Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEICHANG/MiFZ8hx-yQqPrREzBrXjozn9wSg.roa
File: MiFZ8hx-yQqPrREzBrXjozn9wSg.roa (raw, json)
Hash identifier: 6iu2laWbnBJGsrCxECWn0MpjSyFbtZ8qDk/CFxvOb4k=
Subject key identifier: 32:21:59:F2:1C:7E:C9:0A:8F:AD:11:33:06:B5:E3:A3:39:FD:C1:28
Certificate issuer: /CN=53AB025E558614A6AC89DCA0302DD23BD596A256
Certificate serial: F0
Authority key identifier: 53:AB:02:5E:55:86:14:A6:AC:89:DC:A0:30:2D:D2:3B:D5:96:A2:56
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/U6sCXlWGFKasidygMC3SO9WWolY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICHANG/MiFZ8hx-yQqPrREzBrXjozn9wSg.roa
Signing time: Wed 04 Sep 2024 09:16:40 +0000
ROA not before: Wed 04 Sep 2024 09:16:40 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131642
IP address blocks: 103.99.140.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53AB025E558614A6AC89DCA0302DD23BD596A256
Validity
Not Before: Sep 4 09:16:40 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=322159F21C7EC90A8FAD113306B5E3A339FDC128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:a9:d5:90:cd:37:2c:a9:ad:07:5c:30:cb:
37:ad:ec:ff:4b:96:1f:db:a6:4f:cd:04:da:a6:ab:
9a:c5:e7:9f:b6:d3:b2:fe:ec:8a:0a:5e:15:6c:8f:
a1:5d:1e:f9:33:dd:59:2a:f2:73:a9:8d:c6:47:5a:
c1:a3:3a:97:8b:24:7a:63:2c:22:d0:40:e9:eb:77:
33:b6:e5:73:12:c1:93:2d:ff:00:93:81:c5:d6:5f:
fb:11:3a:f4:e6:90:fe:3a:b5:53:13:b4:ca:2d:a4:
3b:20:1e:9a:88:44:58:1e:f3:14:82:66:68:d7:18:
5e:bb:3a:6d:87:07:a3:40:0c:86:3d:cc:23:7b:57:
b9:1c:d0:93:9e:a2:33:f9:b5:ec:3a:c0:ca:1a:f9:
48:70:36:97:37:72:b6:11:48:76:b2:87:d0:43:e4:
80:28:30:67:e1:90:a0:6c:99:dd:47:ff:e0:6a:eb:
4c:8c:5a:92:4b:c6:17:ef:4c:6c:cd:3b:87:88:d6:
5f:0c:7e:d6:58:e5:53:eb:95:a1:f0:27:34:bb:a6:
29:74:fa:05:6b:87:c1:da:df:d8:ad:7b:c0:fb:41:
5b:1e:3d:00:be:4b:3a:cc:db:8f:93:72:09:35:e8:
50:32:eb:76:03:e5:e5:0d:f9:17:e2:d2:be:78:da:
b2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:21:59:F2:1C:7E:C9:0A:8F:AD:11:33:06:B5:E3:A3:39:FD:C1:28
X509v3 Authority Key Identifier:
keyid:53:AB:02:5E:55:86:14:A6:AC:89:DC:A0:30:2D:D2:3B:D5:96:A2:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICHANG/U6sCXlWGFKasidygMC3SO9WWolY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/U6sCXlWGFKasidygMC3SO9WWolY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICHANG/MiFZ8hx-yQqPrREzBrXjozn9wSg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.140.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:0d:ef:0d:64:23:ba:1a:6f:7c:ea:dd:9e:15:ce:c2:10:dc:
d2:bf:61:40:de:3a:3c:f2:66:62:af:43:90:db:28:1d:8a:bb:
7a:ea:37:4a:4a:c2:89:89:22:00:ae:90:b0:ba:4d:d8:d6:f7:
cd:d3:86:8d:5a:18:6c:dd:59:3e:61:eb:1d:41:ef:ea:ef:e7:
a0:61:62:de:a0:29:ff:76:97:a3:66:b0:90:8a:77:99:2b:d2:
24:09:10:ff:8a:47:6e:c5:99:e8:a4:4d:04:c7:98:ed:bf:d1:
4c:0b:2f:54:b0:a8:82:08:94:c5:05:06:3e:65:f7:a4:af:48:
68:53:18:b7:02:aa:0e:e0:97:f4:a7:75:20:90:d6:26:30:4b:
b6:ba:95:56:e1:a7:ea:80:4a:b1:68:e2:22:aa:08:77:2b:d7:
c3:a8:e9:39:25:6e:33:1c:58:92:45:00:f4:0f:3d:d5:de:f8:
a1:3d:9c:f5:bb:48:23:ed:74:d4:b2:ab:98:6e:56:a3:74:b0:
07:9e:d4:c6:88:cf:6f:f3:7b:1c:62:70:9e:d5:81:6d:a9:e1:
b4:ed:f7:6e:37:71:75:2d:ac:36:51:f2:16:96:99:66:fa:c4:
8a:fb:2e:86:8a:8e:6f:26:66:78:96:09:04:16:c8:c6:fc:53:
bc:af:4f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 22 22:34:31 2024 by rpki-client on console-fra.rpki-client.org