Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TDC/eEBBdZj2QbEfcP-qPxsFg3QO6ZI.roa
File: eEBBdZj2QbEfcP-qPxsFg3QO6ZI.roa (raw, json)
Hash identifier: ABEDp2vEi9mqqYeuCk9vGa8T35UECapuit07RMOmkAY=
Subject key identifier: 78:40:41:75:98:F6:41:B1:1F:70:FF:AA:3F:1B:05:83:74:0E:E9:92
Certificate issuer: /CN=063F818DACB171B835415ABD278993922F3CDC5D
Certificate serial: F2
Authority key identifier: 06:3F:81:8D:AC:B1:71:B8:35:41:5A:BD:27:89:93:92:2F:3C:DC:5D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Bj-Bjayxcbg1QVq9J4mTki883F0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/eEBBdZj2QbEfcP-qPxsFg3QO6ZI.roa
Signing time: Thu 30 May 2024 09:34:33 +0000
ROA not before: Thu 30 May 2024 09:34:33 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18041
IP address blocks: 103.220.218.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063F818DACB171B835415ABD278993922F3CDC5D
Validity
Not Before: May 30 09:34:33 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7840417598F641B11F70FFAA3F1B0583740EE992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ac:37:ae:ad:53:3a:4c:c3:ea:9c:56:d0:d9:
28:6d:a0:2e:63:16:37:d4:94:81:69:83:01:82:ee:
07:17:9b:0c:e1:ea:05:4f:29:9d:48:e7:b9:c1:93:
23:a3:40:1d:0b:13:c4:1f:e5:bd:85:7c:f9:de:1f:
a0:ed:a2:ce:3b:70:c8:6f:38:03:ca:d2:1b:1d:6d:
7f:07:ad:fc:58:70:27:ff:06:d7:51:92:d2:05:7b:
a5:ed:e9:67:af:3c:af:54:b7:7e:5a:75:a4:90:60:
ac:60:40:99:8a:80:fc:d7:c4:c7:4f:af:d9:3e:3f:
85:79:f3:a9:ff:fe:fb:64:16:c9:fe:cc:95:af:cb:
8a:30:4f:9a:c2:78:c8:65:93:0e:5a:8f:75:11:05:
a2:87:bf:b2:d8:3b:66:27:93:7e:40:bd:f0:42:2d:
de:68:52:e4:be:20:10:a8:bb:eb:7b:8d:cd:59:4e:
14:35:d3:7e:2e:97:1a:1b:71:fc:bc:66:8d:af:d8:
89:a1:5a:a6:85:4e:fc:f6:64:bf:c1:57:f1:f8:1c:
f3:51:f2:e5:f6:97:1a:f2:51:5f:ff:5a:00:e0:5b:
89:12:23:a7:60:fc:59:9f:b3:30:50:3a:2b:3d:8a:
26:8a:93:31:26:dd:ef:09:7a:8e:d6:7a:0c:d3:43:
93:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:40:41:75:98:F6:41:B1:1F:70:FF:AA:3F:1B:05:83:74:0E:E9:92
X509v3 Authority Key Identifier:
keyid:06:3F:81:8D:AC:B1:71:B8:35:41:5A:BD:27:89:93:92:2F:3C:DC:5D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/Bj-Bjayxcbg1QVq9J4mTki883F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Bj-Bjayxcbg1QVq9J4mTki883F0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDC/eEBBdZj2QbEfcP-qPxsFg3QO6ZI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.220.218.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:74:07:64:4e:ea:d0:f9:61:d1:64:24:54:bf:d0:36:5a:58:
67:e2:c4:5d:73:a4:bb:d0:e8:cf:d1:36:f3:65:ab:c0:12:ff:
5b:c3:e6:29:c5:29:24:ac:c3:60:fe:d3:69:c9:c4:b0:47:e1:
2c:92:36:bb:99:c9:87:19:50:8f:ba:6d:d6:75:43:7f:8d:72:
df:43:dc:fa:83:c2:82:5a:bc:f5:fc:f9:a9:01:c0:e7:89:6c:
6b:0a:87:71:91:a3:52:94:49:04:2a:85:de:ca:8e:5b:38:1f:
cf:7d:5c:e9:2c:e8:44:17:21:6b:73:60:d1:5f:4d:7a:74:04:
42:4c:0d:c7:99:59:f0:91:c3:15:b1:4c:8c:21:f6:3c:48:03:
fe:2d:6e:ce:c5:fe:30:1d:76:af:5d:6a:c8:fa:63:a8:0c:4c:
f7:45:ab:f4:17:d0:46:91:ab:9e:ea:70:23:24:b7:ab:94:ef:
38:55:79:a1:4f:1d:9c:de:d8:13:16:4f:b8:8c:21:82:0d:30:
1d:21:f7:13:d4:14:81:6d:28:d9:a3:09:2f:22:d7:c0:e6:83:
c7:1a:75:47:67:f0:81:69:f2:a7:7c:05:30:dc:c3:eb:9d:2d:
90:64:63:1c:e0:ae:91:ba:9a:e9:61:a6:7b:9e:52:ad:45:f5:
4e:1a:5c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org