Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AP267N5DqMfwP-PlJg32gbx2PHU.roa
File: AP267N5DqMfwP-PlJg32gbx2PHU.roa (raw, json)
Hash identifier: 6036tJlRXFdCeZIKX+K1swlcRqMDwgF69NQxakPMPx0=
Subject key identifier: 00:FD:BA:EC:DE:43:A8:C7:F0:3F:E3:E5:26:0D:F6:81:BC:76:3C:75
Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial: 0BA4
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AP267N5DqMfwP-PlJg32gbx2PHU.roa
Signing time: Fri 01 Sep 2023 09:44:04 +0000
ROA not before: Fri 01 Sep 2023 09:44:04 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38047
IP address blocks: 103.106.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2980 (0xba4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Validity
Not Before: Sep 1 09:44:04 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=00FDBAECDE43A8C7F03FE3E5260DF681BC763C75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c7:f5:5a:8a:82:b5:00:63:da:a0:1e:f1:db:
78:b7:79:95:9d:36:f9:9f:d0:5d:77:32:83:ee:dc:
42:40:e5:d3:59:19:ba:30:79:c9:7a:ff:de:5e:d4:
cb:19:15:d5:76:20:e5:4c:58:94:f3:41:36:8f:04:
19:49:25:85:7e:b1:54:37:28:06:f7:fd:41:73:41:
32:1e:61:91:ba:38:43:bc:06:7f:82:4d:78:4f:bc:
f6:74:5e:e5:53:24:5b:55:91:bb:d8:d1:4c:50:91:
c4:fb:46:9c:eb:ef:26:aa:5c:4a:7a:f2:b4:45:f5:
68:8d:76:5c:59:9c:d5:45:a3:02:c5:b4:a3:2f:bf:
89:b5:d9:30:ba:cc:14:10:ce:61:ac:3a:04:45:9a:
ff:0b:cc:47:de:f0:73:cb:d8:fd:4b:61:d7:ae:d0:
5f:f9:96:2d:9a:23:31:0c:2b:e5:f5:e1:46:09:c6:
25:3b:3f:56:12:b5:00:fb:54:cb:88:2e:21:01:13:
2e:f6:ba:4c:9d:aa:ae:fc:4b:ef:e7:f7:00:88:32:
96:92:39:40:e1:ac:78:66:f5:1f:4a:00:90:08:0c:
10:ae:4d:3c:ed:13:1a:9d:b3:f9:34:64:89:ee:c3:
6c:bc:a7:ef:f3:e8:d4:16:fc:66:3f:0c:57:9f:30:
4c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FD:BA:EC:DE:43:A8:C7:F0:3F:E3:E5:26:0D:F6:81:BC:76:3C:75
X509v3 Authority Key Identifier:
keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AP267N5DqMfwP-PlJg32gbx2PHU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.106.53.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:80:e1:13:84:c2:d3:a6:fa:92:41:0e:f6:55:3c:43:06:a5:
fa:67:1e:f1:36:84:58:d8:54:ea:98:b2:d5:21:60:2a:d3:0a:
9d:a7:b1:71:fd:8c:2d:5f:fc:c5:06:3e:fe:0e:cf:bd:04:1d:
a5:ec:e4:06:09:ca:4d:eb:f1:02:3c:58:b5:2d:9c:60:b7:d8:
44:4c:52:65:83:e1:7b:1b:87:0b:5c:fa:09:13:22:6f:33:08:
d6:0e:3a:1d:38:46:51:8b:45:97:fa:7c:8d:f4:4e:74:75:b0:
e5:d5:0c:14:fb:7e:a0:cc:51:21:f4:a3:67:58:35:dd:4f:49:
db:48:7e:cd:b1:1d:32:76:e5:4d:de:b1:eb:e7:ea:0c:a2:7d:
9c:33:f8:28:1e:1a:31:57:e4:c5:3d:ab:ca:f2:ed:7c:b9:a9:
ad:af:39:93:cd:08:b4:5f:bf:c9:fa:76:34:09:78:be:73:f7:
80:e7:0b:16:4c:9f:4c:4b:70:fe:a9:ac:a4:31:e5:45:fe:24:
6e:e6:e0:12:9e:a7:9c:9f:90:54:46:3f:ee:54:ea:24:e1:b8:
1a:e2:2e:4c:27:f1:1a:35:eb:a9:41:be:9e:4c:93:a8:19:1d:
76:75:d9:8c:f6:c2:7a:47:20:bb:5e:3d:c1:1b:eb:a9:ae:ce:
6d:3f:33:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org