Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/Ep8g5z87zryYb-5jzhq_cmcp6c8.roa
File: Ep8g5z87zryYb-5jzhq_cmcp6c8.roa (raw, json)
Hash identifier: Iq9IEZlaky0HovuRiTv6/qFhpJxrHPofBcQsDZDnqZo=
Subject key identifier: 12:9F:20:E7:3F:3B:CE:BC:98:6F:EE:63:CE:1A:BF:72:67:29:E9:CF
Certificate issuer: /CN=3122A9292CC930152ADE5A25848C1BDC4044C902
Certificate serial: 02E5
Authority key identifier: 31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/Ep8g5z87zryYb-5jzhq_cmcp6c8.roa
Signing time: Mon 11 Dec 2023 05:47:41 +0000
ROA not before: Mon 11 Dec 2023 05:47:41 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 132369
IP address blocks: 103.159.88.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 741 (0x2e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3122A9292CC930152ADE5A25848C1BDC4044C902
Validity
Not Before: Dec 11 05:47:41 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=129F20E73F3BCEBC986FEE63CE1ABF726729E9CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:d2:49:bd:2a:bd:b3:fd:7e:b3:d1:81:6e:
c9:70:99:64:93:ae:f5:ae:bb:1b:9f:ec:0b:09:70:
11:98:c0:17:72:d0:ed:ac:3c:68:c3:4f:03:30:93:
b1:a2:43:7b:62:63:30:54:bb:84:b4:7a:d8:a8:22:
34:ba:80:15:62:cc:da:11:54:ce:7c:b7:45:71:97:
39:2a:29:e6:37:3f:2e:2a:57:a4:55:d2:da:00:0a:
43:30:c3:44:ea:21:cf:12:04:a0:14:4b:f0:e9:17:
3e:8f:7c:b4:cd:75:81:ea:87:cc:02:70:a5:4c:28:
25:c8:6d:f0:76:a4:91:8d:19:c5:64:a8:3a:3c:67:
65:c9:a4:4f:ae:42:8e:81:21:73:1e:9f:96:d4:83:
8f:38:f8:2e:1a:12:3c:67:10:c5:f6:bf:6b:80:6f:
db:d2:1f:46:26:78:fb:1b:95:56:02:8d:de:85:97:
97:bf:08:c9:b0:31:cf:ab:b8:90:ff:a7:d2:2e:51:
e6:05:4c:e5:e7:52:68:4d:79:d1:97:5b:a7:56:da:
02:a4:a7:7d:8a:2b:0a:e2:1f:78:1b:92:d1:19:12:
50:7b:0a:1e:62:ef:52:5f:0a:29:21:1f:58:a9:61:
3f:86:96:ef:89:e6:b5:1d:55:13:64:f8:47:c4:bb:
9a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9F:20:E7:3F:3B:CE:BC:98:6F:EE:63:CE:1A:BF:72:67:29:E9:CF
X509v3 Authority Key Identifier:
keyid:31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/Ep8g5z87zryYb-5jzhq_cmcp6c8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.88.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:84:e5:e7:40:40:2d:82:bb:a8:b6:0c:69:16:ce:00:dd:0c:
4f:c1:0f:2e:95:2f:41:a9:8e:04:92:bc:40:b0:84:df:8b:5e:
21:e4:e6:c2:ae:4e:39:18:2f:11:6c:2b:39:a6:0e:8b:fc:93:
66:63:7a:fc:6f:f0:86:fd:20:5d:7f:db:98:de:4b:07:bd:c7:
cc:f0:f0:d4:1a:82:ff:bd:38:f2:a9:df:f1:d1:dc:5b:ce:47:
61:95:70:0f:ca:f3:6f:64:c6:af:14:6f:bd:37:4c:fc:43:bd:
55:78:27:5f:a2:77:d2:da:7b:c8:f9:e1:3f:7d:2e:91:3a:e0:
09:2a:8b:35:cb:3d:71:12:1e:ba:1b:06:80:93:67:75:07:68:
71:bc:16:a2:9d:3b:42:49:34:e9:17:da:b2:2b:70:3e:fa:8d:
11:e8:6a:1e:b8:2c:2b:f8:1b:96:8c:75:55:d8:63:16:05:a5:
95:c2:cf:e6:e4:1d:36:ca:05:28:40:c4:4b:78:d2:3a:43:4b:
6f:6b:20:d7:ff:5c:2f:63:c6:e4:ae:a6:7f:c1:33:30:ee:a4:
6a:d4:54:79:7e:1b:79:46:31:bb:21:11:cc:9c:fa:01:39:bf:
2a:73:11:f3:3d:bd:43:3c:c8:3e:75:d3:19:84:f6:6f:15:15:
75:2d:76:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org