Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIH/_jfgeqZHPYWERFxj6xpB0WEKkqk.roa
File: _jfgeqZHPYWERFxj6xpB0WEKkqk.roa (raw, json)
Hash identifier: pBre5Wz4tf6vB+V4YZsVXidU2e/6JPFUB/Amw2UkO+s=
Subject key identifier: FE:37:E0:7A:A6:47:3D:85:84:44:5C:63:EB:1A:41:D1:61:0A:92:A9
Certificate issuer: /CN=2D7204617354D70523B6F65A270712B6B19D815E
Certificate serial: 0BB5
Authority key identifier: 2D:72:04:61:73:54:D7:05:23:B6:F6:5A:27:07:12:B6:B1:9D:81:5E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/_jfgeqZHPYWERFxj6xpB0WEKkqk.roa
Signing time: Wed 31 Jan 2024 15:33:29 +0000
ROA not before: Wed 31 Jan 2024 15:33:29 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 5065
IP address blocks: 103.129.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2997 (0xbb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D7204617354D70523B6F65A270712B6B19D815E
Validity
Not Before: Jan 31 15:33:29 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FE37E07AA6473D8584445C63EB1A41D1610A92A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:28:32:3a:d2:89:a4:bd:9c:7b:aa:1b:66:
75:6a:8a:2d:75:09:91:9d:97:24:fc:8b:a4:da:e5:
77:20:63:ec:e8:b7:3c:b2:3d:6d:b8:df:87:e3:19:
7e:b3:96:dc:8e:a4:1e:ca:d3:f0:64:c2:67:bf:24:
21:e7:b7:b3:a7:f4:48:4f:8a:52:ae:c1:b6:99:87:
98:9e:5e:39:25:ea:fd:63:2a:25:5a:16:9d:47:8d:
bd:5b:f8:b3:8f:43:26:59:00:7e:31:4c:1f:12:57:
ac:83:00:13:01:8b:12:b7:d4:23:6f:cf:7c:a9:a9:
45:16:00:71:b9:cf:96:ca:31:b6:8b:bc:11:6e:37:
2c:4b:47:ca:a4:ac:ee:7a:ac:3a:98:a9:23:ac:76:
22:bd:3f:9a:19:0b:43:6d:b9:0a:d9:03:4d:8c:9e:
79:29:64:89:6a:56:f9:3a:83:5d:85:17:85:da:72:
46:8b:90:e6:3d:2b:f6:37:d5:fb:21:28:27:f2:f4:
1d:78:c3:4d:ca:41:e3:83:bb:91:c7:cb:81:b7:70:
60:79:cc:b1:c1:fb:0a:77:74:b7:54:db:b2:1f:d2:
5c:48:fe:7b:ab:5a:29:e7:a9:78:0f:2a:23:ae:1d:
d9:8f:9f:69:44:58:a2:e3:d5:18:1d:53:a3:8a:ed:
bd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:37:E0:7A:A6:47:3D:85:84:44:5C:63:EB:1A:41:D1:61:0A:92:A9
X509v3 Authority Key Identifier:
keyid:2D:72:04:61:73:54:D7:05:23:B6:F6:5A:27:07:12:B6:B1:9D:81:5E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/LXIEYXNU1wUjtvZaJwcStrGdgV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/_jfgeqZHPYWERFxj6xpB0WEKkqk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.129.144.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f0:df:8d:87:21:38:4e:68:99:12:2e:bd:37:ad:65:d7:86:
20:c7:f7:ca:a8:39:92:b2:b0:b3:de:73:78:d8:4e:d5:8b:a1:
04:02:13:7c:3a:d4:0a:70:19:c6:98:3c:67:34:01:6b:55:43:
5b:7c:8f:88:e7:22:2f:2e:82:7d:6d:0d:5d:9f:40:d1:08:6c:
db:d4:c4:73:81:d2:b4:9e:ef:6c:0a:35:28:77:90:88:23:ba:
8a:fa:6a:72:d3:f3:65:2c:cb:13:a0:b0:0c:2e:81:6a:78:17:
55:e9:66:0a:38:3e:99:40:f9:a7:bf:29:e6:e4:ef:23:85:07:
cb:3d:76:41:fd:34:e8:0f:c7:cd:a6:9f:b4:df:8f:83:48:01:
89:03:4a:49:26:f1:cb:ac:d5:29:55:4b:5f:db:92:5d:ea:2b:
7b:9d:bf:68:b8:45:ae:df:1d:f8:d2:3c:5d:4d:3c:ae:9c:4b:
33:97:22:10:f6:ca:b5:de:49:bb:47:c4:51:b2:63:fc:57:85:
e1:a5:ef:06:d3:04:16:5b:71:5f:70:78:fd:88:ad:1e:9d:13:
07:ce:73:27:ce:89:d4:80:86:d1:f2:34:20:6c:a4:87:6f:fc:
6d:10:4d:b8:bf:2e:31:eb:c8:9c:2c:8a:63:aa:3c:9d:7d:05:
be:96:27:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org