Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/zCl3wYTTdjRMCcqoZepH4sEzUbM.roa
File: zCl3wYTTdjRMCcqoZepH4sEzUbM.roa (raw, json)
Hash identifier: VAZ87L7AxEnSdIr4sOre5IMQKFHowJolfQl8UmTFT8s=
Subject key identifier: CC:29:77:C1:84:D3:76:34:4C:09:CA:A8:65:EA:47:E2:C1:33:51:B3
Certificate issuer: /CN=040D968303B364F772A753578220D3537E16166E
Certificate serial: 0265
Authority key identifier: 04:0D:96:83:03:B3:64:F7:72:A7:53:57:82:20:D3:53:7E:16:16:6E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BA2WgwOzZPdyp1NXgiDTU34WFm4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/zCl3wYTTdjRMCcqoZepH4sEzUbM.roa
Signing time: Tue 21 May 2024 03:02:48 +0000
ROA not before: Tue 21 May 2024 03:02:48 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 63897
IP address blocks: 103.175.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 613 (0x265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040D968303B364F772A753578220D3537E16166E
Validity
Not Before: May 21 03:02:48 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=CC2977C184D376344C09CAA865EA47E2C13351B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a2:66:83:66:d5:a0:7c:01:ec:05:58:36:a7:
cf:f8:1d:a8:16:09:a4:56:13:91:25:bb:29:f3:66:
ed:05:e1:7f:14:66:b8:00:cb:3f:46:f4:5f:11:fe:
b5:9e:a3:5f:44:3f:e8:9e:bc:17:f8:75:41:4b:ba:
1c:2a:87:2a:b7:e6:1b:0a:59:fc:e0:1f:d1:87:12:
0e:aa:5a:69:4a:5a:00:a5:23:38:63:15:22:26:c4:
5d:91:26:f7:49:69:a9:9e:af:eb:c2:b8:62:ab:31:
63:84:ca:93:b5:0e:bf:0e:f8:dd:84:d5:ab:b9:bc:
4a:f8:f8:7e:e4:46:58:eb:96:71:d6:42:22:ee:44:
6b:51:0a:96:d2:5b:6d:a1:a1:cd:55:65:1a:71:64:
0a:e1:45:90:02:bc:51:29:a6:c3:2a:48:a4:c2:54:
af:77:3d:c1:3f:27:22:6a:cf:d2:a5:b7:c6:0b:66:
2c:cc:3e:4d:cc:4f:5e:9b:0e:7b:d3:f9:8e:b0:fa:
ac:1f:21:4e:1d:31:ad:13:55:b6:7c:a2:48:f9:b0:
49:15:15:b2:44:5e:82:1a:77:44:19:8f:73:a9:32:
44:12:e7:72:a9:89:9f:42:35:f8:d2:3d:88:57:86:
f2:e3:75:ec:3e:26:de:bc:1e:4b:6c:6b:0b:55:97:
54:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:29:77:C1:84:D3:76:34:4C:09:CA:A8:65:EA:47:E2:C1:33:51:B3
X509v3 Authority Key Identifier:
keyid:04:0D:96:83:03:B3:64:F7:72:A7:53:57:82:20:D3:53:7E:16:16:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/BA2WgwOzZPdyp1NXgiDTU34WFm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BA2WgwOzZPdyp1NXgiDTU34WFm4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYU/zCl3wYTTdjRMCcqoZepH4sEzUbM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.254.0/24
Signature Algorithm: sha256WithRSAEncryption
68:12:c2:cf:ed:3d:35:20:ba:f5:8b:37:67:70:4b:50:da:5d:
0f:c9:dd:6a:72:48:54:af:30:b4:ce:da:67:ca:f3:20:da:65:
78:5a:90:88:37:7a:10:5d:8e:e1:7b:77:f1:e2:05:f9:b9:d0:
43:9e:4f:14:59:d7:4e:27:5a:f9:67:3f:b7:17:0b:30:02:7e:
9d:27:fa:0b:17:6c:ca:c3:b3:35:1b:1b:92:6c:cb:36:4b:21:
0a:4f:a4:01:90:17:80:2c:24:88:a5:39:8f:15:e0:fd:fc:3e:
7b:ad:be:30:15:20:bc:3b:6a:51:87:44:6c:eb:bf:31:7c:5f:
21:d4:e8:c4:bf:d3:af:bb:21:22:55:ac:b7:a5:26:e0:47:52:
3e:7d:05:af:26:16:77:a3:5f:2e:93:f5:51:66:55:7b:cf:f0:
8d:f6:bc:c6:b3:6d:08:7d:9c:b3:30:00:cb:7f:1b:de:d9:03:
50:31:ff:8b:36:b6:fb:57:3c:66:0c:0b:eb:91:fd:a4:05:83:
57:64:66:33:af:19:69:52:e6:40:92:ef:22:f8:55:26:5c:4a:
78:8a:26:0c:da:5f:24:83:85:13:53:1b:a9:56:b4:fe:fd:e1:
18:e2:5b:c9:00:eb:c2:73:82:40:32:21:d4:ec:22:c4:35:d3:
4c:e7:47:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org