Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ONENICE/PKxRYik5vb9rz6EylPONOO-NTEk.roa
File: PKxRYik5vb9rz6EylPONOO-NTEk.roa (raw, json)
Hash identifier: bsRI0a+mZLUgG6LDEll6l6+m8xidTLmygS04A/idHIU=
Subject key identifier: 3C:AC:51:62:29:39:BD:BF:6B:CF:A1:32:94:F3:8D:38:EF:8D:4C:49
Certificate issuer: /CN=544FCFCB2AC954F24022A9C26A77C23A8E8E1868
Certificate serial: 0AF6
Authority key identifier: 54:4F:CF:CB:2A:C9:54:F2:40:22:A9:C2:6A:77:C2:3A:8E:8E:18:68
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VE_PyyrJVPJAIqnCanfCOo6OGGg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ONENICE/PKxRYik5vb9rz6EylPONOO-NTEk.roa
Signing time: Wed 09 Dec 2020 08:08:55 +0000
ROA not before: Wed 09 Dec 2020 08:08:55 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17408
IP address blocks: 103.135.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2806 (0xaf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544FCFCB2AC954F24022A9C26A77C23A8E8E1868
Validity
Not Before: Dec 9 08:08:55 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3CAC51622939BDBF6BCFA13294F38D38EF8D4C49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:25:aa:62:23:e5:a1:0a:12:4b:ed:3f:85:d9:
9e:38:36:43:6c:20:d5:8d:8f:cc:e7:3b:cf:8b:a4:
a1:c8:34:d8:30:be:77:d9:b8:74:ca:42:d3:c1:1e:
e3:88:62:fb:c9:6a:4b:1e:07:1f:1b:84:65:6d:05:
02:36:19:a8:cc:dd:54:09:9d:f3:95:1e:d7:aa:48:
f2:d7:87:b5:69:39:5e:5b:1c:77:59:52:63:87:cc:
d3:76:93:5f:ba:b2:8c:9b:d1:7a:60:84:7d:02:87:
5f:b1:0b:6b:f1:b0:c6:f9:da:7f:06:2c:0a:03:78:
b2:37:bf:33:39:94:b7:6a:5a:ed:2c:c1:bf:cc:9b:
00:e1:cd:31:3d:47:b9:3a:c6:5f:63:de:c8:92:c5:
52:dc:1a:bd:be:7b:03:44:ee:b0:da:20:1a:31:e5:
bc:3f:b8:87:73:b2:d9:f1:fb:90:c5:cc:c8:95:1b:
a9:a2:bd:1b:27:11:25:c2:07:42:41:3e:c8:23:fc:
a6:cd:c5:d9:70:b2:21:05:5b:05:2a:0a:e7:eb:cc:
03:45:f5:1f:7e:a1:2e:90:55:2b:10:48:9c:31:88:
dc:d6:e5:98:57:f2:d1:8b:53:46:bb:41:04:f9:c4:
e7:81:52:34:5c:88:0e:a9:4b:c3:a9:99:00:78:7c:
60:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AC:51:62:29:39:BD:BF:6B:CF:A1:32:94:F3:8D:38:EF:8D:4C:49
X509v3 Authority Key Identifier:
keyid:54:4F:CF:CB:2A:C9:54:F2:40:22:A9:C2:6A:77:C2:3A:8E:8E:18:68
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONENICE/VE_PyyrJVPJAIqnCanfCOo6OGGg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VE_PyyrJVPJAIqnCanfCOo6OGGg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONENICE/PKxRYik5vb9rz6EylPONOO-NTEk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.64.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:83:2e:9e:6c:15:06:a9:ff:d5:ab:a1:ea:ab:0a:0b:69:d7:
13:2f:d0:de:24:5f:c7:69:13:9f:2e:a1:ba:74:b6:40:75:0e:
d1:a5:09:80:1f:fd:be:1b:30:c1:83:b0:74:db:30:73:2e:df:
f5:99:b7:dc:79:d9:6b:59:28:fc:f4:aa:61:e1:bb:e9:68:6a:
02:ff:b2:b8:c2:ec:e7:fd:59:0d:25:da:d1:f9:31:9a:1b:cc:
d2:11:2d:df:4d:83:a6:73:7c:00:ba:a8:93:3a:60:ff:80:09:
35:e2:ea:d8:43:95:61:06:5e:bb:94:5a:9a:11:d1:04:7c:b0:
51:49:37:0d:19:61:23:6c:48:3f:fd:2f:b0:15:1e:83:03:cd:
16:ea:56:fb:52:c1:ec:57:60:1f:c7:a3:ab:57:80:24:df:2a:
78:5e:e2:ea:7c:e5:33:05:b5:a3:4f:92:1e:9d:46:eb:8e:80:
f6:7b:14:40:af:1d:69:73:7b:cc:b9:db:0e:13:85:b7:fa:e1:
b5:e4:16:f3:69:9d:c0:61:38:86:d4:0d:bf:0e:49:4f:62:80:
f5:5f:92:4d:ef:bb:b1:1b:3a:90:dc:7d:60:62:f1:80:23:bf:
31:6c:c1:ff:99:4e:10:38:76:12:8d:75:6d:60:dd:ca:32:85:
72:b3:d6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org