Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIH/DPLMEoJRT08z_tHMw1VlTgdmQAw.roa
File: DPLMEoJRT08z_tHMw1VlTgdmQAw.roa (raw, json)
Hash identifier: DtPqJ7YDI6a5DTBgITT3fiF1BIS3Dcn2sOp5BMWPdXQ=
Subject key identifier: 0C:F2:CC:12:82:51:4F:4F:33:FE:D1:CC:C3:55:65:4E:07:66:40:0C
Certificate issuer: /CN=2D7204617354D70523B6F65A270712B6B19D815E
Certificate serial: 0C3B
Authority key identifier: 2D:72:04:61:73:54:D7:05:23:B6:F6:5A:27:07:12:B6:B1:9D:81:5E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/DPLMEoJRT08z_tHMw1VlTgdmQAw.roa
Signing time: Thu 15 Aug 2024 16:26:56 +0000
ROA not before: Thu 15 Aug 2024 16:26:56 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38254
IP address blocks: 103.129.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3131 (0xc3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D7204617354D70523B6F65A270712B6B19D815E
Validity
Not Before: Aug 15 16:26:56 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0CF2CC1282514F4F33FED1CCC355654E0766400C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:29:d9:3d:e5:12:b9:f6:eb:c0:52:74:4d:6b:
c1:26:b9:02:5d:04:72:52:bd:74:40:1d:74:d5:68:
2d:31:f2:26:c8:e8:0d:e2:b1:82:ea:f7:f7:6c:e3:
61:49:ed:78:95:8b:e2:56:f6:a4:3c:55:2f:ea:4c:
08:08:c7:a6:d8:4b:3a:f6:22:3f:95:b1:36:47:fd:
ee:11:2a:e2:86:ef:d6:44:13:96:e0:be:34:9c:88:
39:11:e6:df:5e:e6:d9:34:b9:6e:50:96:9a:6b:a8:
2d:ed:90:58:93:c7:2b:d4:93:95:09:df:64:65:30:
9a:bc:3a:27:e6:59:83:73:98:9f:8e:57:d1:8d:fb:
68:b4:89:a9:84:ef:f1:35:a5:6b:aa:03:3c:a5:21:
5d:c1:03:70:df:d2:a8:78:48:f1:4f:fa:dd:3a:b7:
46:35:d8:2d:d7:93:3e:2d:c8:26:89:a0:c8:7e:17:
78:19:7f:38:fe:61:e6:4b:0d:e9:93:75:00:10:28:
1f:23:21:60:3d:e8:23:e3:94:23:22:25:32:80:e7:
37:6d:ee:ce:74:47:4d:02:83:06:37:4c:86:05:44:
3d:a0:9e:58:7a:85:0c:f3:3d:41:28:76:95:e7:25:
4e:fc:75:e6:66:16:bd:ba:52:98:1f:40:c5:2c:d9:
55:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F2:CC:12:82:51:4F:4F:33:FE:D1:CC:C3:55:65:4E:07:66:40:0C
X509v3 Authority Key Identifier:
keyid:2D:72:04:61:73:54:D7:05:23:B6:F6:5A:27:07:12:B6:B1:9D:81:5E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/LXIEYXNU1wUjtvZaJwcStrGdgV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/DPLMEoJRT08z_tHMw1VlTgdmQAw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.129.145.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:8b:a3:06:68:3a:d4:8f:eb:82:43:0a:35:3f:c6:36:87:76:
f7:40:df:0d:db:3c:af:8e:72:9a:b7:4c:b9:46:93:91:92:81:
82:88:ad:0a:68:2a:7d:12:d5:90:dd:d4:56:cb:07:a5:dc:8b:
e6:2a:06:56:b1:01:0c:ae:a9:e3:71:55:2e:c9:5d:29:6c:4d:
95:81:7d:a0:1e:53:fa:01:39:bd:17:d6:d0:96:8c:41:42:f2:
fa:56:14:8f:42:98:2e:45:13:7c:64:7a:c4:76:98:6f:ff:85:
05:fa:56:89:de:ab:f9:40:45:3f:79:71:46:2d:1e:11:4a:a6:
9b:40:c7:c5:c6:83:2c:4d:fa:0e:d4:b9:8a:73:d1:33:a1:69:
89:3f:ad:b6:36:fa:8d:86:a8:a0:bd:36:de:33:11:1e:80:2f:
9f:27:67:7d:33:a7:4d:37:96:79:e4:b6:fb:7d:d5:e5:13:a4:
c6:66:40:6d:70:e2:b2:2e:de:dc:ab:7e:73:60:0c:4a:b9:ff:
6b:e0:6f:aa:2b:d3:cd:29:5d:df:d5:e4:02:99:e5:7b:cd:71:
d4:d6:b2:9f:16:11:76:31:c0:2f:72:e7:57:df:b9:ae:ca:f4:
ca:ce:0f:b3:75:a6:4e:93:2c:8d:b6:d6:9b:21:47:66:0c:22:
b2:74:7c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org