Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/mkMzaRu0K2F-lEMlfLYvjVwoH4Y.roa
File: mkMzaRu0K2F-lEMlfLYvjVwoH4Y.roa (raw, json)
Hash identifier: Rx4o/aH5w6ZYS8yMVuGT3+vElukR/qjjRQYX1DGdqv0=
Subject key identifier: 9A:43:33:69:1B:B4:2B:61:7E:94:43:25:7C:B6:2F:8D:5C:28:1F:86
Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial: 0BF8
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/mkMzaRu0K2F-lEMlfLYvjVwoH4Y.roa
Signing time: Fri 22 Dec 2023 07:51:44 +0000
ROA not before: Fri 22 Dec 2023 07:51:44 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24157
IP address blocks: 103.239.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3064 (0xbf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Validity
Not Before: Dec 22 07:51:44 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9A4333691BB42B617E9443257CB62F8D5C281F86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f0:be:1e:79:57:64:a8:ac:aa:4f:30:8e:28:
f2:52:63:58:d5:f6:d9:ad:db:d4:fc:8c:ea:1c:49:
0c:06:72:49:07:61:9e:c2:ea:56:e4:8b:d6:f1:28:
db:89:43:6e:17:0f:ea:9f:d1:52:4f:81:48:11:04:
e7:63:6b:9f:73:4c:ba:76:c8:ec:f5:4e:08:34:04:
67:18:c7:59:e0:f5:ad:86:57:a1:c8:d1:09:2e:07:
b3:7d:aa:32:38:a9:3e:ee:9f:d3:8b:0a:71:5d:53:
79:c9:ca:ae:a8:45:48:1b:ed:b6:61:a0:d6:a2:c3:
71:f0:56:b5:0b:ea:ce:28:d4:bd:76:7e:ee:3e:a3:
c2:c5:3b:a7:a2:2b:aa:6e:5d:48:04:ce:fa:e9:0e:
31:97:d7:87:ca:bc:08:34:3b:26:0a:6f:7b:ae:be:
9a:05:c6:2a:d7:91:1a:71:9d:34:ac:d3:ad:86:84:
1e:6c:41:c3:35:bf:e4:1c:0a:cb:e0:17:3b:52:8a:
ee:b4:64:37:8b:78:94:5d:02:ad:1f:41:1b:b1:21:
6c:55:00:35:0b:f8:6c:e3:52:af:79:81:31:f0:5f:
4e:3d:14:d7:27:f4:a5:87:9d:ef:15:55:e2:75:8c:
80:9f:1f:06:07:d1:92:8a:f5:ae:d3:89:99:ee:46:
d0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:43:33:69:1B:B4:2B:61:7E:94:43:25:7C:B6:2F:8D:5C:28:1F:86
X509v3 Authority Key Identifier:
keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/mkMzaRu0K2F-lEMlfLYvjVwoH4Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.239.60.0/22
Signature Algorithm: sha256WithRSAEncryption
74:3a:ab:24:41:05:5c:b2:72:1a:c9:bf:d8:cc:c6:b7:cc:2d:
c4:d8:0a:b8:69:55:9e:ef:f2:a1:16:5f:64:8c:0b:72:1f:aa:
54:76:9d:2c:e9:14:36:1d:b4:a4:13:d2:87:3c:e6:ee:e6:67:
cc:88:27:85:af:3c:13:6c:35:9b:e3:3e:40:bb:45:f9:65:5b:
cd:d1:99:f0:d7:0a:c6:22:53:20:68:38:51:0a:12:08:60:5d:
67:20:c2:e4:d2:c4:30:25:cb:e8:87:48:57:3d:9f:87:9d:da:
45:12:57:be:1f:d6:9e:20:f8:59:d4:0e:c3:97:3b:77:85:ed:
b8:a6:88:be:0f:be:07:5a:14:30:ce:a5:16:77:f8:72:eb:b7:
3b:92:c8:e4:db:9b:0e:2e:22:bb:71:21:5d:ad:8d:8c:2c:b8:
f1:46:db:29:f6:12:3f:ff:47:5c:85:13:b5:33:ad:f1:18:9a:
e9:27:c3:e5:0a:5c:f2:fe:b7:9e:d9:e1:09:74:45:41:6f:15:
0d:94:1b:62:a0:f4:e7:c6:b6:e8:9f:5a:72:43:c3:e2:3f:ff:
26:84:63:10:19:d5:16:2a:7f:6f:1e:cf:c0:18:ea:86:7a:40:
9c:c3:c0:ba:a1:f8:37:71:2a:3b:2a:6e:a0:2f:db:1c:f1:29:
9b:5d:39:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:16 2024 by rpki-client on console-ams.rpki-client.org