Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SUNHO/y6ItU7HslcjZ7ILfd40UAm62Ry0.roa
File: y6ItU7HslcjZ7ILfd40UAm62Ry0.roa (raw, json)
Hash identifier: wmOWnjGWJcHf90hTe9p31IwF6EnuVKBy35rLF0jve0s=
Subject key identifier: CB:A2:2D:53:B1:EC:95:C8:D9:EC:82:DF:77:8D:14:02:6E:B6:47:2D
Certificate issuer: /CN=5E85681AB6CDB83036323458032D1205A5B1AA0C
Certificate serial: 10BA
Authority key identifier: 5E:85:68:1A:B6:CD:B8:30:36:32:34:58:03:2D:12:05:A5:B1:AA:0C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XoVoGrbNuDA2MjRYAy0SBaWxqgw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SUNHO/y6ItU7HslcjZ7ILfd40UAm62Ry0.roa
Signing time: Thu 15 Sep 2022 02:38:54 +0000
ROA not before: Thu 15 Sep 2022 02:38:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18419
IP address blocks: 103.130.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4282 (0x10ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E85681AB6CDB83036323458032D1205A5B1AA0C
Validity
Not Before: Sep 15 02:38:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CBA22D53B1EC95C8D9EC82DF778D14026EB6472D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a2:8e:db:6a:90:10:ed:dc:42:fd:0b:9a:0d:
7c:8e:d4:c4:bd:20:dc:f5:d4:3a:92:38:97:c1:00:
ec:ab:1c:40:4d:2f:f6:61:af:2c:5d:8f:ae:4f:5e:
c3:cc:50:06:75:cc:67:45:39:15:ce:bf:e1:d1:df:
9e:4d:78:f1:36:52:67:2b:ec:06:f7:69:e3:49:56:
44:a3:1b:aa:21:e2:04:56:01:be:18:c0:17:f1:56:
1e:56:84:c1:b1:a5:f6:36:09:ad:cb:9f:23:bb:cc:
33:23:cf:c8:52:09:f9:b9:cd:14:92:fe:21:c6:2b:
20:95:06:f6:18:0e:84:8e:5e:a6:3c:3c:64:6c:c7:
bd:54:9e:ed:7a:f7:7a:42:b7:d5:0e:e1:6e:d3:01:
53:cf:9d:78:7d:66:46:14:c5:2e:2f:25:cf:36:03:
f1:1c:6b:f3:39:57:6e:cd:3e:4c:a8:bb:95:11:41:
3b:70:87:92:7b:ff:2e:21:fe:41:9b:ea:54:44:51:
16:6b:23:79:9c:4e:2a:3b:9f:1d:e0:b4:16:f4:62:
72:74:2d:87:52:85:d4:f6:c7:24:48:08:16:f7:fb:
73:02:22:3d:ce:59:43:2f:c8:43:e3:65:9b:87:8e:
d1:1d:eb:61:13:40:d8:04:1d:ca:e8:17:55:1d:c8:
89:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A2:2D:53:B1:EC:95:C8:D9:EC:82:DF:77:8D:14:02:6E:B6:47:2D
X509v3 Authority Key Identifier:
keyid:5E:85:68:1A:B6:CD:B8:30:36:32:34:58:03:2D:12:05:A5:B1:AA:0C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUNHO/XoVoGrbNuDA2MjRYAy0SBaWxqgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XoVoGrbNuDA2MjRYAy0SBaWxqgw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUNHO/y6ItU7HslcjZ7ILfd40UAm62Ry0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.92.0/22
Signature Algorithm: sha256WithRSAEncryption
59:cd:db:af:4c:24:59:af:6d:4f:92:3c:4b:d9:c3:3c:a5:28:
81:d9:c8:65:bd:6f:e3:56:22:a1:42:25:d0:58:9a:5e:6a:4f:
eb:38:ca:0f:8b:b3:dd:0a:8f:38:20:b1:89:53:f5:8a:01:f7:
0b:3f:ca:10:b0:ee:73:d4:97:58:20:07:5a:bb:83:6c:5c:ee:
34:e5:2c:79:42:73:c5:43:21:f8:a9:a5:1e:bd:cc:c7:a6:7e:
e2:cc:41:93:e3:89:13:f0:1c:d2:c1:6c:e3:78:a7:5a:74:95:
70:fa:05:71:34:8f:5f:65:d6:d0:82:67:1a:00:45:6e:84:3c:
02:70:fe:1f:56:2f:4c:b8:6a:5f:e3:16:da:81:f7:46:8e:f0:
aa:a3:bf:f5:f8:71:1a:2f:89:2c:db:51:e1:fe:58:66:2f:ba:
a9:e9:7a:af:93:4e:5d:01:44:4f:20:31:03:8c:e7:01:54:08:
5e:7c:37:59:4c:04:40:f0:16:8c:8d:8b:35:2d:1c:34:2a:14:
1f:01:f5:a1:21:32:2e:66:6e:e5:73:84:90:d5:b8:6d:22:b9:
dd:2b:81:26:ca:c3:01:f3:97:88:80:65:8f:60:3b:22:81:37:
73:5d:13:68:50:aa:80:23:a6:8b:fb:9c:42:27:d6:4a:95:9f:
e8:2a:b1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org