Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PCALT/_QZXj5OAg5NxmZHqDo3paz9PfG0.roa
File: _QZXj5OAg5NxmZHqDo3paz9PfG0.roa (raw, json)
Hash identifier: EikBD4l0OinXdwYROQptHoEAWmknBK1GpOmj+V/p4f4=
Subject key identifier: FD:06:57:8F:93:80:83:93:71:99:91:EA:0E:8D:E9:6B:3F:4F:7C:6D
Certificate issuer: /CN=B81BB40033C359BA2C7E6F0B83D7D79B2D36BF32
Certificate serial: 0937
Authority key identifier: B8:1B:B4:00:33:C3:59:BA:2C:7E:6F:0B:83:D7:D7:9B:2D:36:BF:32
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/uBu0ADPDWbosfm8Lg9fXmy02vzI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PCALT/_QZXj5OAg5NxmZHqDo3paz9PfG0.roa
Signing time: Tue 29 Sep 2020 10:05:21 +0000
ROA not before: Tue 29 Sep 2020 10:05:21 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131646
IP address blocks: 103.139.96.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2359 (0x937)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B81BB40033C359BA2C7E6F0B83D7D79B2D36BF32
Validity
Not Before: Sep 29 10:05:21 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FD06578F93808393719991EA0E8DE96B3F4F7C6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:45:31:a2:b3:a6:b5:c2:82:5a:3b:f0:7c:
fd:ab:b8:e3:a1:ac:31:04:fb:b7:fd:0b:50:2d:e6:
f7:82:a2:e3:84:08:ab:ca:ac:75:6c:ac:c1:6d:43:
db:90:a2:9b:95:d5:37:7c:c6:6e:b7:4b:20:e5:15:
e8:27:53:8b:7e:21:91:31:bd:e3:3c:f5:30:37:29:
02:49:06:29:7f:14:57:b3:61:02:45:bb:2d:b1:c7:
12:4c:b9:e7:69:db:4a:b0:8b:0f:db:28:07:e8:35:
07:4d:72:7b:7c:13:1f:ac:9e:df:2f:ba:85:06:0f:
14:95:2d:9f:ef:77:53:96:94:0f:26:a1:12:ce:df:
a5:62:2b:76:c7:c0:03:ca:8d:88:18:3b:a5:49:f5:
41:cc:ef:da:36:67:ef:3f:9d:39:a7:66:fb:2c:37:
8a:26:1e:37:91:71:6e:50:5d:f4:dd:65:1f:1a:92:
d4:ec:6f:1a:78:dc:f7:8b:ef:02:fa:f1:df:a7:30:
28:f9:15:c8:ae:1c:0c:3d:f3:d8:5a:ff:e6:b1:76:
cf:e2:ca:fb:e4:7b:d7:ec:5e:b0:ab:e9:41:4e:e3:
77:f5:f7:69:c8:2b:42:0b:20:94:0d:53:38:57:1a:
6f:65:7c:1e:25:24:11:c2:08:ab:03:68:49:63:e7:
e3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:06:57:8F:93:80:83:93:71:99:91:EA:0E:8D:E9:6B:3F:4F:7C:6D
X509v3 Authority Key Identifier:
keyid:B8:1B:B4:00:33:C3:59:BA:2C:7E:6F:0B:83:D7:D7:9B:2D:36:BF:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PCALT/uBu0ADPDWbosfm8Lg9fXmy02vzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/uBu0ADPDWbosfm8Lg9fXmy02vzI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PCALT/_QZXj5OAg5NxmZHqDo3paz9PfG0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.96.0/23
Signature Algorithm: sha256WithRSAEncryption
93:50:7f:da:e1:c0:4b:59:58:25:dc:d4:35:84:f5:7e:3e:b7:
e9:2d:c0:03:04:d6:53:33:21:d2:27:ca:97:a8:bf:6e:b3:11:
53:40:b7:9e:08:a9:16:0c:09:db:90:43:5b:5a:dd:61:e4:1e:
b5:aa:f3:66:54:65:c1:bb:48:82:ea:a4:a8:98:6a:37:71:a6:
d6:e9:01:3c:c4:e2:f6:0b:2f:fa:6e:0d:2d:f7:71:48:ea:87:
45:82:8f:8d:ee:32:55:d2:f6:ba:11:e3:5c:a1:f6:e2:04:fe:
d2:b2:48:50:4f:53:57:f2:d3:64:9c:02:a3:ad:b2:22:35:7e:
b6:15:93:60:19:f2:b5:d4:1c:c0:82:90:bf:21:1d:7c:1b:39:
45:cb:ff:4b:5c:30:96:99:3b:e9:5a:6f:bc:e8:64:f0:12:2c:
51:c3:fa:e3:c8:00:34:ca:78:cb:74:c0:66:6e:3a:32:90:57:
21:81:6b:39:ef:11:b7:c1:82:ff:2a:08:d6:1d:85:d9:95:fa:
d2:7d:d5:57:b2:78:7e:1a:eb:40:4e:b5:ef:a3:13:2b:38:22:
15:d1:6d:da:ec:bf:39:d2:7a:70:01:77:43:30:fe:2e:7d:c5:
58:cb:e2:a6:4f:03:5c:3d:4a:42:6c:83:a7:4b:b6:34:33:da:
4f:61:40:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org