Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/LfBAesebvRGcmdOms-0oi_nrQXA.roa
File: LfBAesebvRGcmdOms-0oi_nrQXA.roa (raw, json)
Hash identifier: stx/qqAL4vVPTw/m9A20z+S2d4WOqjYWwiBIdT5gydA=
Subject key identifier: 2D:F0:40:7A:C7:9B:BD:11:9C:99:D3:A6:B3:ED:28:8B:F9:EB:41:70
Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial: 0C36
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/LfBAesebvRGcmdOms-0oi_nrQXA.roa
Signing time: Wed 20 Mar 2024 02:18:32 +0000
ROA not before: Wed 20 Mar 2024 02:18:32 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38047
IP address blocks: 103.133.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3126 (0xc36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Validity
Not Before: Mar 20 02:18:32 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2DF0407AC79BBD119C99D3A6B3ED288BF9EB4170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c4:1f:20:d2:d1:ac:84:5d:ca:f1:73:32:32:
66:6f:06:72:57:96:21:4a:38:63:c2:d2:0c:45:27:
e0:d2:c7:7e:91:5c:44:d3:aa:9a:b1:d2:dd:17:e0:
37:ff:6d:07:59:20:22:d9:97:4f:94:a8:aa:f6:7b:
e4:20:17:8b:20:42:43:be:c2:ce:3d:71:20:6f:7e:
0f:c2:2f:df:5f:3e:cf:67:df:41:4f:ad:d6:15:cc:
70:67:50:19:14:30:4c:79:01:29:38:27:02:6b:b0:
c3:fb:8f:c2:67:02:a3:bf:21:17:0b:1e:37:d0:2d:
81:dd:ec:6b:d5:3a:bc:25:2d:54:83:b2:f0:21:d0:
1b:71:89:0d:e9:f7:9e:73:54:f4:1e:c7:82:5d:92:
e0:c3:b3:0e:fc:e7:53:32:e2:cd:1a:03:e6:53:16:
0e:70:39:bc:c5:be:5f:03:68:09:96:50:05:e3:c1:
42:6b:b7:e8:8d:1e:21:89:ab:19:27:2a:82:6d:9f:
92:da:6a:0c:40:19:f0:0c:42:bd:89:b6:3a:a9:14:
e5:26:af:1c:73:15:93:65:55:ea:00:cc:19:6d:20:
9a:c0:26:db:7b:67:a9:a4:bf:89:b1:9f:aa:ac:42:
f4:cb:38:50:9a:74:79:e0:8f:c8:59:6b:d4:d0:9b:
62:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F0:40:7A:C7:9B:BD:11:9C:99:D3:A6:B3:ED:28:8B:F9:EB:41:70
X509v3 Authority Key Identifier:
keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/LfBAesebvRGcmdOms-0oi_nrQXA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.152.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:fd:23:de:9c:ed:3b:5a:a2:44:98:72:d5:cb:c3:6c:09:3e:
0e:73:b1:66:1c:92:fd:7a:28:07:f3:cd:46:89:a3:55:22:7b:
48:e1:a5:3a:aa:6a:9d:64:d9:89:cb:b4:2c:73:34:21:fc:54:
f2:a5:cd:44:b8:49:06:bf:28:7e:45:33:93:49:a8:3d:dc:cc:
e9:9b:0a:26:83:59:4e:db:f9:90:60:e2:f1:e2:96:22:8a:8d:
94:df:a2:d0:3d:db:2c:40:db:0d:99:96:c2:8f:be:19:c9:22:
14:56:cc:44:29:08:e1:4c:aa:d1:0c:3b:e8:d5:89:ce:75:b8:
99:3e:df:13:25:26:d6:f5:f9:ad:80:10:d3:dc:ef:c9:a7:be:
34:07:79:f9:2a:29:95:ea:19:5d:5a:51:86:c5:ab:c2:9a:2d:
d8:8a:0b:a9:db:82:94:1e:4b:cf:5d:f1:77:d8:f9:3b:d5:e1:
e1:3e:0b:6b:8f:72:f0:53:ad:2f:a1:47:20:91:c7:59:0e:e5:
82:d1:99:b8:1f:67:ea:50:d6:91:0f:76:6b:8d:03:57:db:72:
62:b9:c4:ff:7d:d3:93:ab:67:1e:fb:07:0e:34:79:a4:49:7e:
40:82:1f:c7:7f:c9:fd:58:00:58:c4:11:2b:04:1a:41:78:84:
06:66:c7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org