Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TTNS/HNOHyQ6sdzVcp0vHGEDduUbZiG8.roa
File: HNOHyQ6sdzVcp0vHGEDduUbZiG8.roa (raw, json)
Hash identifier: jp4CzdKAc9wTNZAWxR0pRmOWSKGhQikc2IlDKZQPg+Q=
Subject key identifier: 1C:D3:87:C9:0E:AC:77:35:5C:A7:4B:C7:18:40:DD:B9:46:D9:88:6F
Certificate issuer: /CN=298ED2FD6AD5C5B5687DF614A275C2FC848D4E94
Certificate serial: 0122
Authority key identifier: 29:8E:D2:FD:6A:D5:C5:B5:68:7D:F6:14:A2:75:C2:FC:84:8D:4E:94
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KY7S_WrVxbVoffYUonXC_ISNTpQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/HNOHyQ6sdzVcp0vHGEDduUbZiG8.roa
Signing time: Fri 01 Sep 2023 10:04:05 +0000
ROA not before: Fri 01 Sep 2023 10:04:05 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 31972
IP address blocks: 103.159.206.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298ED2FD6AD5C5B5687DF614A275C2FC848D4E94
Validity
Not Before: Sep 1 10:04:05 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1CD387C90EAC77355CA74BC71840DDB946D9886F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b8:b0:a7:c4:bf:d8:ba:9b:eb:6a:31:7b:9c:
9a:25:83:c8:3a:c2:f4:97:3c:df:6a:ba:a4:ab:11:
e3:33:d8:11:09:ba:93:ff:c5:eb:a9:5b:35:3a:f6:
06:06:5a:cc:fd:8a:2f:2f:52:35:e0:2e:bd:4f:68:
b7:85:e9:75:51:39:f9:48:eb:cb:71:b5:9d:67:ed:
da:c3:2e:d8:e7:e1:40:c4:f3:f9:f5:0d:38:0d:43:
3a:d6:29:00:fd:fc:33:80:23:dd:8c:f8:03:1b:f3:
1a:1f:73:f0:93:5a:e3:b6:4a:fe:98:a9:35:50:e5:
fe:97:a3:d7:ba:84:16:11:d2:12:1e:a2:4e:66:da:
16:b9:2b:4e:26:a5:4b:da:3d:8c:9e:11:9c:7c:22:
47:c2:bb:fa:75:a1:73:f4:fd:59:ff:7a:32:e3:6f:
00:a3:00:12:2e:d3:9d:25:dd:ff:08:78:09:c3:23:
ba:53:ee:98:75:ca:72:9d:7e:17:4d:89:38:91:72:
cc:d6:04:9e:c3:05:40:bd:57:6e:08:c0:37:f7:ca:
66:f4:71:cd:49:17:e4:c3:9a:b8:7d:ae:79:68:c0:
d3:5a:18:22:43:28:34:fc:59:90:13:5e:5d:b4:f9:
3c:1c:af:39:f1:5a:bf:bc:37:d4:9a:5a:69:43:7a:
de:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D3:87:C9:0E:AC:77:35:5C:A7:4B:C7:18:40:DD:B9:46:D9:88:6F
X509v3 Authority Key Identifier:
keyid:29:8E:D2:FD:6A:D5:C5:B5:68:7D:F6:14:A2:75:C2:FC:84:8D:4E:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KY7S_WrVxbVoffYUonXC_ISNTpQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/HNOHyQ6sdzVcp0vHGEDduUbZiG8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.206.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:f1:bf:41:c5:5f:08:dd:b7:78:83:90:c3:36:4e:45:f4:0f:
b9:5b:9d:d2:39:ea:b8:6f:c9:f6:0e:a7:fb:c5:19:5b:a5:54:
fa:e2:1b:40:d8:d9:02:dd:7f:79:91:ef:a9:9f:d0:bf:fb:89:
a2:3d:a7:01:6b:79:08:6c:b3:79:ce:a5:9c:50:a6:b1:cc:54:
f9:d5:9f:57:67:05:eb:5f:c4:c2:ae:2b:50:17:e9:73:dd:f5:
0f:53:7a:b5:e7:fb:5f:da:33:01:98:ef:2f:08:7a:de:2f:e8:
39:11:63:12:b2:ca:2a:eb:47:e2:15:8d:ae:e3:d2:b3:85:2d:
c0:f0:8c:4a:17:12:80:20:8a:51:4f:ae:de:2a:29:19:4d:fc:
9c:9f:95:da:b8:a5:a1:0c:7b:73:61:60:b6:2e:9f:8c:bc:49:
73:8c:c8:9e:5e:98:19:63:e1:04:d2:a8:42:a2:61:de:dd:ae:
c5:f7:11:fc:7e:3b:81:6b:d1:e1:c0:aa:da:c3:d0:78:9c:60:
24:d4:67:ba:2c:75:e5:7b:1f:db:33:18:3c:3a:bd:5b:d0:6f:
db:75:db:3d:f1:23:d9:86:05:0d:72:d4:d8:36:06:b0:32:99:
ec:ce:68:26:97:a0:f4:1f:c2:d9:90:22:80:53:7c:07:c2:0c:
49:22:c0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org