Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/9n3Oj7wh_GZrX_SsW_M18m1Dc4A.roa
File: 9n3Oj7wh_GZrX_SsW_M18m1Dc4A.roa (raw, json)
Hash identifier: 1q3RE8csjcGFj1LCy0V2LrH4hFVrVMTKqCU8PUD1/q0=
Subject key identifier: F6:7D:CE:8F:BC:21:FC:66:6B:5F:F4:AC:5B:F3:35:F2:6D:43:73:80
Certificate issuer: /CN=7B8257FFDC7CD1CB4196129CD40493352BC83BB9
Certificate serial: 021E
Authority key identifier: 7B:82:57:FF:DC:7C:D1:CB:41:96:12:9C:D4:04:93:35:2B:C8:3B:B9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/e4JX_9x80ctBlhKc1ASTNSvIO7k.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/9n3Oj7wh_GZrX_SsW_M18m1Dc4A.roa
Signing time: Fri 01 Sep 2023 09:35:12 +0000
ROA not before: Fri 01 Sep 2023 09:35:12 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38853
IP address blocks: 103.169.46.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 542 (0x21e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B8257FFDC7CD1CB4196129CD40493352BC83BB9
Validity
Not Before: Sep 1 09:35:12 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F67DCE8FBC21FC666B5FF4AC5BF335F26D437380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1b:6f:83:72:7f:c6:84:f1:ee:38:44:39:f6:
4f:4a:73:da:05:29:61:40:45:1a:f5:5f:80:b2:da:
51:e7:79:53:94:75:47:08:b5:82:85:4e:ce:6a:6c:
c7:7a:6a:fb:05:1b:2a:45:b3:ce:07:64:4c:91:6d:
79:ec:0e:64:4e:e4:c5:a2:48:fc:4a:60:e2:37:23:
87:0f:78:fe:6a:ef:fe:3c:99:d6:c3:0e:84:34:3a:
51:97:67:0d:ce:b6:3c:7a:9f:41:cb:ed:2c:cf:9d:
13:4f:53:3d:b3:73:d0:15:8b:d2:13:7a:99:07:97:
95:da:92:a7:b3:47:5b:ee:cd:8f:62:a3:eb:c0:6b:
6f:be:e7:0b:8e:8e:6f:54:a7:79:69:95:8b:98:04:
02:4d:c5:c5:9f:62:63:69:d0:9e:bf:a6:da:91:a4:
19:88:a4:5e:a8:c2:b3:62:18:a7:b6:59:01:de:87:
96:1e:67:05:50:80:5f:44:73:fb:d5:aa:29:62:77:
01:8c:2d:c5:03:fe:d5:b3:53:28:06:1f:a8:24:87:
ea:7f:78:65:14:f9:fa:07:16:42:16:f0:7f:be:98:
d0:f1:52:a0:8d:34:8d:47:3a:95:c6:92:ca:f8:74:
7b:8a:e8:3f:77:9a:2e:5c:81:58:c1:d0:5d:79:5e:
b6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7D:CE:8F:BC:21:FC:66:6B:5F:F4:AC:5B:F3:35:F2:6D:43:73:80
X509v3 Authority Key Identifier:
keyid:7B:82:57:FF:DC:7C:D1:CB:41:96:12:9C:D4:04:93:35:2B:C8:3B:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/e4JX_9x80ctBlhKc1ASTNSvIO7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/e4JX_9x80ctBlhKc1ASTNSvIO7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/9n3Oj7wh_GZrX_SsW_M18m1Dc4A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.169.46.0/23
Signature Algorithm: sha256WithRSAEncryption
04:dd:67:29:e5:3c:05:c3:34:31:1a:63:be:bc:40:05:7d:f1:
0d:22:08:e9:ce:40:f7:48:f5:e1:dd:85:7b:55:fe:20:54:7e:
37:81:d8:b4:6a:69:35:a3:8c:12:a0:c6:a8:9d:ab:e3:63:93:
4e:a2:94:07:86:ab:b9:ee:8b:7f:26:99:4f:4a:f2:71:e6:f0:
9d:65:47:07:fc:1a:27:4d:0d:13:be:6b:d0:37:ab:cb:a3:e5:
1d:89:2d:f5:ec:0f:ca:b9:54:c5:1d:46:56:d3:bf:1e:46:6c:
02:22:75:e2:54:1f:24:d3:0f:44:cc:05:09:96:0d:11:e7:93:
fa:5a:99:2c:a6:e5:54:e9:9b:58:5f:e4:f2:51:6d:1b:82:35:
a1:be:23:fe:8b:b7:07:a4:14:35:e1:25:4a:ab:e2:75:f6:f9:
e4:47:8b:57:2c:1b:59:13:1a:f1:7d:94:9b:3e:5d:c5:7e:a3:
12:06:9a:20:c2:d4:38:60:2e:64:f3:92:43:5d:b6:9f:f8:4b:
47:1c:f9:9b:d1:3e:8b:e9:f8:27:f7:72:fa:c2:73:ca:c1:c4:
9c:90:94:ad:65:2f:f5:dd:b7:ca:0f:f2:d6:6f:84:c8:85:07:
94:0f:d3:8e:97:3c:5c:bc:ec:6a:64:11:28:c2:ec:83:3d:7d:
a8:5e:5f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org