2b:bb:81:a5:62:31:af:c7:
94:f5:16:65:3e:2e:93:0e:ef:8c:38:c4:8e:1a:aa:
6c:00:af:c2:70:3c:77:79:aa:d9:ab:69:7d:47:0a:
a3:74:ce:43:2c:34:14:43:a1:5d:08:31:2e:cc:5f:
69:3b:e6:32:fb:8f:2b:cb:ed:bd:e1:a7:81:af:b5:
1e:5c:4c:69:35:c9:f8:7a:eb:f4:6c:5b:01:b7:46:
1c:95:db:e7:33:2c:96:86:24:3a:a6:36:d2:cb:8e:
64:24:c8:05:58:92:6b:f8:3a:ce:77:f6:57:19:06:
2f:b7:1c:76:88:82:37:18:1a:61:81:20:07:63:a1:
20:10:91:91:00:82:a4:e5:83:4c:63:6c:fb:e2:23:
dc:33:f9:f4:93:f7:2c:cc:da:c2:da:ca:cc:4b:19:
52:42:e1:d3:d5:fc:53:82:9c:a5:29:ff:58:87:72:
4b:38:25:f7:9d:75:d9:6a:fd:8d:1e:4e:11:dc:a8:
27:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C2:45:9C:7A:DD:AD:1E:A4:5A:9A:AF:1E:B5:48:0C:43:B8:C5:D6
X509v3 Authority Key Identifier:
keyid:31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/AMJFnHrdrR6kWpqvHrVIDEO4xdY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.88.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:f3:90:45:a1:f0:36:bd:83:e7:1e:d0:86:28:0e:f5:ff:51:
3b:a9:70:5e:70:ed:a3:7e:a0:b9:21:eb:3e:37:fe:ab:88:57:
6b:b1:67:5c:f5:f8:48:bd:0d:e0:94:1d:ce:ed:0e:49:4e:7f:
5e:9d:14:03:27:9f:b9:11:b4:ac:45:8d:73:f2:45:87:8e:f7:
6f:fa:1b:83:17:09:b2:ea:7e:d4:a5:e9:48:12:94:5d:f5:98:
a9:da:a8:3f:43:9b:45:0c:ec:84:01:f9:ca:cc:5a:fd:13:ba:
c4:c0:c9:2b:2f:90:d5:ee:3f:80:4f:b6:71:24:65:e2:1b:f3:
97:09:69:c0:d1:4f:d9:9c:17:2f:ba:b3:be:8c:3e:68:0f:a7:
ee:8b:e6:4f:fd:1f:fd:c6:0e:b6:52:28:84:78:45:5d:2e:48:
8c:23:c8:89:42:9d:41:cd:d1:54:e3:bb:c8:a2:a6:7c:61:f2:
5b:f0:f9:ef:73:00:3b:ba:c1:32:0f:4c:cc:e4:2c:b5:b6:22:
2d:46:b1:c4:58:9a:80:aa:a2:f4:61:1a:f4:8f:0a:7b:74:40:
fb:6e:89:ec:da:3a:4d:a1:31:db:78:9d:31:49:7d:0f:cb:e2:
aa:d2:28:0d:22:8e:fc:f2:fc:e2:d1:54:f0:38:e8:8d:7e:f9:
1b:bc:22:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org