Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ULC/QuYR4x9mrMnHwL0n0UOKF6oiMPU.roa
File: QuYR4x9mrMnHwL0n0UOKF6oiMPU.roa (raw, json)
Hash identifier: KCctCGNzXlTR5QK8ztN6GaHds7YbMpQiGxsbfkvZax8=
Subject key identifier: 42:E6:11:E3:1F:66:AC:C9:C7:C0:BD:27:D1:43:8A:17:AA:22:30:F5
Certificate issuer: /CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B
Certificate serial: 038D
Authority key identifier: BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/QuYR4x9mrMnHwL0n0UOKF6oiMPU.roa
Signing time: Fri 01 Sep 2023 10:16:41 +0000
ROA not before: Fri 01 Sep 2023 10:16:41 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131642
IP address blocks: 103.157.42.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 909 (0x38d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B
Validity
Not Before: Sep 1 10:16:41 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=42E611E31F66ACC9C7C0BD27D1438A17AA2230F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:08:1b:d0:af:1a:e4:6d:6c:66:22:3d:65:a9:
76:03:4e:8b:d3:5b:f6:2d:19:9a:db:55:10:52:99:
3f:59:80:df:03:b4:c9:b2:9d:a6:9a:df:f5:b9:e4:
ad:bc:68:c9:90:f7:26:15:ec:d9:05:74:a6:75:e7:
e8:f2:9a:d4:43:a7:7b:da:10:d3:e6:dc:00:81:29:
68:57:97:d8:a3:50:20:7e:46:2c:d3:48:86:20:1a:
42:4a:8f:4f:fb:33:54:dd:5c:41:d3:78:16:ad:8c:
f9:22:ac:72:95:5c:19:ba:88:63:d1:2a:9d:72:64:
a4:9d:b2:e7:b8:65:44:d6:e6:99:c4:fd:71:dc:3b:
5e:e9:d9:f6:60:af:ba:b2:e9:b7:2c:71:3e:74:9b:
81:16:7a:f6:9c:32:4b:41:e6:17:50:b0:e8:69:15:
b5:23:f7:92:76:d4:68:94:55:66:64:a8:89:57:e3:
91:9f:a9:b5:38:31:a6:34:42:2a:94:d3:89:47:88:
2e:03:29:95:b9:bd:f9:1a:ab:8d:d4:68:2a:6f:47:
dd:19:b4:e1:f2:ca:dc:da:73:a1:34:fe:76:03:91:
a5:27:b5:fa:6e:d5:94:ef:1e:3f:57:bc:1d:26:5b:
ec:a1:66:c5:eb:98:3b:b8:9a:f5:75:fd:94:ea:e5:
b6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E6:11:E3:1F:66:AC:C9:C7:C0:BD:27:D1:43:8A:17:AA:22:30:F5
X509v3 Authority Key Identifier:
keyid:BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/QuYR4x9mrMnHwL0n0UOKF6oiMPU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.42.0/23
Signature Algorithm: sha256WithRSAEncryption
47:10:f5:fe:db:5d:a9:10:a6:c0:ef:fe:74:e2:ea:70:c0:68:
13:42:d6:5a:90:6f:be:1a:dd:d7:51:37:d1:13:ad:b1:e6:00:
e7:18:ae:8e:92:ae:7f:cf:e1:04:24:59:67:05:66:c8:18:dc:
56:c7:90:01:24:71:fe:20:dc:eb:9d:90:d6:9b:f6:43:6e:ad:
77:41:08:d4:6b:c6:86:d7:52:e8:1b:dd:7e:f8:03:76:17:9f:
d1:6e:7c:26:f2:ad:0f:2b:12:40:a6:96:ef:27:a3:04:9f:ef:
02:b5:40:14:09:4f:fd:2d:77:db:66:74:20:9e:05:a9:fa:92:
4c:62:d6:90:9e:43:49:c8:38:e5:34:9a:8b:31:cb:dc:06:90:
4a:03:5a:67:32:95:95:70:ea:f4:1f:6e:d8:d1:47:a8:f6:e9:
06:e3:98:2c:7b:87:3d:eb:ae:4e:55:5c:6f:1f:d9:d2:ee:27:
9d:d4:d9:09:9a:09:72:da:bc:6a:7e:a1:8d:4c:d8:9c:90:66:
fe:13:84:d6:51:7c:f7:a6:8e:4b:28:e7:06:b4:24:41:22:d1:
aa:58:1e:e1:c2:44:00:14:0e:de:13:d3:c9:65:df:bd:93:25:
e2:f3:f6:a6:0b:da:c9:0e:0a:cb:43:cb:3e:6c:48:6d:c2:4a:
25:79:74:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:22 2024 by rpki-client on console-ams.rpki-client.org