Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TNET/YiZQpwvc7O_Y1rErUw2KxzzGjPo.roa
File: YiZQpwvc7O_Y1rErUw2KxzzGjPo.roa (raw, json)
Hash identifier: G45d3kNmq4/wb++PydlLZWguoJr2pqZi29IO9+cjz98=
Subject key identifier: 62:26:50:A7:0B:DC:EC:EF:D8:D6:B1:2B:53:0D:8A:C7:3C:C6:8C:FA
Certificate issuer: /CN=9FE26AE5E0DA56EC49EC9986B9C894D5B898A153
Certificate serial: 0886
Authority key identifier: 9F:E2:6A:E5:E0:DA:56:EC:49:EC:99:86:B9:C8:94:D5:B8:98:A1:53
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/n-Jq5eDaVuxJ7JmGuciU1biYoVM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/YiZQpwvc7O_Y1rErUw2KxzzGjPo.roa
Signing time: Wed 18 Nov 2020 07:12:43 +0000
ROA not before: Wed 18 Nov 2020 07:12:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38851
IP address blocks: 103.46.188.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2182 (0x886)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FE26AE5E0DA56EC49EC9986B9C894D5B898A153
Validity
Not Before: Nov 18 07:12:43 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=622650A70BDCECEFD8D6B12B530D8AC73CC68CFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a5:73:95:20:2b:a8:75:5e:d0:92:05:8a:98:
3d:ba:f7:31:86:87:8e:d2:25:2b:d9:06:ae:69:32:
a2:b3:a7:0e:76:34:44:0c:dd:0b:f9:41:12:1e:dd:
98:f2:d6:15:8c:0b:29:5c:16:83:2c:7f:82:08:59:
98:1b:b9:96:48:c3:fe:50:d9:a9:4b:03:db:c2:92:
1f:d7:81:35:ae:d4:cb:1d:ba:97:49:69:f6:a3:d1:
ed:4c:96:66:a2:46:45:ac:d0:b5:7b:c7:f0:3d:16:
a9:0b:1d:a9:95:fe:5c:44:ab:4d:cb:96:fd:54:e3:
7e:ab:9d:7a:ef:49:ed:85:2c:93:c2:87:27:37:c2:
66:69:ec:91:4e:8e:cd:4a:9e:1b:1a:13:75:93:22:
09:fa:c2:f8:46:e7:05:1e:55:d4:2d:06:04:10:59:
a3:1c:b8:e8:5d:c2:17:ff:3a:ad:ba:15:eb:ae:89:
a2:d4:70:cf:e0:55:f2:6b:a6:10:7e:f3:b5:1f:04:
80:3b:e7:17:8b:1a:52:e8:ba:a8:0a:d2:e3:02:14:
13:2c:ac:93:b4:40:2a:b6:3f:12:ea:7c:d7:70:12:
60:bc:93:dc:2b:35:87:eb:e7:bf:ba:df:90:c8:5d:
d7:99:1b:f3:5f:3b:5c:11:b2:91:db:9d:67:8d:85:
eb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:26:50:A7:0B:DC:EC:EF:D8:D6:B1:2B:53:0D:8A:C7:3C:C6:8C:FA
X509v3 Authority Key Identifier:
keyid:9F:E2:6A:E5:E0:DA:56:EC:49:EC:99:86:B9:C8:94:D5:B8:98:A1:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/n-Jq5eDaVuxJ7JmGuciU1biYoVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/n-Jq5eDaVuxJ7JmGuciU1biYoVM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TNET/YiZQpwvc7O_Y1rErUw2KxzzGjPo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.46.188.0/23
Signature Algorithm: sha256WithRSAEncryption
76:66:84:9b:d0:67:d8:8b:f8:89:f6:4f:04:95:04:6c:25:42:
d1:b8:73:d0:66:7c:a9:97:d7:f1:2d:ae:4c:3c:89:89:23:e5:
fd:72:02:e6:33:9f:ef:2a:05:4b:39:35:ce:af:c9:ee:13:f3:
eb:3e:a4:76:65:61:03:bb:78:09:c3:f8:bc:46:94:58:08:de:
76:6f:9f:4b:cb:01:20:98:0f:57:d1:95:67:9f:4c:16:21:ee:
38:ac:3a:35:c5:81:90:d4:9c:ae:10:ef:f9:fd:c9:dd:4e:d3:
ba:81:fd:bc:35:90:00:e4:a9:a2:67:8a:57:1b:4a:44:61:46:
90:f8:72:70:75:6f:bd:53:69:9a:8a:02:98:31:fc:71:18:58:
68:76:59:62:2e:3a:63:77:15:f9:b4:25:2b:d9:3e:65:6a:e6:
b5:e7:d1:f4:2c:7f:0d:ed:ba:73:06:e4:33:94:1e:ac:cd:c5:
b8:79:20:5b:b7:32:c1:5f:2b:17:97:48:65:47:54:d3:5b:a3:
4b:d7:97:95:a1:7e:1e:22:58:17:75:ca:32:5c:2f:89:eb:a6:
cc:5a:ec:16:f9:9c:50:12:44:dc:d7:e8:16:9c:36:86:9a:60:
82:78:f1:b9:37:79:81:fe:b0:75:96:98:6a:4f:f4:6a:90:a7:
ef:df:47:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org