Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINETEL/Bwi-R5FrYb4DnLSgztDCK_25t8g.roa
File: Bwi-R5FrYb4DnLSgztDCK_25t8g.roa (raw, json)
Hash identifier: qxtSylQfp+QgaKPzyLljdht3xeK5UGkunIW4C8o0XzQ=
Subject key identifier: 07:08:BE:47:91:6B:61:BE:03:9C:B4:A0:CE:D0:C2:2B:FD:B9:B7:C8
Certificate issuer: /CN=DDA2DA33DF9088B68EDC6F74EA8B1C0EEE2E26C1
Certificate serial: F1
Authority key identifier: DD:A2:DA:33:DF:90:88:B6:8E:DC:6F:74:EA:8B:1C:0E:EE:2E:26:C1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3aLaM9-QiLaO3G906oscDu4uJsE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINETEL/Bwi-R5FrYb4DnLSgztDCK_25t8g.roa
Signing time: Fri 20 Oct 2023 01:35:17 +0000
ROA not before: Fri 20 Oct 2023 01:35:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 63902
IP address blocks: 103.116.14.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDA2DA33DF9088B68EDC6F74EA8B1C0EEE2E26C1
Validity
Not Before: Oct 20 01:35:17 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0708BE47916B61BE039CB4A0CED0C22BFDB9B7C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:41:b6:61:7c:e5:34:9e:66:be:17:37:83:de:
fa:de:d9:82:e3:fc:25:a3:67:e6:ab:cb:b5:a5:e0:
33:74:f7:bc:89:17:0d:c8:7f:51:02:a1:e2:fe:db:
85:0c:2a:ef:77:c2:7f:e0:ed:50:c4:02:d7:3b:da:
d4:58:00:8b:af:08:e0:2e:8a:d9:61:b4:cc:44:df:
6a:1a:b3:15:8f:fa:aa:19:c9:f4:c6:91:6c:14:68:
1b:4a:28:8b:23:16:5f:a0:7b:01:10:5c:cb:a4:e8:
3c:56:0c:34:ac:71:6e:41:a4:39:ee:cf:85:6f:ce:
97:d6:6c:27:46:5b:12:27:25:ef:c0:84:32:3a:58:
67:3c:5c:6f:50:ee:61:20:dd:5b:bc:0c:49:30:af:
32:79:1e:25:ca:47:2e:9c:c3:4e:92:4e:74:1d:0d:
8e:ea:9e:f7:99:19:32:10:b3:0d:5e:98:1b:9e:6c:
c1:1b:ec:13:74:6d:f6:49:2a:5f:74:52:bd:7e:98:
58:8d:8e:87:d3:dd:8d:40:27:b5:6b:89:81:82:a5:
9a:29:92:c5:4f:16:4b:89:a4:89:14:6c:e7:8c:56:
b7:5e:d8:65:e9:2a:2b:92:1c:17:f4:91:b3:d4:4a:
10:a1:b0:09:c3:6c:b9:6f:aa:60:e4:54:fd:c9:0b:
1e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:08:BE:47:91:6B:61:BE:03:9C:B4:A0:CE:D0:C2:2B:FD:B9:B7:C8
X509v3 Authority Key Identifier:
keyid:DD:A2:DA:33:DF:90:88:B6:8E:DC:6F:74:EA:8B:1C:0E:EE:2E:26:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINETEL/3aLaM9-QiLaO3G906oscDu4uJsE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3aLaM9-QiLaO3G906oscDu4uJsE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINETEL/Bwi-R5FrYb4DnLSgztDCK_25t8g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.14.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:36:22:d5:56:65:74:40:99:4b:13:26:13:6a:28:85:ea:2a:
f0:70:06:9c:76:9f:4a:84:3d:71:44:2f:99:22:f9:f7:86:44:
d7:ec:0c:cc:03:dd:3c:24:28:40:33:36:24:d4:2a:82:e1:7d:
f1:91:63:8a:47:d1:36:c1:a3:42:71:f4:88:bb:40:44:b1:8f:
22:1a:d6:fb:e5:58:9c:42:2d:fc:9f:90:ea:2f:68:01:4c:6e:
91:5f:d0:2e:74:ae:59:af:f2:37:37:69:21:1d:c9:a0:22:05:
b4:6d:3b:03:52:50:47:be:5f:1f:a2:fd:1d:ba:10:cd:ba:ff:
09:99:2f:69:72:ca:dd:d3:d6:b1:ef:cf:fd:02:3d:d2:dd:f7:
3f:70:18:c2:2f:a8:38:67:87:97:7e:38:23:36:1d:ee:92:57:
ce:b8:41:6c:0f:da:01:b1:a3:4f:49:7f:ed:79:9f:cf:2d:c4:
67:16:6b:c0:b5:41:aa:ad:fa:84:3b:5c:1f:bd:ba:fc:23:46:
7b:b6:f4:34:75:42:79:95:18:86:c7:96:7b:4a:88:f8:9d:14:
75:f7:40:df:18:9f:92:bf:dd:94:16:64:81:1c:1f:00:1c:b7:
79:19:65:61:9a:36:72:49:13:b0:c8:3d:85:3d:74:18:25:12:
e4:a5:58:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org