Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/51IN6sRmcdNSKpl8pgPGiLap3ZY.roa
File: 51IN6sRmcdNSKpl8pgPGiLap3ZY.roa (raw, json)
Hash identifier: +H3eWgyXiABHbPWxGfWxbKhHX97Gbfgx/rq5i9zE63Y=
Subject key identifier: E7:52:0D:EA:C4:66:71:D3:52:2A:99:7C:A6:03:C6:88:B6:A9:DD:96
Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Certificate serial: 1219
Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/51IN6sRmcdNSKpl8pgPGiLap3ZY.roa
Signing time: Fri 01 Sep 2023 09:41:07 +0000
ROA not before: Fri 01 Sep 2023 09:41:07 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 14618
IP address blocks: 103.123.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4633 (0x1219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Validity
Not Before: Sep 1 09:41:07 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E7520DEAC46671D3522A997CA603C688B6A9DD96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:c9:da:7e:ac:c7:2b:40:69:6f:93:58:f9:
69:bd:aa:dd:ff:05:6c:64:61:cc:f2:72:6f:57:2d:
8c:b2:06:c1:a0:5d:ea:e6:6c:82:cb:39:e0:b6:02:
5b:89:14:0a:e4:58:ef:81:ad:3f:ee:49:5a:92:7c:
70:f5:33:76:95:78:e1:58:19:f4:1a:8b:52:d1:d9:
c4:13:98:d5:f6:e3:0e:ff:7f:25:bb:40:24:1e:48:
4a:04:92:45:25:c5:bd:c5:66:78:85:3a:d3:a8:98:
4a:86:ca:70:6f:a4:93:65:cd:a8:d5:58:a7:10:e6:
1a:51:65:a7:f3:bc:0f:b1:8b:a7:2d:d4:50:e0:9c:
8a:6f:0f:65:af:34:11:66:44:f1:80:47:d9:82:3e:
90:81:dd:64:6e:06:de:8b:b2:e7:26:d5:fe:ab:ea:
82:51:68:53:aa:03:32:1e:21:d6:74:ec:4d:28:6b:
33:d9:a8:30:70:6e:b9:48:e1:c9:90:31:60:96:62:
90:e2:9b:75:94:8c:63:1f:8e:73:2a:e3:3a:92:5b:
bd:00:6f:00:ff:28:fc:8f:12:eb:f7:19:d6:08:81:
7e:29:dd:3a:dc:fa:06:27:8f:80:93:df:70:43:83:
dd:b9:dc:a3:14:54:78:66:32:df:f9:25:db:8c:02:
f8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:52:0D:EA:C4:66:71:D3:52:2A:99:7C:A6:03:C6:88:B6:A9:DD:96
X509v3 Authority Key Identifier:
keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/51IN6sRmcdNSKpl8pgPGiLap3ZY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.218.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:01:2e:b3:86:e6:96:76:05:a4:71:10:04:53:39:97:01:d3:
b0:5b:66:93:ba:9c:f3:5b:d9:fc:7a:6c:3e:e0:91:bb:db:50:
fa:ba:a7:28:b9:c8:09:e4:b0:e5:ee:4a:a5:f4:0a:39:f4:59:
88:90:5e:bd:9a:b0:1c:be:e6:bc:f3:17:21:64:49:a1:a4:1f:
63:0b:47:8c:1b:93:17:72:8b:ca:60:88:21:ad:72:7e:15:5c:
1c:cd:f4:2d:f5:4e:b8:f7:75:87:80:da:d5:48:5f:0d:36:88:
bd:48:a1:66:c6:b7:f9:7f:39:af:d3:29:9c:a5:c9:5f:1b:92:
e3:33:2e:c8:ac:4e:f2:df:06:c9:dc:ee:f7:e7:43:ec:b7:22:
10:fe:af:d4:34:89:2a:83:18:8e:c1:41:5c:c3:0a:18:f4:a0:
e0:c4:9e:05:7a:cd:03:e1:bb:91:c6:4b:70:61:b8:bc:23:3b:
e3:b5:5c:d3:b5:11:6f:fa:fa:22:51:b3:bb:b0:d0:2b:3a:e2:
99:46:88:2c:b5:e8:be:24:cf:13:0c:c1:fe:92:27:7c:f3:83:
1e:c7:09:4e:0b:e8:af:bb:07:5a:5e:d3:67:06:8a:09:94:c6:
1e:9a:ec:07:cd:5c:de:42:6d:7b:5c:a9:19:c6:ae:fc:b8:57:
e3:6d:91:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org