Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/6ilJOe2JQH_-ejw243OecGylgb8.roa
File: 6ilJOe2JQH_-ejw243OecGylgb8.roa (raw, json)
Hash identifier: FaHL5ZlZ79sBw3WBpQ+LFAnad1a755rhjnsZSnScCNo=
Subject key identifier: EA:29:49:39:ED:89:40:7F:FE:7A:3C:36:E3:73:9E:70:6C:A5:81:BF
Certificate issuer: /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Certificate serial: 11A0
Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/6ilJOe2JQH_-ejw243OecGylgb8.roa
Signing time: Fri 01 Sep 2023 10:20:07 +0000
ROA not before: Fri 01 Sep 2023 10:20:07 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131636
IP address blocks: 103.130.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4512 (0x11a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Validity
Not Before: Sep 1 10:20:07 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=EA294939ED89407FFE7A3C36E3739E706CA581BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:a4:61:cb:60:f8:41:95:60:37:41:b7:0b:
d0:06:df:ef:b9:db:92:3e:89:e1:f5:7f:bb:e5:2a:
eb:54:f1:6e:1d:42:0b:90:89:21:40:e6:bf:e7:0e:
53:34:f1:51:0d:62:dc:2c:86:7a:83:43:51:d8:84:
66:06:20:09:83:7e:6c:d7:60:e8:36:87:08:52:bd:
2a:a3:88:c4:64:00:03:39:fd:cf:2b:b4:92:10:6e:
45:b4:37:17:97:70:ac:27:9d:3b:0c:18:14:72:0c:
ef:88:56:8d:17:ec:af:f3:53:c0:72:ff:54:09:dd:
ac:50:52:56:01:6b:97:86:e9:1b:92:08:76:52:59:
7e:c3:00:31:08:e8:eb:51:a8:c3:43:28:4e:90:ba:
04:73:6b:8c:b3:50:e0:d1:9f:99:ba:1d:68:47:b0:
01:92:85:17:24:38:f0:c9:35:2e:62:b1:14:00:fd:
c7:76:13:60:de:16:fe:52:e7:37:55:a8:7a:e5:b9:
77:9e:c6:34:a8:31:bf:8d:a9:c0:72:c5:ac:49:e1:
9b:d9:00:1b:32:69:16:fa:96:c9:a5:e4:b1:cb:1a:
fa:e8:f2:1d:51:3c:2f:b9:96:d9:56:0e:00:f7:c9:
8b:e9:04:2a:53:50:cc:1b:00:c9:a0:72:c2:83:5d:
cb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:29:49:39:ED:89:40:7F:FE:7A:3C:36:E3:73:9E:70:6C:A5:81:BF
X509v3 Authority Key Identifier:
keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/6ilJOe2JQH_-ejw243OecGylgb8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.127.0/24
Signature Algorithm: sha256WithRSAEncryption
75:16:aa:28:73:37:f7:83:cb:db:e8:07:99:72:b9:44:6e:1b:
ae:f1:9e:a9:e5:2b:5c:69:9d:d0:99:91:d3:dd:d6:fe:ad:33:
c2:69:ec:ab:c6:84:11:10:b3:87:26:8c:22:fd:50:49:2d:5d:
91:7f:cf:4c:e7:51:e3:64:1b:ae:08:8f:2f:fa:1b:8c:da:de:
5d:90:c8:6b:71:9d:2c:ab:7c:f2:c2:b7:53:87:74:af:9a:1d:
d3:a0:b0:8e:d5:aa:bc:11:30:c2:1e:36:64:7f:59:43:2f:c0:
89:06:b0:71:48:6d:0f:1f:79:31:34:a6:2f:9a:95:e8:cb:df:
5d:d4:94:ad:95:4d:f5:27:63:b1:6f:0f:ed:87:33:8f:c3:f0:
3a:48:2d:68:26:ea:61:24:11:04:fc:cb:49:94:93:a5:30:be:
11:c7:fd:9c:82:7a:61:cf:3f:b2:c8:da:44:3c:c4:64:e7:e6:
4d:22:b4:7a:33:a8:4c:a4:9a:31:e6:d0:a4:3a:2e:3b:b6:cf:
f0:fa:ee:44:b0:b1:aa:0e:b8:f1:a5:ae:08:c4:a5:3a:9c:47:
0f:c8:61:09:f2:76:fa:68:0d:ff:81:bb:32:16:47:c8:2d:54:
ad:d1:e2:75:82:ce:9e:6f:9a:0d:94:e3:03:f1:cd:dd:9c:a1:
02:bb:32:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org