Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/vYEVpqg5XuyYbyOrODiWdMqkG-E.roa
File: vYEVpqg5XuyYbyOrODiWdMqkG-E.roa (raw, json)
Hash identifier: w7oCQcpJleZCkBl1yO3T2DdA1UMoTjuaoh+sqwfjQxc=
Subject key identifier: BD:81:15:A6:A8:39:5E:EC:98:6F:23:AB:38:38:96:74:CA:A4:1B:E1
Certificate issuer: /CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
Certificate serial: 0AFF
Authority key identifier: 99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/vYEVpqg5XuyYbyOrODiWdMqkG-E.roa
Signing time: Fri 01 Sep 2023 09:40:22 +0000
ROA not before: Fri 01 Sep 2023 09:40:22 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 48024
IP address blocks: 103.122.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2815 (0xaff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
Validity
Not Before: Sep 1 09:40:22 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=BD8115A6A8395EEC986F23AB38389674CAA41BE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:67:74:51:86:c6:44:ba:da:63:30:59:0b:
64:6c:87:e3:8c:c9:ea:f0:30:85:f0:e3:7c:40:ab:
8a:ca:d4:25:2b:92:df:4d:f5:33:b7:ae:8f:7e:4e:
85:91:e2:19:68:55:ee:76:3e:c1:e6:b5:b4:3f:a4:
03:e2:eb:f0:89:ab:42:9b:5a:82:cc:c1:b9:00:44:
7e:47:94:ec:c4:57:fe:31:36:4a:e7:4a:85:37:cf:
e7:ea:57:1b:3a:53:46:66:97:b6:e9:dc:5d:b9:0b:
a8:f3:41:f2:ed:ac:1c:d9:74:d2:aa:ab:9e:d8:09:
03:52:a7:b7:20:16:2d:28:92:8d:85:c5:02:17:de:
c0:a9:24:b4:b1:9e:2c:45:46:7b:57:cb:68:02:5d:
77:b2:ae:95:17:9d:95:79:8d:87:a7:1d:06:95:a3:
fa:ef:f2:9c:a9:7c:da:e7:7c:33:0b:c9:df:92:62:
6f:e3:c1:5e:61:63:40:d5:c0:f9:33:29:41:bc:f9:
bc:34:1c:d8:ff:04:e4:63:02:bc:55:c4:b1:f9:df:
7e:1e:be:7a:95:c1:e6:33:ae:2e:aa:3e:a5:cd:64:
75:a9:e7:87:9f:a3:18:1d:00:4d:ee:53:66:2c:f9:
a5:65:ce:16:3d:43:a5:a5:08:4b:da:72:e0:95:ff:
c2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:81:15:A6:A8:39:5E:EC:98:6F:23:AB:38:38:96:74:CA:A4:1B:E1
X509v3 Authority Key Identifier:
keyid:99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/vYEVpqg5XuyYbyOrODiWdMqkG-E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.20.0/22
Signature Algorithm: sha256WithRSAEncryption
18:48:c3:0a:70:81:88:17:66:13:30:a2:da:68:7d:c7:2e:4b:
c9:ed:ac:c1:c3:40:4a:9e:b8:dd:52:1b:6a:57:bd:66:91:fd:
09:d3:96:c9:4c:a9:42:9d:3f:36:5b:f2:fa:67:5b:60:02:f3:
2d:20:2a:92:ab:af:9e:0b:08:bb:24:14:65:b7:58:55:f1:31:
da:63:5b:6f:87:a6:2d:9c:1d:76:bd:27:5e:fb:37:e2:0d:c1:
a6:23:fd:6c:ac:e7:bf:32:46:fa:8c:35:5c:32:d4:a3:de:9b:
e0:91:a4:48:bf:92:ad:ed:a4:7b:f1:05:30:fd:b2:7a:22:70:
cb:72:09:99:34:5e:cd:5e:e0:e9:cd:99:eb:95:e5:e5:92:c5:
5e:81:05:02:20:b0:a8:ae:1d:26:4e:c6:08:73:a3:1f:6e:39:
7a:78:da:d7:73:c6:28:08:0a:49:5b:b7:ec:21:f7:b9:0c:16:
31:e3:ec:68:5e:c4:56:56:48:06:70:32:07:c9:8b:39:fb:8e:
ba:67:ab:3c:b1:43:f8:d2:6e:95:43:9d:b4:e4:08:f4:e9:66:
42:ea:86:e9:d1:f1:7f:60:df:5b:ec:ef:25:7b:89:30:f8:15:
d4:b8:12:80:70:68:97:e8:e5:88:24:67:26:2a:ed:67:8f:dd:
24:81:e6:46
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org