Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SMCI/EXF0OY3f4okE0ew8ac7ZCcV14CE.roa
File: EXF0OY3f4okE0ew8ac7ZCcV14CE.roa (raw, json)
Hash identifier: kAESMYfe47FPv3PK7GbauOAxx1x9MbsROnWXL+gSLho=
Subject key identifier: 11:71:74:39:8D:DF:E2:89:04:D1:EC:3C:69:CE:D9:09:C5:75:E0:21
Certificate issuer: /CN=8856EA5549A2F41D847CD86A460B5026C14A6EE3
Certificate serial: 0154
Authority key identifier: 88:56:EA:55:49:A2:F4:1D:84:7C:D8:6A:46:0B:50:26:C1:4A:6E:E3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/iFbqVUmi9B2EfNhqRgtQJsFKbuM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SMCI/EXF0OY3f4okE0ew8ac7ZCcV14CE.roa
Signing time: Fri 01 Sep 2023 09:45:43 +0000
ROA not before: Fri 01 Sep 2023 09:45:43 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 63894
IP address blocks: 103.162.84.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8856EA5549A2F41D847CD86A460B5026C14A6EE3
Validity
Not Before: Sep 1 09:45:43 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=117174398DDFE28904D1EC3C69CED909C575E021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:22:b1:a8:0b:1c:de:44:88:2f:18:fa:db:6a:
5c:b5:e0:6d:43:69:80:9c:f8:79:64:a4:eb:42:fa:
cd:b2:70:73:c5:5a:f1:35:f8:ae:be:c3:ec:28:b2:
ef:8a:46:24:34:70:24:43:48:20:0f:92:fb:28:ac:
66:41:1d:c1:b6:8e:99:0f:5f:db:89:7a:7f:b6:15:
4b:bf:93:d7:7d:f3:13:85:0f:4c:79:f7:ac:15:7a:
3b:38:70:8e:e8:2f:dc:2f:6f:a3:1a:82:4f:1c:d7:
8c:bf:f1:e0:73:a8:a0:49:a1:82:5e:13:92:05:74:
d4:69:23:fb:f1:79:8c:c3:f4:61:e0:15:26:92:b8:
0e:da:dc:c5:fe:92:8f:6b:49:bb:60:20:5d:12:d2:
53:55:e0:23:96:88:13:3e:bc:33:e3:17:1b:72:15:
9b:c8:20:f4:14:d1:d5:49:8a:07:5a:0e:ca:c7:31:
19:c3:1c:11:bc:94:e3:d9:1f:e0:0c:9f:c6:1b:ad:
fe:55:22:41:c1:68:67:46:97:b6:ff:b4:f3:9a:45:
57:d0:de:bb:3f:3a:7b:bd:0c:a6:12:ec:84:c8:36:
d3:14:9c:93:83:4b:46:69:32:77:81:1b:50:9e:af:
ad:9a:1d:ba:30:d9:68:d6:3b:3f:bb:ad:c9:70:af:
c0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:71:74:39:8D:DF:E2:89:04:D1:EC:3C:69:CE:D9:09:C5:75:E0:21
X509v3 Authority Key Identifier:
keyid:88:56:EA:55:49:A2:F4:1D:84:7C:D8:6A:46:0B:50:26:C1:4A:6E:E3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SMCI/iFbqVUmi9B2EfNhqRgtQJsFKbuM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/iFbqVUmi9B2EfNhqRgtQJsFKbuM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SMCI/EXF0OY3f4okE0ew8ac7ZCcV14CE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.162.84.0/23
Signature Algorithm: sha256WithRSAEncryption
40:ff:0b:b0:56:bb:f1:b7:ca:f6:33:c6:1c:79:3a:80:9c:2b:
c7:2d:9b:3d:d8:f1:06:80:5e:19:68:d8:a4:58:2b:46:cc:0e:
e6:be:e9:5b:5b:5c:b4:0c:db:77:0c:fe:ef:a2:88:e6:04:54:
a8:a6:7c:ad:d1:46:7b:cf:35:97:1e:d8:cc:24:9c:a0:bf:19:
7d:31:78:2d:d4:47:84:1b:79:2d:bf:e6:aa:57:0e:26:e3:a5:
e6:7f:af:02:f5:ff:39:63:be:82:a8:1e:59:47:6d:d7:4b:54:
18:bd:96:bc:0b:f4:ae:ed:75:00:92:27:f0:f3:4a:d4:cb:09:
b3:25:ee:ab:12:d8:1f:fe:20:bd:54:7a:df:ca:af:f6:ce:83:
d0:ae:66:c5:69:1f:5a:b5:da:9a:b0:2b:96:14:18:eb:d2:84:
59:2d:4a:cd:fa:ad:7e:66:f3:36:d7:6f:e0:b9:a8:1a:70:4c:
0c:51:b9:4e:54:ac:45:7b:b7:fc:98:f6:8b:b7:fb:c4:34:0b:
61:f1:32:df:81:90:7f:14:e3:9d:65:fa:04:8b:c5:33:52:4c:
9e:3d:4d:39:ec:86:82:85:7b:aa:a5:c4:69:40:06:45:6e:a9:
52:c6:51:a5:7a:ff:52:64:8f:84:72:6a:0f:b0:e9:70:10:0f:
b6:5f:3d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org