Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIANSIN/2RLLkurBJwmBKf9X_4vipas_7TI.roa
File: 2RLLkurBJwmBKf9X_4vipas_7TI.roa (raw, json)
Hash identifier: HCH9KTypOcdjenG5BFlHfoQCVo+GhjamtYeWytYL3go=
Subject key identifier: D9:12:CB:92:EA:C1:27:09:81:29:FF:57:FF:8B:E2:A5:AB:3F:ED:32
Certificate issuer: /CN=9654330DD1FA2ED60FCD69F26F2138CA2C8BEC73
Certificate serial: EE
Authority key identifier: 96:54:33:0D:D1:FA:2E:D6:0F:CD:69:F2:6F:21:38:CA:2C:8B:EC:73
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/llQzDdH6LtYPzWnybyE4yiyL7HM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIANSIN/2RLLkurBJwmBKf9X_4vipas_7TI.roa
Signing time: Fri 20 Oct 2023 01:35:25 +0000
ROA not before: Fri 20 Oct 2023 01:35:25 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7483
IP address blocks: 103.24.52.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9654330DD1FA2ED60FCD69F26F2138CA2C8BEC73
Validity
Not Before: Oct 20 01:35:25 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D912CB92EAC127098129FF57FF8BE2A5AB3FED32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b5:70:d8:7e:2d:01:6d:38:02:08:e3:85:db:
83:86:6b:0c:b5:19:c4:fb:5c:5e:1d:af:f8:42:8d:
92:38:62:a4:b3:e2:e9:43:5e:20:c3:13:2b:fb:fd:
62:fb:b6:65:d6:80:08:28:10:a4:0b:ca:0b:1b:59:
57:93:aa:86:56:80:02:bf:c7:1b:18:d3:49:7d:05:
3a:e1:60:70:99:9a:ce:4a:2f:18:19:15:36:92:b7:
71:3e:11:05:f5:4c:26:73:17:b6:a6:37:8d:ce:eb:
99:4c:3f:df:69:75:97:60:6b:ec:62:c6:be:4c:3d:
99:f7:89:65:9a:9b:4f:e2:03:29:cf:cb:52:64:1e:
2b:41:1d:86:a0:55:27:30:12:ee:77:d9:c5:d7:bb:
88:65:b7:d9:ac:8f:89:53:19:fb:d9:92:ca:26:1c:
2f:79:ea:c9:54:79:15:b3:d6:5f:a8:56:17:94:82:
ad:3a:17:85:44:74:ba:69:fe:d3:fa:97:54:f7:97:
8c:ac:1c:ab:fa:ea:4c:85:ef:00:fb:0d:04:35:c5:
67:cb:27:7a:1a:46:87:57:bd:1e:ec:18:fe:5b:e6:
22:0a:db:bb:3a:86:06:24:6b:8e:f8:fc:be:56:4f:
a5:0d:94:02:07:b0:63:ea:2d:a3:a2:d8:a2:4a:ac:
10:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:12:CB:92:EA:C1:27:09:81:29:FF:57:FF:8B:E2:A5:AB:3F:ED:32
X509v3 Authority Key Identifier:
keyid:96:54:33:0D:D1:FA:2E:D6:0F:CD:69:F2:6F:21:38:CA:2C:8B:EC:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIANSIN/llQzDdH6LtYPzWnybyE4yiyL7HM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/llQzDdH6LtYPzWnybyE4yiyL7HM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIANSIN/2RLLkurBJwmBKf9X_4vipas_7TI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.24.52.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:54:50:8d:5d:92:57:a9:d8:69:a3:6b:71:32:ba:ba:2c:12:
dc:81:0d:9a:45:25:bc:2d:4c:16:36:2c:82:ce:a2:68:e9:a3:
02:2d:17:94:d9:f9:c7:8c:f4:89:ee:80:1e:38:55:a5:e6:21:
22:d8:e5:41:0c:96:c2:3b:fb:6d:39:91:ce:be:3f:87:10:83:
94:b0:1f:ef:d0:c1:a3:88:b1:99:5d:bb:f5:ce:2a:9e:39:c5:
59:f5:af:83:d8:52:da:3f:a2:d9:a6:7e:53:c8:59:40:cd:f3:
ae:5a:f1:f7:8d:14:82:35:4a:d9:2d:c8:b9:19:85:e6:25:a9:
c2:64:e3:7c:33:86:8d:d4:e8:e7:46:50:98:02:d2:9b:7b:58:
64:49:b9:04:34:91:4a:89:a0:88:af:3c:89:f2:eb:0c:b4:c6:
e0:cb:ac:50:bc:07:ae:d2:b3:c4:09:5e:61:9f:8e:a7:47:ab:
76:b2:f8:89:f6:97:8a:c1:76:00:0d:a9:ac:e4:90:a7:42:4b:
3c:bb:e0:df:2e:55:b3:61:27:d2:9c:47:77:3d:27:ed:54:b1:
2f:a9:45:49:fa:de:0d:f9:31:01:02:7b:cb:00:e3:1b:77:b2:
19:a0:c6:1c:8d:09:d8:75:56:1f:f0:ed:8b:dc:2b:51:08:78:
62:9f:29:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org