Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/JpqIByc-VgPegyd6nE5EcBj58IE.roa
File: JpqIByc-VgPegyd6nE5EcBj58IE.roa (raw, json)
Hash identifier: XOQveR3U06xUts+GMzSf67Z9qXu8MBlSO0pX7AVaWOY=
Subject key identifier: 26:9A:88:07:27:3E:56:03:DE:83:27:7A:9C:4E:44:70:18:F9:F0:81
Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Certificate serial: 126F
Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/JpqIByc-VgPegyd6nE5EcBj58IE.roa
Signing time: Tue 19 Dec 2023 16:40:15 +0000
ROA not before: Tue 19 Dec 2023 16:40:15 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 16509
IP address blocks: 103.123.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4719 (0x126f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Validity
Not Before: Dec 19 16:40:15 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=269A8807273E5603DE83277A9C4E447018F9F081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:30:ca:58:98:c0:fd:0f:10:48:f9:78:4a:0b:
9a:cf:52:99:30:0c:69:0d:46:98:c1:2a:99:30:85:
1a:d7:8a:ff:6d:27:a5:32:59:5f:0d:a0:8f:5b:b1:
19:9c:a5:a6:b6:cb:a5:28:9d:e3:f3:2a:6a:38:a7:
c2:44:5f:69:16:30:e8:81:9c:64:57:a4:9f:35:81:
07:92:a1:08:bc:eb:6b:d3:ae:52:ce:87:41:2e:90:
d7:ec:35:d9:12:a0:5e:34:9e:f1:be:c5:8c:90:eb:
91:65:bf:aa:70:9e:2b:43:e8:18:63:ca:90:be:b0:
9f:8e:4b:d3:a5:00:1c:56:e4:b2:e8:27:7d:30:d7:
f2:65:71:f6:9f:89:c2:e7:31:89:49:33:5c:a0:66:
a9:18:aa:e7:e3:46:2e:24:13:47:f8:dd:53:ce:02:
fc:7f:97:d1:70:2a:28:f6:0b:83:72:ff:74:7f:57:
b8:31:34:ca:e7:94:03:cf:6e:29:f9:24:7f:97:a5:
16:4b:e2:52:71:26:fb:90:bd:df:dd:0d:c6:0a:7f:
58:42:b3:7c:7f:e6:0f:9d:92:d1:59:40:01:c8:fb:
9e:03:ac:db:16:bf:f4:d8:80:d1:a3:5a:92:c9:4a:
19:2d:94:fc:b0:66:fd:c5:dd:ed:b7:08:81:a4:ab:
7f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9A:88:07:27:3E:56:03:DE:83:27:7A:9C:4E:44:70:18:F9:F0:81
X509v3 Authority Key Identifier:
keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/JpqIByc-VgPegyd6nE5EcBj58IE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.216.0/24
Signature Algorithm: sha256WithRSAEncryption
23:b1:54:f5:ab:10:dc:c1:93:3b:c7:4f:4f:3a:82:52:f5:00:
48:ca:4a:14:87:40:7b:0b:1b:3f:16:85:5f:2e:18:bc:be:85:
d0:38:95:bb:db:1d:bd:5b:48:00:04:95:db:46:d2:b1:fc:37:
fd:59:0e:a2:7f:d1:4f:a3:50:81:be:0f:9f:bc:27:47:7b:d0:
d9:28:d5:cd:d9:07:06:b8:93:d9:3f:21:b8:4c:c2:aa:12:89:
32:16:79:12:7b:bf:1d:46:18:a1:0d:e7:58:b7:1f:23:bf:be:
0b:f5:6c:78:4c:7e:5c:e4:98:b9:ce:70:20:a2:49:e0:f8:ed:
ce:40:13:78:c7:79:b2:ae:5f:4c:2b:31:95:39:c0:e4:00:e2:
a2:d1:f6:a5:0f:40:52:4c:cf:4a:35:05:b1:9e:89:52:c1:91:
0d:96:2b:d8:47:33:b6:30:0c:35:38:84:3a:04:e0:a0:e5:d0:
e7:27:67:69:dd:7e:fb:dc:bd:07:2d:8c:c1:18:29:8e:e0:d7:
53:26:fa:67:60:02:cb:24:bc:7f:71:da:b8:11:b5:b3:0b:05:
fa:f8:c4:fc:c4:7c:95:b0:db:b1:46:d9:69:dc:00:e2:e0:e6:
7c:e6:9c:19:28:91:c8:db:89:d5:21:8e:bb:d2:9d:60:4b:2f:
f2:0e:cf:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org