Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/quAisqUHsQkj5-9axGM7iupOhgI.roa
File: quAisqUHsQkj5-9axGM7iupOhgI.roa (raw, json)
Hash identifier: WxOBX0SJrAbAILBv8+cUMCQBdcd9WfDZRJGWiyOiXTE=
Subject key identifier: AA:E0:22:B2:A5:07:B1:09:23:E7:EF:5A:C4:63:3B:8A:EA:4E:86:02
Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Certificate serial: 12DD
Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/quAisqUHsQkj5-9axGM7iupOhgI.roa
Signing time: Tue 30 Apr 2024 12:46:15 +0000
ROA not before: Tue 30 Apr 2024 12:46:15 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 215913
IP address blocks: 103.123.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4829 (0x12dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Validity
Not Before: Apr 30 12:46:15 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=AAE022B2A507B10923E7EF5AC4633B8AEA4E8602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:01:4d:32:66:64:bc:5d:59:4a:4d:86:0c:7d:
02:b2:f0:b8:a7:08:33:15:6b:bd:b6:05:1e:0b:75:
d5:af:89:a7:6e:56:b1:db:5e:ae:70:8d:b6:e4:ec:
19:91:81:d6:81:c3:e2:d2:e4:3a:f7:bd:d9:e0:be:
a6:8c:5e:4f:74:ff:c9:ff:fb:5a:d6:e8:85:55:35:
42:ed:b1:26:14:3e:d4:fc:d0:df:1b:aa:01:d7:03:
60:97:48:05:44:0d:88:5b:02:5f:41:ca:cd:ec:eb:
83:bd:b3:37:b2:83:27:58:d2:05:a9:18:00:8e:5a:
36:4b:43:00:56:4e:23:ab:e8:e6:96:64:2a:62:f8:
c9:bc:73:a3:30:9e:9e:cd:e7:e3:a9:04:c5:ec:e1:
f0:3d:84:7b:62:ea:9a:5b:20:65:a3:fb:76:e1:65:
1c:99:f5:ae:05:0a:4c:9a:ce:4e:08:c8:cc:b9:d0:
84:a1:55:eb:95:e1:45:b6:96:90:56:ce:98:2f:2a:
df:9e:58:c1:92:f4:72:94:bd:8b:66:6a:e8:73:ae:
5b:86:ec:6e:32:3f:a6:cc:e4:8f:ad:fd:b1:96:64:
02:84:a8:5d:a1:55:0f:73:af:c1:94:cb:df:9e:20:
63:b3:33:8f:5a:06:4f:4d:df:85:3a:0c:f6:b9:fb:
a7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E0:22:B2:A5:07:B1:09:23:E7:EF:5A:C4:63:3B:8A:EA:4E:86:02
X509v3 Authority Key Identifier:
keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/quAisqUHsQkj5-9axGM7iupOhgI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.216.0/24
Signature Algorithm: sha256WithRSAEncryption
da:b4:d4:41:23:09:41:bf:dd:c5:db:01:31:1d:44:50:d3:8b:
4d:9d:58:41:41:51:06:51:9b:ab:b1:00:3b:fb:f8:50:e2:30:
76:41:d0:71:16:76:dd:c9:51:9a:63:38:1e:b7:22:98:0c:1e:
fd:42:0f:a7:5f:99:48:2e:c3:9c:5d:b8:5e:cd:ec:50:7e:66:
13:49:a4:47:02:a1:d9:04:fb:da:42:fc:6c:38:d9:00:d4:32:
28:55:d2:0e:3f:de:21:41:24:d1:ef:50:f4:3f:a4:b6:63:9a:
0b:c0:41:03:d5:3f:94:da:ce:e7:9b:45:18:df:10:31:ef:26:
bf:c5:72:65:87:c4:ed:ed:25:1f:86:68:a7:34:19:32:f4:15:
8c:60:dc:c6:60:2d:b3:59:ce:f0:15:dd:ff:a9:8b:cd:2d:87:
89:4c:e0:23:3e:b7:30:08:6f:e6:68:04:a0:87:04:d9:0b:c6:
36:bb:3c:be:24:a8:4b:55:73:a6:d7:56:68:74:3c:24:99:56:
cb:40:f7:19:2e:f2:74:26:25:aa:c5:82:8e:d9:4e:30:61:a7:
be:be:a6:45:bf:20:c8:99:3f:af:a2:ab:8b:69:bf:81:40:3c:
a2:af:f2:01:fb:35:cf:9a:28:01:b3:bb:40:e6:d8:f0:40:36:
82:6c:4d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org