Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/LgXOkaw1IdDPjB4ZWUwOYvATgew.roa
File: LgXOkaw1IdDPjB4ZWUwOYvATgew.roa (raw, json)
Hash identifier: hci0Byt8U5VWuPDdADIfKDbJt2qBu0bjZMegALYOVMc=
Subject key identifier: 2E:05:CE:91:AC:35:21:D0:CF:8C:1E:19:59:4C:0E:62:F0:13:81:EC
Certificate issuer: /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Certificate serial: 580E
Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/LgXOkaw1IdDPjB4ZWUwOYvATgew.roa
Signing time: Fri 01 Sep 2023 09:33:50 +0000
ROA not before: Fri 01 Sep 2023 09:33:50 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38851
IP address blocks: 103.46.188.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22542 (0x580e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Validity
Not Before: Sep 1 09:33:50 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2E05CE91AC3521D0CF8C1E19594C0E62F01381EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d5:3b:63:e7:e9:14:4b:13:68:bd:32:ec:c6:
7f:e8:79:b4:e3:9f:80:ee:89:c7:34:4c:64:e8:06:
4f:93:01:b3:9c:a9:fe:d4:6b:d8:dc:51:56:45:00:
9d:e3:be:6e:12:f5:95:eb:cd:70:b8:18:0b:c7:6f:
1c:d8:69:22:f0:81:68:c5:6c:ae:82:57:14:14:2d:
4f:93:08:b7:36:a4:cd:81:84:03:e4:d9:a2:6a:88:
df:92:43:df:2c:a0:93:f3:38:d6:a0:c9:c2:61:28:
d5:89:36:e4:ff:d6:f3:14:3c:2a:f3:eb:0f:b3:60:
7d:da:d4:5b:85:eb:d6:3e:20:42:73:03:a1:2f:c0:
4e:c0:12:c7:2c:f5:98:30:09:26:a2:8f:ff:b1:ea:
5d:a2:16:59:38:67:7b:60:24:66:82:ff:84:42:81:
b9:fd:94:ec:1c:bb:a6:c7:d9:a5:55:58:e8:ba:38:
b8:a1:b0:ac:09:75:33:c5:4d:f5:9e:b5:1f:e3:9f:
e8:da:d7:2a:6e:88:bc:1f:ea:5a:cb:84:8d:1b:fc:
59:df:78:4c:41:33:9b:35:3f:91:fa:57:fb:b7:01:
a3:e1:16:9f:1d:71:07:99:67:19:a3:78:29:93:26:
03:a0:75:04:c4:75:22:4b:fe:e5:40:55:30:35:ee:
e7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:05:CE:91:AC:35:21:D0:CF:8C:1E:19:59:4C:0E:62:F0:13:81:EC
X509v3 Authority Key Identifier:
keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/LgXOkaw1IdDPjB4ZWUwOYvATgew.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.46.188.0/23
Signature Algorithm: sha256WithRSAEncryption
17:4a:74:12:88:4c:4b:d2:e3:85:1b:f5:ef:e5:47:f1:86:95:
d5:ce:27:7f:59:59:cf:5c:b4:b2:d9:a4:f5:cf:b8:17:47:98:
62:d8:d5:d8:65:51:2f:07:66:b0:a5:20:a5:37:23:c6:b3:c6:
6f:8f:f3:0c:85:53:f5:b6:b4:1a:e0:c0:03:42:7b:bd:bc:72:
b4:41:f3:46:33:88:a4:50:e0:d4:3a:a9:d7:82:28:16:32:72:
53:41:32:f8:2b:72:57:ef:51:97:38:7c:d1:3e:ad:a1:d7:bf:
fa:2f:01:0d:d2:da:10:63:fb:93:8c:29:d4:f6:1c:74:e8:b2:
06:28:91:66:5d:ce:44:b5:98:9d:bc:be:7d:5e:be:35:e7:55:
a0:96:bf:68:d9:b4:a5:35:df:35:4c:3f:76:00:93:85:bb:69:
c7:46:6d:c5:c7:4f:cc:f4:7d:73:01:c1:b5:cc:32:1c:27:d4:
a9:e3:57:89:79:37:88:78:00:fe:eb:33:f8:97:1e:32:c6:33:
88:9d:81:2b:28:b2:e8:da:0a:99:7a:d9:ed:12:8f:eb:80:8f:
1a:49:c2:0d:d9:02:c5:54:4f:ce:52:e6:eb:8b:86:4a:0a:65:
e4:32:49:0c:e5:7e:56:95:54:bb:0d:50:49:68:1f:17:e7:86:
2b:ac:47:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org