Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VOCOM/y_4owu7wID5fPdcKWSai65IcNS8.roa
File: y_4owu7wID5fPdcKWSai65IcNS8.roa (raw, json)
Hash identifier: WPxPIy/9EXIgychbxVghnuxmgpw6bukx6BM5h7WSVZM=
Subject key identifier: CB:FE:28:C2:EE:F0:20:3E:5F:3D:D7:0A:59:26:A2:EB:92:1C:35:2F
Certificate issuer: /CN=9E847108EBA0B550BC020FD9B1DC6DEB29E0DBEF
Certificate serial: 0102
Authority key identifier: 9E:84:71:08:EB:A0:B5:50:BC:02:0F:D9:B1:DC:6D:EB:29:E0:DB:EF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/noRxCOugtVC8Ag_Zsdxt6yng2-8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/y_4owu7wID5fPdcKWSai65IcNS8.roa
Signing time: Thu 16 May 2024 08:28:37 +0000
ROA not before: Thu 16 May 2024 08:28:37 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 63897
IP address blocks: 103.178.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E847108EBA0B550BC020FD9B1DC6DEB29E0DBEF
Validity
Not Before: May 16 08:28:37 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=CBFE28C2EEF0203E5F3DD70A5926A2EB921C352F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:92:8c:a4:e7:99:60:fd:95:0b:aa:99:b9:14:
42:b0:e2:70:f3:10:47:e9:92:5a:3d:77:a3:97:1d:
42:73:95:ce:d3:a8:e2:f5:85:cd:75:20:51:af:3c:
19:f5:3f:d5:b3:29:2e:82:54:0d:d5:2f:fe:5f:cf:
82:ad:7b:d8:51:04:51:32:13:89:51:ee:c4:0e:50:
6c:58:03:fa:60:19:ca:b4:8d:db:b0:f7:c2:f8:96:
ed:09:bc:a5:55:47:c8:fe:dc:82:68:6e:a9:6c:99:
b9:37:1f:6c:5f:26:df:05:47:a1:ab:d3:7a:fd:f9:
15:0e:16:86:08:e3:2b:f0:74:60:41:81:f9:5e:ab:
52:44:14:eb:e4:3e:c3:b1:79:41:b5:8e:cd:72:a1:
26:17:d8:8f:b8:50:1a:66:46:e4:68:c3:21:c2:52:
3a:6a:e7:45:06:11:e8:7b:7c:68:14:a1:af:50:f6:
10:97:27:be:88:da:d5:83:1c:bb:78:6e:a3:0e:6c:
3e:74:4c:ae:98:0f:00:3b:5a:cc:64:50:43:cd:c3:
70:96:ad:43:fe:fb:c9:2f:d0:80:5f:a2:60:2b:a6:
92:79:8f:13:e9:21:d7:02:88:4c:90:29:ba:65:0a:
02:27:b7:99:eb:90:7f:b7:cf:6a:1d:d8:ad:c0:a0:
58:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FE:28:C2:EE:F0:20:3E:5F:3D:D7:0A:59:26:A2:EB:92:1C:35:2F
X509v3 Authority Key Identifier:
keyid:9E:84:71:08:EB:A0:B5:50:BC:02:0F:D9:B1:DC:6D:EB:29:E0:DB:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/noRxCOugtVC8Ag_Zsdxt6yng2-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/noRxCOugtVC8Ag_Zsdxt6yng2-8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/y_4owu7wID5fPdcKWSai65IcNS8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.36.0/24
Signature Algorithm: sha256WithRSAEncryption
67:04:09:95:ad:b1:d8:5e:8f:11:85:b8:02:ba:cc:ef:e1:0b:
52:23:a1:8c:8c:eb:b3:d7:f0:79:b7:9d:a6:dc:37:da:ca:30:
25:d7:fe:36:6a:ed:d2:bf:da:90:30:1a:de:4a:25:5d:b6:df:
bd:ed:ff:62:33:3d:c1:46:cc:29:c1:29:32:d6:a4:7e:32:55:
61:8b:ee:78:f1:1b:7d:16:91:ef:ae:8d:9c:2f:28:f1:9b:dd:
ff:c7:ca:23:33:f8:20:f4:90:c3:18:27:55:f0:78:a2:a7:c3:
63:24:50:ce:50:da:b8:c2:92:c2:59:f9:97:8d:3a:49:53:c6:
85:54:c2:be:77:61:36:cf:70:0c:6f:69:f5:7c:f3:c4:d6:4c:
e5:0a:87:88:5b:83:04:25:41:49:05:8a:3f:84:a4:22:ea:53:
cc:9b:13:4b:df:bf:a6:8e:a6:37:57:20:61:86:a0:94:0f:5e:
86:45:f7:e5:55:92:b2:df:e5:11:1e:5d:c2:6d:db:a0:f1:5b:
98:26:07:30:a3:b3:5a:ff:18:5c:f5:83:39:77:6e:de:03:4a:
83:8d:fd:1f:c0:af:22:cc:79:74:66:8d:7b:09:19:fc:41:8c:
49:5c:2e:69:e9:91:da:04:3b:1f:4b:43:a4:9b:2e:56:e4:ec:
29:a2:38:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:22 2024 by rpki-client on console-ams.rpki-client.org