Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/Y78RTkpqE4ts782leGuHv0GROow.roa
File: Y78RTkpqE4ts782leGuHv0GROow.roa (raw, json)
Hash identifier: nEMd9s1R9QUXwf1SZyAD1SOQEbTlQNbnie1u7GX2XKs=
Subject key identifier: 63:BF:11:4E:4A:6A:13:8B:6C:EF:CD:A5:78:6B:87:BF:41:91:3A:8C
Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial: 0BBA
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/Y78RTkpqE4ts782leGuHv0GROow.roa
Signing time: Fri 01 Sep 2023 09:45:01 +0000
ROA not before: Fri 01 Sep 2023 09:45:01 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4780
IP address blocks: 103.234.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3002 (0xbba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Validity
Not Before: Sep 1 09:45:01 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=63BF114E4A6A138B6CEFCDA5786B87BF41913A8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:a6:64:81:2e:06:4e:ac:e0:ff:87:c0:06:
ad:a0:fa:06:02:01:c7:b1:3d:a3:33:0d:39:78:8e:
42:88:15:ce:ed:48:7d:57:be:ba:76:6b:74:f4:9f:
00:81:db:f4:d5:2f:b3:e5:b6:a6:7c:82:0d:72:61:
ee:5e:a0:ad:33:59:f9:3f:87:a6:02:dc:7f:3f:3e:
dc:b8:37:38:4a:af:ef:92:8e:77:97:f5:ad:69:ae:
4a:b8:b1:60:56:55:99:0f:e2:92:f2:38:6a:2b:b1:
7e:24:5f:17:ea:90:e9:e6:85:09:46:b0:ea:19:ff:
e9:b1:62:7b:cf:5f:4c:0a:b0:85:d2:e2:a4:b6:9f:
b1:9c:19:d3:87:86:6a:2a:d8:ac:29:03:8d:c7:1c:
7d:3b:92:10:4e:74:1e:2e:8b:11:e6:b5:25:79:92:
37:86:b5:00:6a:b4:60:a7:78:80:02:35:cd:6c:8e:
dc:f6:e4:03:10:e1:0a:f6:35:0c:01:49:a3:36:42:
3d:ac:a0:2e:9e:8b:4a:50:83:d6:b6:f9:41:92:4d:
9e:0b:fc:5c:2a:33:c4:ed:7b:86:2a:9a:5e:f5:1f:
36:e9:c7:17:c2:61:0d:6c:a1:6f:d6:e4:27:40:86:
30:46:2b:78:14:1a:7a:c7:c3:cd:2e:1b:dc:54:c8:
df:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BF:11:4E:4A:6A:13:8B:6C:EF:CD:A5:78:6B:87:BF:41:91:3A:8C
X509v3 Authority Key Identifier:
keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/Y78RTkpqE4ts782leGuHv0GROow.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.234.228.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:14:6c:cf:33:ed:0f:cd:c9:0e:27:42:62:51:0a:36:6a:06:
6f:3f:fc:48:fd:43:d8:66:18:82:72:63:53:2e:7a:8b:da:1f:
ae:4e:ce:e1:b1:23:39:c5:88:5c:95:c3:a6:42:0e:22:57:69:
15:11:83:7c:c9:65:e6:7c:b1:89:65:ec:5b:6e:99:df:d4:d3:
d8:f0:43:6a:2d:98:1c:32:14:0f:54:9b:ed:2b:19:ad:7c:cd:
65:7f:04:10:15:79:23:b8:31:8f:65:06:7c:fa:ab:6b:d9:4d:
54:b1:34:08:06:6c:30:52:c3:b2:78:55:62:94:b3:f9:78:09:
db:c4:ba:0a:b0:ad:de:b8:4b:9d:c0:f0:7e:91:fb:a7:bb:6b:
15:7a:b4:18:ed:ce:e7:8c:f8:25:f9:9e:1d:ee:27:53:8e:04:
89:d5:9c:5e:16:e3:d5:0c:30:09:a7:17:1e:cd:d8:7e:48:e8:
18:7f:17:19:3d:de:1f:2c:0e:6e:c5:7b:92:8b:e0:a7:cb:a2:
ae:9a:9c:1e:a6:1b:31:7b:d2:16:ff:10:1c:8a:15:9b:d6:44:
55:4e:20:91:11:d4:fb:a7:d5:55:3b:a4:26:d0:6e:5c:0d:c8:
1e:ed:d3:14:42:46:49:ae:e0:55:ef:e1:db:8f:00:bb:95:71:
26:8f:57:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org