Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/ZVnyuHTkBnBaLUvQW_0yWgBa4b0.roa
File: ZVnyuHTkBnBaLUvQW_0yWgBa4b0.roa (raw, json)
Hash identifier: lz+vyEKIEYfAsLet99/WHUpxxgyRWqPjaz5vIWnsDpQ=
Subject key identifier: 65:59:F2:B8:74:E4:06:70:5A:2D:4B:D0:5B:FD:32:5A:00:5A:E1:BD
Certificate issuer: /CN=0BDA25C630F8FF46E307B194CD2AAD1E6D06331D
Certificate serial: 08AC
Authority key identifier: 0B:DA:25:C6:30:F8:FF:46:E3:07:B1:94:CD:2A:AD:1E:6D:06:33:1D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/C9olxjD4_0bjB7GUzSqtHm0GMx0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/ZVnyuHTkBnBaLUvQW_0yWgBa4b0.roa
Signing time: Fri 01 Sep 2023 09:43:50 +0000
ROA not before: Fri 01 Sep 2023 09:43:50 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 48024
IP address blocks: 103.126.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2220 (0x8ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BDA25C630F8FF46E307B194CD2AAD1E6D06331D
Validity
Not Before: Sep 1 09:43:50 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6559F2B874E406705A2D4BD05BFD325A005AE1BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:ad:1e:9c:d0:0a:ec:c4:9e:f9:c3:74:d4:bd:
fe:8a:ec:71:c2:f4:8b:17:b8:fb:3f:61:5c:62:73:
a7:65:7a:d5:76:f7:2a:c7:d4:e1:e8:54:9a:17:33:
c3:f2:80:6b:82:c2:c7:82:80:39:a1:10:93:f5:b9:
54:e0:64:d6:b5:aa:ce:d3:96:54:7b:2a:da:2a:fc:
b1:c5:01:18:f7:67:36:a0:9c:2b:49:b3:05:66:f5:
6f:91:88:d9:3d:79:87:28:05:bd:df:62:e0:66:e8:
90:ef:47:d0:60:58:5e:e8:fc:b5:6d:c6:28:23:95:
c9:eb:cb:f1:99:74:73:ce:bd:6f:11:32:c7:f9:24:
38:7f:db:5a:8a:c6:ff:24:b4:71:a7:cc:8c:75:26:
32:9f:4f:8c:30:d3:04:d6:1d:4f:c4:fe:d1:7a:2b:
ba:37:85:dd:ee:2a:57:98:24:61:d5:63:53:e6:ea:
ca:d0:23:8b:c5:f7:e5:05:27:e5:60:a4:60:20:20:
55:19:fc:b3:02:1e:8c:03:c2:29:a0:ef:9c:c6:bc:
31:87:db:05:d5:90:a1:47:f5:fc:ef:5b:9e:c9:51:
a2:17:22:bf:a2:4c:e6:27:03:63:7b:e7:e8:53:0e:
1f:ae:ca:cc:3f:a9:db:a1:ec:a5:66:34:26:a4:fd:
59:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:59:F2:B8:74:E4:06:70:5A:2D:4B:D0:5B:FD:32:5A:00:5A:E1:BD
X509v3 Authority Key Identifier:
keyid:0B:DA:25:C6:30:F8:FF:46:E3:07:B1:94:CD:2A:AD:1E:6D:06:33:1D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/C9olxjD4_0bjB7GUzSqtHm0GMx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/C9olxjD4_0bjB7GUzSqtHm0GMx0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/ZVnyuHTkBnBaLUvQW_0yWgBa4b0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.88.0/24
Signature Algorithm: sha256WithRSAEncryption
10:a9:3b:62:62:74:8a:24:de:03:b0:45:0b:2d:b0:16:2b:8f:
fa:9d:16:45:f0:e8:33:94:8c:59:fb:2e:c2:07:bb:e1:46:88:
b4:19:6b:7a:33:19:d0:d8:04:c3:d9:01:71:ff:7d:cd:71:56:
42:0a:e3:2c:53:0f:35:d6:7e:22:48:79:14:80:14:cd:9e:0d:
94:05:09:50:8c:f0:be:10:b6:b0:75:6f:47:4d:3c:14:ba:77:
35:77:50:f1:6e:67:f3:c7:ca:31:64:27:6b:35:50:ba:17:73:
2d:0e:26:44:e7:f5:6d:de:76:a9:92:9e:ac:70:b8:d4:dc:04:
dd:94:49:1e:12:7c:bc:9d:48:73:c5:e2:a0:af:a1:c7:6d:2c:
eb:19:65:2e:49:90:41:3d:f0:be:e7:0e:a9:89:e4:e2:63:c6:
1c:e8:33:b9:17:69:ff:c4:31:95:dc:15:9a:01:c3:a7:ec:ec:
3e:6c:1e:7c:b4:12:2f:42:e9:ed:bd:34:d8:36:6e:48:b5:72:
cd:86:9d:d0:97:c2:24:64:3a:23:83:72:11:bc:08:a6:11:05:
20:cb:57:04:80:71:a0:c8:60:a4:1e:f3:ca:cf:90:a0:4a:ea:
00:0b:36:0d:a8:13:0d:c4:fc:28:11:0e:41:e1:88:6d:e9:11:
40:e2:dd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org