Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ROUNDROAD/zAS5JIsCxjTakCvZ3v6x3EzSIWY.roa
File: zAS5JIsCxjTakCvZ3v6x3EzSIWY.roa (raw, json)
Hash identifier: 0OPchWT4t40Us80jtTtfcnE8VDsVvSKCr/nA4UEKrtw=
Subject key identifier: CC:04:B9:24:8B:02:C6:34:DA:90:2B:D9:DE:FE:B1:DC:4C:D2:21:66
Certificate issuer: /CN=10F0AFEDD16DF216580B4F8ED75AFCA328694F19
Certificate serial: 0B1A
Authority key identifier: 10:F0:AF:ED:D1:6D:F2:16:58:0B:4F:8E:D7:5A:FC:A3:28:69:4F:19
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EPCv7dFt8hZYC0-O11r8oyhpTxk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ROUNDROAD/zAS5JIsCxjTakCvZ3v6x3EzSIWY.roa
Signing time: Fri 01 Sep 2023 09:40:09 +0000
ROA not before: Fri 01 Sep 2023 09:40:09 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131149
IP address blocks: 103.123.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2842 (0xb1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10F0AFEDD16DF216580B4F8ED75AFCA328694F19
Validity
Not Before: Sep 1 09:40:09 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=CC04B9248B02C634DA902BD9DEFEB1DC4CD22166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:30:e3:5b:88:af:a7:4e:59:1c:1a:14:fd:c1:
8e:6a:8c:0f:cf:3f:db:15:82:7b:f1:0a:f0:28:6c:
03:c4:e4:40:b4:25:69:29:89:4c:2f:03:1e:d8:01:
d6:3b:0c:0c:cd:4c:bd:69:ba:e8:f8:52:f3:72:4a:
91:b3:24:47:c9:42:c0:b4:68:bc:8f:c2:ba:d1:96:
07:17:55:00:9d:35:12:07:34:9b:3a:67:9f:0c:c5:
be:8b:24:2f:d7:ed:63:91:ef:c5:b3:46:4b:b3:90:
94:b4:00:00:a2:0c:63:89:2c:41:d5:ad:fd:b9:6d:
32:4a:e5:b6:98:7e:a1:e3:a9:d5:4e:34:a0:54:03:
21:af:fd:88:30:7b:8e:4f:fe:c8:90:f6:6f:8c:09:
48:0c:6a:6d:da:76:fb:89:c5:98:35:b4:91:39:61:
85:dd:b0:0d:e9:eb:e3:53:8e:5e:07:40:af:43:4d:
4e:fd:40:3b:e9:03:aa:5c:57:9b:4e:a4:d7:dd:c7:
40:b6:c7:db:d0:ef:77:1b:a8:9f:12:78:17:8a:bf:
9d:e9:a8:15:f8:6d:d5:4e:c2:59:83:ce:45:51:fb:
5b:da:2b:9d:5a:d1:e5:fb:01:5c:b3:3a:81:f8:6d:
9e:8d:ca:0f:ae:fe:ba:e5:27:c7:b2:0e:5f:94:dd:
a2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:04:B9:24:8B:02:C6:34:DA:90:2B:D9:DE:FE:B1:DC:4C:D2:21:66
X509v3 Authority Key Identifier:
keyid:10:F0:AF:ED:D1:6D:F2:16:58:0B:4F:8E:D7:5A:FC:A3:28:69:4F:19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ROUNDROAD/EPCv7dFt8hZYC0-O11r8oyhpTxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EPCv7dFt8hZYC0-O11r8oyhpTxk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ROUNDROAD/zAS5JIsCxjTakCvZ3v6x3EzSIWY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.192.0/22
Signature Algorithm: sha256WithRSAEncryption
57:be:02:0a:d6:12:ae:21:68:52:83:f4:cc:e5:ee:46:7c:4f:
61:62:59:84:44:87:53:df:39:a4:45:55:20:cb:9e:4a:2a:ba:
8c:46:c0:d2:24:11:4d:93:76:29:58:34:c8:cd:6f:c9:02:3b:
4f:8a:1c:5e:06:e6:3d:f1:85:5f:b6:3a:05:15:70:80:83:f6:
b5:db:8e:ea:66:62:fb:e8:38:5f:7b:6a:6b:b1:48:54:ec:f0:
51:87:fa:75:66:38:f5:9e:bb:31:ce:9c:31:af:f1:85:ae:b4:
be:29:5f:a5:7e:20:20:7e:8b:85:18:24:68:43:13:45:3d:a7:
22:5a:cb:26:ae:31:a4:79:c0:38:3c:78:3c:de:6b:41:ed:b6:
0b:69:8a:d6:74:be:5a:f6:59:a6:78:a0:6b:42:26:6c:1e:6c:
e5:13:9a:60:c2:68:53:bf:f4:22:dd:62:13:92:89:ea:7e:d4:
42:47:0e:6c:ad:85:88:d9:4a:14:2d:6b:c7:a8:02:0a:7d:30:
fb:11:5f:26:a8:8b:7b:ad:82:fd:2b:df:0a:d4:fa:19:4f:92:
62:6b:3d:17:27:35:4c:39:53:85:ce:49:26:65:9c:6f:62:05:
b8:fa:93:94:cc:e1:5f:dc:9f:a1:3e:de:e1:cc:82:79:3c:74:
18:1c:c5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 12 07:36:52 2023 by rpki-client on console-ams.rpki-client.org