Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SUNHO/-nhL1b7SmDpSwEFpkWXzccJ8ND8.roa
File: -nhL1b7SmDpSwEFpkWXzccJ8ND8.roa (raw, json)
Hash identifier: +/dwb/caaT/Zicvv6bpJZhFl2gpS9505gqRvgFexYpM=
Subject key identifier: FA:78:4B:D5:BE:D2:98:3A:52:C0:41:69:91:65:F3:71:C2:7C:34:3F
Certificate issuer: /CN=5E85681AB6CDB83036323458032D1205A5B1AA0C
Certificate serial: 0DF0
Authority key identifier: 5E:85:68:1A:B6:CD:B8:30:36:32:34:58:03:2D:12:05:A5:B1:AA:0C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XoVoGrbNuDA2MjRYAy0SBaWxqgw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SUNHO/-nhL1b7SmDpSwEFpkWXzccJ8ND8.roa
Signing time: Tue 29 Sep 2020 10:06:17 +0000
ROA not before: Tue 29 Sep 2020 10:06:17 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18419
IP address blocks: 103.130.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3568 (0xdf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E85681AB6CDB83036323458032D1205A5B1AA0C
Validity
Not Before: Sep 29 10:06:17 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FA784BD5BED2983A52C041699165F371C27C343F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d5:14:12:82:f0:39:21:41:42:1e:74:db:bd:
7c:29:1e:60:24:d4:75:ff:46:e3:89:da:5b:7d:3b:
2c:38:5a:e1:16:f7:cb:28:af:a1:ad:be:40:a5:61:
8f:19:2c:eb:75:e6:d2:3f:c7:01:e2:b0:f8:e2:92:
ee:63:1b:15:5c:58:76:60:28:00:84:36:56:6a:91:
7c:70:30:3a:7b:5e:45:40:03:00:80:bb:a6:d8:04:
d6:48:56:0b:ff:55:74:fd:d3:94:6a:50:d2:82:df:
26:38:89:66:35:c7:aa:20:9f:f6:7e:f7:07:4e:d0:
13:c1:b0:41:ee:a1:a7:98:26:e2:d2:ee:92:4f:d9:
a1:a4:ba:3e:8f:b0:7a:47:48:e6:e0:8d:6b:a2:c0:
8c:42:0e:92:67:ab:9c:8f:03:ee:a0:1b:b1:d3:fe:
cf:88:11:64:b7:f2:b7:84:62:1c:12:d0:c6:4d:e9:
e2:09:35:bb:db:a3:6e:48:00:d2:f6:7e:ed:1a:85:
25:91:84:34:d7:df:d1:f9:a6:76:41:b6:8c:32:4e:
0a:94:6b:6f:f5:94:73:3f:ad:95:ea:7f:f8:9e:3f:
0c:38:82:e4:26:24:ff:ad:fc:04:04:e5:03:02:6d:
98:8c:29:36:dd:b7:7b:3c:59:38:a0:cf:55:76:f9:
94:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:78:4B:D5:BE:D2:98:3A:52:C0:41:69:91:65:F3:71:C2:7C:34:3F
X509v3 Authority Key Identifier:
keyid:5E:85:68:1A:B6:CD:B8:30:36:32:34:58:03:2D:12:05:A5:B1:AA:0C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUNHO/XoVoGrbNuDA2MjRYAy0SBaWxqgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XoVoGrbNuDA2MjRYAy0SBaWxqgw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUNHO/-nhL1b7SmDpSwEFpkWXzccJ8ND8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.92.0/22
Signature Algorithm: sha256WithRSAEncryption
21:8d:25:9d:58:bc:18:f3:e7:c4:3c:d6:a2:46:d7:3b:2e:8c:
fb:89:fe:1e:ec:87:74:58:d5:34:04:d8:14:65:80:2a:da:bd:
4d:52:ad:0f:46:1f:30:3d:52:b8:0b:81:7f:75:c4:ad:f3:1d:
0d:93:ea:a5:45:14:ce:8e:89:82:99:f2:de:54:f7:12:68:d8:
6d:78:d7:f7:07:55:3f:8a:33:d5:6a:41:4b:13:d5:6d:77:6c:
e5:ac:94:d1:61:a1:ae:2d:38:09:ce:ef:5b:59:7e:94:70:76:
dd:9f:53:9b:ea:c4:ab:bc:cf:e3:1e:87:b1:aa:95:83:c0:6b:
b5:7d:c1:5b:53:19:66:82:60:b1:b7:7e:76:5b:12:84:db:c4:
2b:39:be:03:90:92:2d:94:e5:78:c8:ab:e1:c3:b0:5b:7f:6e:
ea:de:79:ec:11:d0:99:25:81:57:f5:08:7d:0a:2d:30:86:83:
78:d4:64:24:19:09:33:74:bb:0c:0f:ad:7b:9a:57:5f:97:d7:
5c:ed:c2:8b:0c:f1:6e:d7:ea:a2:59:44:cd:36:b7:78:4a:6f:
33:4c:a7:71:60:01:4d:9b:47:0d:0e:46:df:c2:53:9a:3f:96:
e1:6b:31:90:25:cd:b1:b4:d4:ab:a2:4c:8b:58:db:37:33:a2:
74:63:ce:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org