Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NORDATW/lKI8pTQh9-8TulhKVTbeYn2U2k0.roa
File: lKI8pTQh9-8TulhKVTbeYn2U2k0.roa (raw, json)
Hash identifier: NhSKIrSfb9puuMTu+4GmIoIyN3y7O91A7DApIyXeOvA=
Subject key identifier: 94:A2:3C:A5:34:21:F7:EF:13:BA:58:4A:55:36:DE:62:7D:94:DA:4D
Certificate issuer: /CN=159D5F897276F0DEC857E7E2DEDD649876E8A482
Certificate serial: 0CCE
Authority key identifier: 15:9D:5F:89:72:76:F0:DE:C8:57:E7:E2:DE:DD:64:98:76:E8:A4:82
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FZ1fiXJ28N7IV-fi3t1kmHbopII.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NORDATW/lKI8pTQh9-8TulhKVTbeYn2U2k0.roa
Signing time: Fri 01 Sep 2023 09:28:47 +0000
ROA not before: Fri 01 Sep 2023 09:28:47 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7483
IP address blocks: 103.138.194.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3278 (0xcce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159D5F897276F0DEC857E7E2DEDD649876E8A482
Validity
Not Before: Sep 1 09:28:47 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=94A23CA53421F7EF13BA584A5536DE627D94DA4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5e:85:0e:bf:fb:21:6a:3a:f4:ae:ee:84:dd:
37:78:db:7c:fc:5a:45:c8:c7:aa:ea:60:12:ff:45:
17:b3:b0:5c:a6:db:e8:e3:21:64:f8:b5:8b:42:5a:
d9:ef:56:04:45:29:8a:2e:65:0d:d1:92:05:b4:83:
93:46:05:60:f0:98:50:a8:69:3b:1b:35:a5:fd:58:
eb:3e:ef:9e:ab:3a:4e:1d:df:1c:c7:72:c7:94:dc:
c1:12:3f:8f:19:46:19:e1:24:a9:a7:fd:1e:fd:7c:
25:5a:f0:3e:f9:23:c6:40:b8:24:b7:64:50:e2:7f:
d6:21:f3:21:c8:48:81:75:c8:70:d9:45:c8:99:d0:
9d:cd:75:6c:8b:76:6c:f4:65:42:ef:ac:9a:81:c8:
58:4c:67:f5:2d:d0:f4:1c:73:c4:23:a5:e0:ef:76:
6d:9c:90:2b:b7:93:5b:0d:46:59:0c:a0:c0:c6:5a:
44:a4:be:25:6b:17:f3:47:50:f1:c1:2a:b0:a2:f1:
08:46:1a:8c:73:5a:a5:a7:ec:e1:c2:f5:05:03:89:
31:41:a3:16:4c:54:68:d4:c3:65:8d:5d:37:cc:bb:
b4:48:ce:cd:c9:fc:93:71:b8:f3:e4:48:a0:32:09:
cc:c8:63:3e:00:d5:1c:f4:ec:96:d8:82:e3:00:41:
80:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A2:3C:A5:34:21:F7:EF:13:BA:58:4A:55:36:DE:62:7D:94:DA:4D
X509v3 Authority Key Identifier:
keyid:15:9D:5F:89:72:76:F0:DE:C8:57:E7:E2:DE:DD:64:98:76:E8:A4:82
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NORDATW/FZ1fiXJ28N7IV-fi3t1kmHbopII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FZ1fiXJ28N7IV-fi3t1kmHbopII.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NORDATW/lKI8pTQh9-8TulhKVTbeYn2U2k0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.194.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:0d:df:03:a1:fb:bb:21:3f:56:ed:ef:e9:a4:f6:bb:bc:1d:
fe:bb:ba:0e:06:b9:30:21:dd:2a:0a:c8:a2:10:b3:09:86:cf:
c2:46:cc:b0:b4:17:54:a2:90:cb:e5:e9:b3:60:59:05:10:d0:
87:82:68:8c:cd:8c:41:f0:5d:9e:38:53:49:ab:cc:28:ae:61:
e6:b0:09:bd:7f:5d:70:dc:60:7d:e2:19:37:e3:2c:e2:ef:f0:
a9:3e:ad:21:45:41:9f:46:02:f6:e0:8b:38:a9:21:91:d1:d8:
62:76:ad:61:51:8e:39:58:52:72:8b:58:e4:06:6d:b0:22:92:
fb:77:eb:29:50:e4:b3:34:85:a8:e8:01:a4:18:5c:27:fa:c0:
40:e1:1a:ea:7b:22:56:0a:04:12:9f:4b:b1:51:0d:8b:ed:34:
42:39:53:5c:6b:a5:c7:c2:69:b8:7b:10:b4:04:60:4a:a2:31:
29:9a:0b:a2:a2:a6:72:eb:bf:ec:f0:d8:14:30:80:06:5e:71:
17:d3:93:57:82:6c:a7:45:1c:c5:29:b6:64:8b:9a:00:f6:c4:
9a:81:16:dd:65:1f:a4:77:57:48:18:89:69:95:f2:ee:05:64:
cf:38:3d:5a:80:37:15:d8:5d:68:cf:d6:94:23:18:19:71:d7:
b8:c6:c3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org