Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PQS/8hhrrRWVDDXGc9xI5Ez8WoFPDQA.roa
File: 8hhrrRWVDDXGc9xI5Ez8WoFPDQA.roa (raw, json)
Hash identifier: 9Dq0YjgR0uXeAA8GSwCRkSdGPP8riHaICDG8dBrDlYo=
Subject key identifier: F2:18:6B:AD:15:95:0C:35:C6:73:DC:48:E4:4C:FC:5A:81:4F:0D:00
Certificate issuer: /CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439
Certificate serial: 0E57
Authority key identifier: C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/8hhrrRWVDDXGc9xI5Ez8WoFPDQA.roa
Signing time: Fri 01 Sep 2023 09:36:34 +0000
ROA not before: Fri 01 Sep 2023 09:36:34 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18178
IP address blocks: 103.137.62.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3671 (0xe57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439
Validity
Not Before: Sep 1 09:36:34 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F2186BAD15950C35C673DC48E44CFC5A814F0D00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b4:5f:8d:87:e8:78:a9:aa:f8:f9:ae:e8:d5:
9c:84:61:1b:42:7a:90:17:8e:15:40:5b:64:48:58:
5d:e6:3e:78:b8:6f:f5:1a:01:b5:83:25:d9:2a:3b:
5f:b2:30:a1:71:3f:d9:dc:61:2d:eb:54:32:d2:73:
03:97:e1:d4:0a:1e:92:3d:47:27:ec:be:c0:4a:33:
db:64:06:d5:1f:b8:dc:ef:3f:6e:54:08:8a:08:d9:
2a:d8:97:52:0d:54:07:1b:b5:ae:09:14:a3:79:04:
f2:91:d6:00:41:98:af:a4:fd:49:47:21:c8:ff:8c:
99:37:01:3d:9d:c9:3d:29:73:9a:55:3e:81:f7:6d:
7c:67:1b:40:6e:28:77:c9:19:47:b2:7a:fe:d3:63:
aa:82:36:50:98:2a:01:fe:17:50:42:20:97:be:44:
94:0c:01:93:38:4e:82:b4:d7:f0:c7:6b:cc:16:db:
2f:06:e7:89:03:36:49:2f:45:24:43:ea:60:f7:42:
4b:fd:01:1c:5e:47:90:67:c0:27:b8:77:93:03:cf:
2a:36:54:52:7d:4b:14:4f:ac:93:24:69:b3:b0:86:
3b:a2:39:fe:37:63:ed:9b:0f:57:de:56:bf:c4:52:
e2:f6:c8:cf:12:a9:9e:54:fe:19:88:6a:d2:9b:a7:
fa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:18:6B:AD:15:95:0C:35:C6:73:DC:48:E4:4C:FC:5A:81:4F:0D:00
X509v3 Authority Key Identifier:
keyid:C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/wU-s_UXCwCdo6CcvT7g_su2vdDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/8hhrrRWVDDXGc9xI5Ez8WoFPDQA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.62.0/23
Signature Algorithm: sha256WithRSAEncryption
50:3a:76:df:6a:e9:92:04:5e:8d:4f:9d:30:cc:32:6c:52:3b:
af:82:0b:fa:be:e5:8e:8a:b8:a5:77:b2:12:21:29:be:06:a2:
e1:24:ba:a0:cf:45:c1:ef:ea:a4:70:3f:a6:44:ef:c0:ec:49:
5b:20:12:e2:29:d6:69:52:79:6c:19:e1:ae:7d:f1:26:c9:5c:
47:48:0d:c5:bc:db:99:7f:dc:a5:0c:44:d6:a0:0b:31:67:9f:
45:b9:2b:fb:a3:15:21:ce:72:10:40:07:13:87:18:d3:25:71:
5a:22:e5:d6:0d:b4:7a:0b:ec:eb:75:f1:80:04:19:0c:64:44:
60:b6:d6:97:fc:44:13:ca:32:9a:00:d2:22:e0:94:ac:89:ad:
a7:64:b3:b0:92:90:1a:42:ed:48:54:aa:f3:b8:53:2c:2c:00:
ee:2b:2b:5d:be:5a:b4:99:12:93:5b:11:5e:be:d9:f9:af:35:
e0:01:15:38:58:d9:08:b4:97:da:b7:3e:3e:1e:81:03:86:72:
78:62:6e:a6:09:eb:ab:86:91:8d:2a:2d:32:46:a2:88:71:19:
ee:32:27:09:ed:b7:1f:05:f4:9f:1a:e8:e5:21:b8:9c:d8:84:
bf:db:69:e8:34:57:a7:ed:74:54:d3:1b:64:bc:e6:08:65:29:
f4:55:cc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org