Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PARADISE/-I__hvTIKNaJbHFcJPXJ-qpxNus.roa
File: -I__hvTIKNaJbHFcJPXJ-qpxNus.roa (raw, json)
Hash identifier: X7fCNrP0/f7La8ldSoni09ZmeLK0UcdAS3Qo+8dZOO8=
Subject key identifier: F8:8F:FF:86:F4:C8:28:D6:89:6C:71:5C:24:F5:C9:FA:AA:71:36:EB
Certificate issuer: /CN=E27749EAA557BCA5645A275E3DE0A3AF5347F7C3
Certificate serial: A5
Authority key identifier: E2:77:49:EA:A5:57:BC:A5:64:5A:27:5E:3D:E0:A3:AF:53:47:F7:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4ndJ6qVXvKVkWidePeCjr1NH98M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PARADISE/-I__hvTIKNaJbHFcJPXJ-qpxNus.roa
Signing time: Wed 22 Jun 2022 06:41:28 +0000
ROA not before: Wed 22 Jun 2022 06:41:28 +0000
ROA not after: Thu 03 Nov 2022 05:41:53 +0000
asID: 45102
IP address blocks: 103.175.152.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E27749EAA557BCA5645A275E3DE0A3AF5347F7C3
Validity
Not Before: Jun 22 06:41:28 2022 GMT
Not After : Nov 3 05:41:53 2022 GMT
Subject: CN=F88FFF86F4C828D6896C715C24F5C9FAAA7136EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:38:e4:bc:c7:26:39:b4:1b:3f:eb:a0:1d:a9:
4d:55:70:a0:59:c6:6b:36:2c:93:b6:7b:e7:d2:08:
aa:69:56:0a:ec:70:91:4d:7c:9c:bb:6f:49:de:1a:
b6:68:bb:da:ed:0e:0c:0d:a0:d4:6b:dc:aa:d1:c3:
65:a7:aa:57:fd:8b:ba:12:0b:56:07:7f:4f:dd:cb:
e0:ba:c4:18:b6:c1:e8:12:ee:5d:2d:6e:5b:05:98:
ad:39:aa:6d:00:9f:94:ab:e4:c2:5a:72:66:e1:30:
74:e1:6e:f1:ba:f9:43:de:57:c6:ff:2e:87:40:39:
73:4a:bd:a0:44:6b:d8:92:12:fa:0e:59:dc:74:ca:
7e:29:86:bf:f6:73:73:b7:0e:d4:36:d6:65:df:48:
d4:5a:48:af:5a:a5:00:77:c1:42:db:a4:9a:7d:81:
db:cb:0a:65:93:c2:40:0a:28:de:04:3d:cd:5d:0a:
15:b9:71:88:e3:a4:16:69:7b:b4:0b:9e:02:ce:98:
30:57:5b:09:8b:c3:c3:4e:c1:17:df:29:76:75:5b:
1d:63:b9:46:40:a6:d6:9a:e4:52:c3:84:aa:60:3a:
c2:23:54:b2:66:8f:a7:e6:57:14:b3:38:0d:96:49:
67:1e:c5:63:7c:99:5d:00:43:6a:63:b8:4f:90:55:
b3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8F:FF:86:F4:C8:28:D6:89:6C:71:5C:24:F5:C9:FA:AA:71:36:EB
X509v3 Authority Key Identifier:
keyid:E2:77:49:EA:A5:57:BC:A5:64:5A:27:5E:3D:E0:A3:AF:53:47:F7:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PARADISE/4ndJ6qVXvKVkWidePeCjr1NH98M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4ndJ6qVXvKVkWidePeCjr1NH98M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PARADISE/-I__hvTIKNaJbHFcJPXJ-qpxNus.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.152.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:83:7b:b8:17:17:55:99:21:fd:84:de:f9:59:cd:62:c6:47:
68:6c:50:9e:f5:62:b5:51:f1:62:8e:23:d2:2a:ee:1a:a1:13:
1d:9d:53:af:e1:5a:ed:66:87:33:a7:f7:b5:fa:df:75:15:a7:
58:78:f4:f1:0d:39:1c:97:86:8c:88:ee:f0:41:5e:7e:93:60:
1c:64:a9:52:cb:4b:84:4d:1c:c3:fc:7d:7e:90:c1:bb:5a:01:
92:60:26:e2:52:ae:52:a5:ff:91:72:06:aa:9d:de:bc:bd:f9:
42:e8:99:74:41:b0:ef:2d:ca:0f:7d:8b:5a:86:da:e5:aa:7a:
fb:4f:1f:6a:b7:f3:72:5e:d3:cb:03:5b:2d:4f:bc:28:11:a1:
07:c9:9c:96:11:c6:60:f3:a9:14:b0:25:69:31:85:8b:cf:ec:
1a:20:d0:0e:d2:05:6f:58:ef:d1:c5:9d:cf:43:ef:c9:92:7d:
8b:67:2a:39:aa:fa:8d:48:33:f1:0c:b7:75:0d:ed:88:0d:ff:
a1:12:66:76:ed:b1:be:d4:f9:7c:fa:5e:fe:91:4a:8d:0f:b0:
24:22:f2:a4:f2:e7:56:bd:8a:75:de:27:e3:3a:e9:d0:e1:ee:
0a:77:95:27:81:e6:25:eb:c2:1c:51:b7:53:74:5f:82:e4:44:
41:80:d2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org