Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SPETW/5Gy_U_s2XsP-evc8iNvp6oGOZcQ.roa
File: 5Gy_U_s2XsP-evc8iNvp6oGOZcQ.roa (raw, json)
Hash identifier: 3nwaU3ukBhrVLRlie8iKD5VSkOhyD7xjKEODvQ8bBGw=
Subject key identifier: E4:6C:BF:53:FB:36:5E:C3:FE:7A:F7:3C:88:DB:E9:EA:81:8E:65:C4
Certificate issuer: /CN=6F8C92DFC78CBFE8C5EFD6BA5A37A1628221FFE2
Certificate serial: 0B09
Authority key identifier: 6F:8C:92:DF:C7:8C:BF:E8:C5:EF:D6:BA:5A:37:A1:62:82:21:FF:E2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b4yS38eMv-jF79a6WjehYoIh_-I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/5Gy_U_s2XsP-evc8iNvp6oGOZcQ.roa
Signing time: Fri 01 Sep 2023 09:46:11 +0000
ROA not before: Fri 01 Sep 2023 09:46:11 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131634
IP address blocks: 103.117.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2825 (0xb09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F8C92DFC78CBFE8C5EFD6BA5A37A1628221FFE2
Validity
Not Before: Sep 1 09:46:11 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E46CBF53FB365EC3FE7AF73C88DBE9EA818E65C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e5:95:45:7d:81:20:b1:6d:0f:f4:e9:94:93:
5c:1e:d9:c2:ca:c6:6b:aa:e0:35:bd:4e:c5:02:63:
97:9a:c7:71:67:22:09:f8:fd:f0:94:a9:31:af:cf:
81:72:18:26:83:f0:d4:d4:0e:93:f4:4c:43:1e:d5:
5d:3d:59:2c:74:1d:b0:73:82:05:01:7f:a4:ba:e7:
da:4d:0d:98:48:3e:46:43:87:6f:b5:ce:7e:78:d2:
f3:3b:74:91:58:ab:5d:0c:8e:a3:00:d1:36:84:f4:
0c:fa:9b:42:3d:30:98:4c:fe:c7:f9:ba:12:c1:a3:
b8:dc:c4:90:e1:07:d8:0e:e2:d1:21:31:aa:3b:17:
4d:d2:0f:bf:85:69:a8:5d:18:d8:7f:d7:5e:fd:c1:
a2:42:a8:83:12:2b:9b:88:91:7d:48:4c:66:6e:ea:
e8:c8:1a:f8:df:63:aa:83:c8:c2:b0:7f:6e:35:a4:
e6:26:28:69:2d:cc:c6:7a:6a:c6:a9:dd:f0:1f:75:
cf:65:73:fd:51:17:cf:d2:b4:0d:bb:81:1d:fb:d3:
0c:1c:8e:a6:fe:84:23:f8:0c:58:f4:65:39:1b:c9:
86:cf:14:8b:74:10:e1:ba:7c:fa:bb:9a:19:81:23:
04:77:74:fa:eb:de:c3:ba:e1:14:df:03:d5:4b:c3:
2e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6C:BF:53:FB:36:5E:C3:FE:7A:F7:3C:88:DB:E9:EA:81:8E:65:C4
X509v3 Authority Key Identifier:
keyid:6F:8C:92:DF:C7:8C:BF:E8:C5:EF:D6:BA:5A:37:A1:62:82:21:FF:E2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/b4yS38eMv-jF79a6WjehYoIh_-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b4yS38eMv-jF79a6WjehYoIh_-I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/5Gy_U_s2XsP-evc8iNvp6oGOZcQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.117.4.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:f6:d5:d8:81:14:39:1e:b2:ee:a0:6c:a6:67:8a:ba:54:cc:
84:0a:76:37:a5:81:85:d6:ab:eb:5e:b5:55:25:6f:38:cc:f8:
10:c2:98:21:a2:ef:f0:a8:e8:6f:e4:53:6b:1b:d3:4c:f3:64:
f6:9b:7c:b7:ad:87:c5:80:e6:2c:ac:82:87:a5:38:b4:3d:12:
0e:ea:0e:fa:2d:95:b9:f0:8b:2f:ef:cc:62:d7:bd:4e:1f:50:
1f:52:7f:b7:35:c7:58:78:2c:9a:43:af:ec:81:d7:e3:5f:71:
4b:2e:0d:d2:27:60:ad:34:90:c1:5d:d7:15:5d:05:6e:a8:38:
65:db:93:42:69:d7:37:cb:50:4e:98:90:17:ae:cf:f0:fd:09:
7e:90:50:30:c0:ab:94:66:30:6c:80:d0:c3:b5:92:24:c8:c2:
a8:8a:0c:99:ce:51:22:89:56:2e:e4:24:7b:14:3f:0f:ad:85:
1f:9c:19:4f:b2:e2:fe:00:3e:9a:a4:b4:70:58:66:b2:19:84:
56:0e:7b:f2:c3:3b:70:5e:e4:7d:1e:e6:b6:5d:b4:c2:f2:0e:
13:34:70:90:0d:60:e1:dc:72:83:5b:9e:77:24:62:8c:48:bb:
9d:88:b6:b4:f3:49:65:08:5c:4e:24:4e:07:0d:06:a7:3d:05:
62:43:ce:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org