Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/3fbKXNzCOaJvXfvMNI0Krujy0qo.roa
File: 3fbKXNzCOaJvXfvMNI0Krujy0qo.roa (raw, json)
Hash identifier: DOf8LdW9a1RrWGxAibhsQSa3ZrVxIWR8N8fJwZx+w3s=
Subject key identifier: DD:F6:CA:5C:DC:C2:39:A2:6F:5D:FB:CC:34:8D:0A:AE:E8:F2:D2:AA
Certificate issuer: /CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
Certificate serial: 0B21
Authority key identifier: 99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/3fbKXNzCOaJvXfvMNI0Krujy0qo.roa
Signing time: Sat 07 Oct 2023 08:03:45 +0000
ROA not before: Sat 07 Oct 2023 08:03:45 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18464
IP address blocks: 103.122.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2849 (0xb21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
Validity
Not Before: Oct 7 08:03:45 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DDF6CA5CDCC239A26F5DFBCC348D0AAEE8F2D2AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0e:6b:46:82:dd:ca:b3:1b:e4:10:fd:ef:c6:
b4:b9:31:bf:d9:33:75:82:5e:b6:4a:d7:85:72:72:
fa:65:00:4e:1c:3c:0a:42:c8:de:be:ec:d0:5e:36:
07:24:6f:ff:cc:7b:cf:45:91:b4:6a:94:85:fd:49:
02:ec:ef:37:f2:3a:de:a7:12:ef:d9:14:9d:f6:4f:
06:37:a4:47:89:9a:f2:9f:ae:79:05:27:2b:db:fb:
9a:eb:c6:65:8c:e8:ec:c2:96:01:98:af:ae:41:c0:
c4:5c:5a:44:8d:39:a3:35:f6:f7:61:16:f0:d8:6b:
20:4d:4f:aa:3a:35:c7:be:91:99:05:ab:e3:6a:54:
39:43:73:9e:bb:a5:d2:4f:b1:9e:a9:61:75:89:01:
b7:18:a4:cd:ce:da:be:67:23:f1:df:47:c5:df:14:
44:39:1d:91:03:0b:72:1f:c6:f5:86:02:4e:68:9e:
81:a5:6f:90:4e:08:84:36:4e:00:7e:ea:ce:b1:c9:
4c:3c:3a:b6:15:e9:59:1f:f3:2a:31:92:d1:9f:08:
ae:4a:39:70:3b:0c:d8:29:32:f6:2b:11:2e:b1:23:
c2:30:0b:8d:4c:59:d1:94:57:cb:8d:03:2a:58:98:
e8:46:15:33:13:74:bf:5e:31:7f:eb:e8:4b:29:15:
79:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F6:CA:5C:DC:C2:39:A2:6F:5D:FB:CC:34:8D:0A:AE:E8:F2:D2:AA
X509v3 Authority Key Identifier:
keyid:99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/3fbKXNzCOaJvXfvMNI0Krujy0qo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.23.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:d9:a8:32:6e:00:84:43:63:d0:61:7f:44:ed:35:df:49:cf:
7e:f1:ac:a0:39:a6:4e:ef:57:05:38:28:1d:c0:41:f7:04:e0:
99:97:76:a6:b3:24:d7:6a:45:76:90:c3:2e:0e:76:9e:40:b8:
e8:64:27:d2:3e:05:af:5d:c4:63:63:77:de:b6:d9:72:06:1a:
0e:c4:b2:e1:6f:90:a8:f4:e3:34:cb:dc:16:a0:e1:60:35:c7:
5d:9f:a6:e9:ca:d1:cf:a7:44:de:44:f9:32:40:ee:5a:99:dc:
a1:2d:c5:79:35:ae:2c:9a:83:94:a7:3e:ad:61:37:f7:d6:21:
d5:88:d9:e5:88:01:a5:ee:03:3c:b1:4d:2a:f9:4a:4e:95:50:
23:ac:41:b0:61:bf:cf:fb:f7:94:a8:f7:09:13:6d:96:92:89:
03:07:69:ae:dd:2d:83:0a:a9:7e:3b:21:cb:26:46:f8:59:7f:
a0:d0:93:f0:08:70:39:60:11:e8:3a:b5:0c:e2:27:94:9e:30:
9b:4a:db:35:66:2d:c5:90:47:80:87:71:49:2c:38:01:9a:75:
61:6f:d4:1f:f6:35:f4:a5:1e:1c:2d:98:9c:8f:15:2f:e1:13:
c3:ff:a0:f8:05:7a:50:57:f9:4b:8f:f2:cc:89:28:a4:af:7c:
33:b6:28:85
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICCyEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTkz
RjcyODBGMUY5QjY1NDM5REQ2NUFERkI2OENBMEQ2Qzk5QkVDNTAeFw0yMzEwMDcw
ODAzNDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERERjZDQTVDRENDMjM5
QTI2RjVERkJDQzM0OEQwQUFFRThGMkQyQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7DmtGgt3KsxvkEP3vxrS5Mb/ZM3WCXrZK14VycvplAE4cPApC
yN6+7NBeNgckb//Me89FkbRqlIX9SQLs7zfyOt6nEu/ZFJ32TwY3pEeJmvKfrnkF
Jyvb+5rrxmWM6OzClgGYr65BwMRcWkSNOaM19vdhFvDYayBNT6o6Nce+kZkFq+Nq
VDlDc567pdJPsZ6pYXWJAbcYpM3O2r5nI/HfR8XfFEQ5HZEDC3IfxvWGAk5onoGl
b5BOCIQ2TgB+6s6xyUw8OrYV6Vkf8yoxktGfCK5KOXA7DNgpMvYrES6xI8IwC41M
WdGUV8uNAypYmOhGFTMTdL9eMX/r6EspFXmRAgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQU3fbKXNzCOaJvXfvMNI0Krujy0qowHwYDVR0jBBgwFoAUmT9ygPH5tlQ53WWt
+2jKDWyZvsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FLVVJB
SE9TVC9tVDl5Z1BINXRsUTUzV1d0LTJqS0RXeVp2c1UuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL21UOXlnUEg1dGxRNTNXV3QtMmpLRFd5WnZzVS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBS1VSQUhPU1QvM2ZiS1hOekNP
YUp2WGZ2TU5JMEtydWp5MHFvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGd6FzANBgkqhkiG9w0BAQsFAAOCAQEAuNmoMm4AhENj0GF/RO0130nP
fvGsoDmmTu9XBTgoHcBB9wTgmZd2prMk12pFdpDDLg52nkC46GQn0j4Fr13EY2N3
3rbZcgYaDsSy4W+QqPTjNMvcFqDhYDXHXZ+m6crRz6dE3kT5MkDuWpncoS3FeTWu
LJqDlKc+rWE399Yh1YjZ5YgBpe4DPLFNKvlKTpVQI6xBsGG/z/v3lKj3CRNtlpKJ
Awdprt0tgwqpfjshyyZG+Fl/oNCT8AhwOWAR6Dq1DOInlJ4wm0rbNWYtxZBHgIdx
SSw4AZp1YW/UH/Y19KUeHC2YnI8VL+ETw/+g+AV6UFf5S4/yzIkopK98M7YohQ==
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org