Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNOC/PtK7rWL9yJdz4cnhuISD9XbPh2s.roa
File: PtK7rWL9yJdz4cnhuISD9XbPh2s.roa (raw, json)
Hash identifier: Xhs5SR8g8ycFPA72SyHlmRSzCtHoFxOx0RuYRRjvJb8=
Subject key identifier: 3E:D2:BB:AD:62:FD:C8:97:73:E1:C9:E1:B8:84:83:F5:76:CF:87:6B
Certificate issuer: /CN=23D5E0B3520DAC4269AB4A425B23D225CB264A88
Certificate serial: 117D
Authority key identifier: 23:D5:E0:B3:52:0D:AC:42:69:AB:4A:42:5B:23:D2:25:CB:26:4A:88
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/I9Xgs1INrEJpq0pCWyPSJcsmSog.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNOC/PtK7rWL9yJdz4cnhuISD9XbPh2s.roa
Signing time: Fri 01 Sep 2023 10:11:51 +0000
ROA not before: Fri 01 Sep 2023 10:11:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 21859
IP address blocks: 103.123.242.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4477 (0x117d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23D5E0B3520DAC4269AB4A425B23D225CB264A88
Validity
Not Before: Sep 1 10:11:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3ED2BBAD62FDC89773E1C9E1B88483F576CF876B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0f:63:8d:a8:c6:00:7a:b1:ff:17:6c:83:1d:
9a:f0:34:01:98:9e:1e:16:6c:ea:39:32:6a:c8:bb:
bf:72:bf:d4:bd:78:58:9b:e2:d4:a0:eb:1a:67:2f:
5c:a6:49:de:9b:1d:f4:2d:a0:3e:1a:ba:27:16:cd:
29:48:4b:24:9a:9c:92:c4:70:02:0d:f2:84:58:50:
7c:e9:a7:f0:95:5b:11:d8:b7:a6:c9:a8:24:9e:e3:
20:d4:95:68:4d:34:1d:84:99:38:ff:4b:3f:81:af:
c1:b1:e3:9b:b2:68:5d:4f:20:0d:85:11:61:92:c5:
6e:8f:8b:ef:79:5d:89:56:ad:97:a7:8b:97:fd:56:
e8:fe:d3:ec:81:c7:cd:ca:21:f1:dd:03:96:06:a4:
64:e7:51:9d:c7:bd:ab:53:59:88:c5:e3:31:7f:46:
d7:c4:51:bb:98:29:a1:6b:b1:ba:44:84:d1:46:f5:
7e:a3:2c:c1:ab:b5:ee:bc:34:f4:76:b3:27:9b:40:
45:df:b1:7b:90:40:db:aa:40:e2:ed:fe:4d:6e:13:
8b:d6:9b:84:3d:24:ec:8d:38:62:7d:c6:c6:c1:db:
7e:85:ce:ac:fc:9f:66:c3:c2:9a:43:53:28:6a:0f:
89:c6:dd:66:59:84:1f:e6:1c:b2:32:3a:67:b2:37:
5a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D2:BB:AD:62:FD:C8:97:73:E1:C9:E1:B8:84:83:F5:76:CF:87:6B
X509v3 Authority Key Identifier:
keyid:23:D5:E0:B3:52:0D:AC:42:69:AB:4A:42:5B:23:D2:25:CB:26:4A:88
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNOC/I9Xgs1INrEJpq0pCWyPSJcsmSog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/I9Xgs1INrEJpq0pCWyPSJcsmSog.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNOC/PtK7rWL9yJdz4cnhuISD9XbPh2s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.242.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:35:a5:bc:ba:31:ae:74:ed:51:c8:c2:2d:c8:f2:30:6e:b1:
72:a4:29:06:65:0c:f1:36:5b:8a:9e:ce:f0:92:9e:86:a6:4c:
38:27:6c:93:6e:de:9b:21:23:a1:f9:5e:3c:e1:5a:b9:68:61:
50:d3:83:c4:57:ea:46:31:5a:5f:4e:0b:19:ba:60:06:f9:ce:
ec:f5:6f:9b:18:08:42:a0:00:f8:11:a3:64:40:02:cb:0d:b2:
f0:c1:f7:a5:17:49:5d:b7:32:74:7a:b5:0e:ef:de:ae:48:86:
44:2b:a4:e8:97:a7:24:3d:c2:e0:2e:f0:0e:87:4b:d4:96:77:
71:a3:c3:9a:b3:88:15:1a:a6:2d:28:83:38:6c:df:11:be:eb:
cc:2a:2c:2a:bd:92:0b:30:ec:d0:ac:16:a1:94:f1:87:c1:51:
01:5b:45:64:9f:a5:5e:e3:d2:64:48:2d:21:f1:d8:7f:a3:4e:
b9:be:55:38:42:e4:f4:06:99:8e:ed:72:5b:dc:ad:2c:57:7b:
ad:59:4e:df:8c:58:b7:8f:eb:f0:bf:5c:61:fd:2f:d2:98:23:
4a:d8:5f:e6:84:e2:77:3d:cb:6a:52:b1:31:66:91:26:71:36:
10:ad:5a:9b:9c:fe:40:47:32:7d:10:11:c7:51:3c:92:c9:77:
22:2c:94:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org