Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/4BV5d92ovYqirGBGsYnradD3Bhc.roa
File: 4BV5d92ovYqirGBGsYnradD3Bhc.roa (raw, json)
Hash identifier: 6622FW1efR6o9uhVxLlFAWD0Qeh/IDoCPVNwSs+jQgM=
Subject key identifier: E0:15:79:77:DD:A8:BD:8A:A2:AC:60:46:B1:89:EB:69:D0:F7:06:17
Certificate issuer: /CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B
Certificate serial: 0B41
Authority key identifier: 39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/4BV5d92ovYqirGBGsYnradD3Bhc.roa
Signing time: Fri 01 Sep 2023 10:17:07 +0000
ROA not before: Fri 01 Sep 2023 10:17:07 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17408
IP address blocks: 103.123.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2881 (0xb41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B
Validity
Not Before: Sep 1 10:17:07 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E0157977DDA8BD8AA2AC6046B189EB69D0F70617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:44:00:6c:64:35:1d:45:8a:28:51:6c:75:53:
0f:bc:59:cc:11:47:9b:e6:a4:8b:1d:14:a0:a6:d8:
8e:84:93:a7:d7:79:df:bc:6a:38:b1:14:09:8a:a7:
07:36:32:9a:d7:07:96:7b:40:56:d1:29:20:13:63:
eb:57:57:c4:12:13:ff:ad:3b:df:c3:f1:c8:03:ed:
af:da:7e:17:dc:1f:ed:6e:32:68:a1:0c:28:0d:40:
54:0a:e1:f2:b0:9f:21:6f:83:98:c7:89:95:56:8b:
d4:9f:1a:9f:98:21:96:e3:ad:48:be:74:32:4c:ea:
50:b3:37:ef:e7:16:6f:68:93:82:12:2d:34:3b:cd:
c4:6b:11:b9:a7:f4:15:d5:42:60:ae:20:c4:e9:c1:
2a:01:8f:ed:91:52:ee:d2:96:f7:5e:34:ae:3f:91:
91:79:f3:f9:d9:4e:7a:fc:b6:e5:ab:6b:4a:78:15:
1d:31:83:5a:20:e6:52:6e:d2:24:1d:8f:92:ec:e2:
c0:3b:af:64:1f:fc:38:da:95:0e:b8:6e:92:87:95:
f5:91:8f:25:c7:85:cd:d6:3c:5d:ff:5e:53:d2:c0:
8e:8f:38:84:ba:7f:67:a8:cc:dc:0c:a4:f9:db:73:
56:0a:27:27:30:49:76:f5:50:b3:be:1c:2c:7b:35:
5d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:15:79:77:DD:A8:BD:8A:A2:AC:60:46:B1:89:EB:69:D0:F7:06:17
X509v3 Authority Key Identifier:
keyid:39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/4BV5d92ovYqirGBGsYnradD3Bhc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.140.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:ab:c6:82:42:33:ac:25:24:42:3d:01:60:6e:f4:a2:ef:62:
98:ef:db:83:75:75:66:09:e0:ca:c2:56:02:c9:7c:2c:6b:d0:
38:9d:35:35:04:a3:12:04:aa:5f:29:e4:d9:f7:8a:68:4f:ee:
36:1f:95:4f:8a:92:2e:bd:ef:91:61:f0:80:fb:81:48:02:87:
09:f6:45:63:ae:21:e0:e6:44:eb:4f:f1:cd:4b:52:40:d3:02:
6b:d1:3a:51:99:00:6f:cd:ab:12:60:ad:b7:c8:66:52:eb:a3:
e5:af:97:ef:58:8b:6c:85:7e:8e:06:59:ac:d9:38:5f:99:07:
44:89:31:6c:b4:53:13:31:74:b3:bc:71:58:30:f1:db:3c:35:
ee:e4:60:45:be:4b:c4:4a:dd:ac:cd:b6:66:98:e0:cb:8a:aa:
71:38:a6:21:69:b9:eb:2d:25:bf:dc:7b:cc:6e:88:10:6e:94:
2e:88:05:83:05:3a:8e:84:33:31:45:f3:95:b0:4d:45:dc:4c:
aa:21:cd:37:69:a9:f4:2a:0e:71:f9:58:9f:e2:3e:98:4d:78:
33:8a:53:ea:a6:04:68:d2:27:36:dc:84:de:85:1d:34:14:8b:
9e:03:a7:0b:07:44:8e:24:48:d9:6f:89:5b:da:d0:b6:97:74:
4e:8e:87:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org