Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TGM/HbUDUtOLt0XROQVcbsGNn77SCVs.roa
File: HbUDUtOLt0XROQVcbsGNn77SCVs.roa (raw, json)
Hash identifier: PgInUXvuBsmtl2+ThDnnLAzgtQ36MpIlqyz9M6s05to=
Subject key identifier: 1D:B5:03:52:D3:8B:B7:45:D1:39:05:5C:6E:C1:8D:9F:BE:D2:09:5B
Certificate issuer: /CN=9B60696D68773AE2E532F0CD5D10FDC0C8273EA5
Certificate serial: 0292
Authority key identifier: 9B:60:69:6D:68:77:3A:E2:E5:32:F0:CD:5D:10:FD:C0:C8:27:3E:A5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/m2BpbWh3OuLlMvDNXRD9wMgnPqU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/HbUDUtOLt0XROQVcbsGNn77SCVs.roa
Signing time: Mon 26 Aug 2024 05:27:51 +0000
ROA not before: Mon 26 Aug 2024 05:27:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18178
IP address blocks: 103.180.20.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658 (0x292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B60696D68773AE2E532F0CD5D10FDC0C8273EA5
Validity
Not Before: Aug 26 05:27:51 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1DB50352D38BB745D139055C6EC18D9FBED2095B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ec:4b:a9:14:ba:07:04:59:c9:f3:65:3c:ad:
7f:02:ed:1a:b3:59:e0:93:e4:4a:90:a6:c6:0f:a8:
44:b5:82:ba:fc:05:04:e7:62:9b:2e:d4:ea:9c:e8:
a5:ba:ab:a6:10:b2:8d:f6:b5:41:8e:16:e1:6f:ab:
61:88:d7:f7:02:fb:13:8c:92:d3:ac:e7:27:d6:02:
e1:55:02:13:25:af:ce:ca:9b:1d:b0:ff:d2:f1:f8:
17:54:3b:7e:45:7d:55:db:71:6a:f6:e9:d7:d6:a5:
12:48:89:49:b7:94:2a:ce:d8:69:39:27:f4:8b:99:
ae:e1:19:35:2b:8d:6b:43:6b:d7:de:6a:a7:7e:18:
22:29:4b:0d:5e:ba:a3:f7:17:87:6a:fc:72:cd:85:
c4:c0:dd:7d:f7:b1:bb:28:7a:af:8c:1c:37:0b:cf:
4c:af:f6:df:d3:92:e8:15:b5:72:8c:ad:35:92:1f:
ea:d6:ec:9c:a0:39:b5:03:10:aa:5d:be:f6:40:8f:
3c:89:1a:b9:00:ef:fb:2c:64:55:27:38:ef:e0:1c:
6b:35:3e:e6:22:96:fd:81:15:d2:30:ca:ce:5c:a6:
7d:34:f1:68:ef:4c:38:51:55:19:b5:e4:33:b2:16:
be:03:72:6b:cd:0f:43:91:cc:f9:b9:c1:19:b6:d3:
98:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B5:03:52:D3:8B:B7:45:D1:39:05:5C:6E:C1:8D:9F:BE:D2:09:5B
X509v3 Authority Key Identifier:
keyid:9B:60:69:6D:68:77:3A:E2:E5:32:F0:CD:5D:10:FD:C0:C8:27:3E:A5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/m2BpbWh3OuLlMvDNXRD9wMgnPqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/m2BpbWh3OuLlMvDNXRD9wMgnPqU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/HbUDUtOLt0XROQVcbsGNn77SCVs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.20.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:9a:8c:57:8d:9d:bd:22:68:dd:0f:d1:4a:b1:b5:00:04:fb:
a6:e1:52:f9:d4:14:c0:37:44:d3:70:b2:60:76:71:db:67:a6:
8e:cb:84:cb:fa:df:85:bc:4c:9e:14:ac:07:27:02:be:e2:7a:
e6:1f:3b:f3:20:ec:02:30:a3:1c:8c:47:71:32:ca:fc:e7:9b:
61:19:ae:4d:6a:7a:d5:fc:5f:c7:3a:f4:e1:9e:25:57:d6:81:
0c:a0:8e:4a:ce:75:f4:c5:f3:22:7e:09:20:12:21:0b:c5:a6:
fb:b2:95:77:35:22:13:57:fe:9f:8c:14:cc:cb:cf:c8:25:80:
df:89:bd:01:2c:e1:a3:0a:70:f2:50:1b:59:d0:cb:cb:ae:0b:
b4:81:6a:10:b1:fe:bb:dc:e0:30:5a:81:04:b4:c8:4e:5c:32:
e2:de:f6:ce:a3:a5:01:cb:c5:15:be:95:c1:dd:37:75:3a:4a:
76:a6:3c:6d:8b:f3:ca:c8:ff:d7:d3:67:a1:4f:8a:91:0a:b6:
ff:20:3b:da:9c:dd:82:8f:6a:ae:b6:39:bd:7d:9a:b6:ef:c9:
e1:2f:36:3a:78:7b:79:38:13:1d:03:f0:87:f0:16:00:b8:43:
35:5d:b2:8c:c5:35:2f:25:b0:d6:5b:6b:da:75:96:2d:98:b9:
cd:3e:7a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 22 22:34:31 2024 by rpki-client on console-fra.rpki-client.org