Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/8fiJkI01K4sj2maHuUxny1ePyww.roa
File: 8fiJkI01K4sj2maHuUxny1ePyww.roa (raw, json)
Hash identifier: XwEbiYP1ziycMkScOfl9eK2vtX4tc5SfAVyP3GL7Z9Y=
Subject key identifier: F1:F8:89:90:8D:35:2B:8B:23:DA:66:87:B9:4C:67:CB:57:8F:CB:0C
Certificate issuer: /CN=CA1B71EFAC6F6AA43027609C18A734982764554B
Certificate serial: 0D0A
Authority key identifier: CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/8fiJkI01K4sj2maHuUxny1ePyww.roa
Signing time: Fri 01 Sep 2023 10:20:22 +0000
ROA not before: Fri 01 Sep 2023 10:20:22 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17408
IP address blocks: 103.138.106.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3338 (0xd0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA1B71EFAC6F6AA43027609C18A734982764554B
Validity
Not Before: Sep 1 10:20:22 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F1F889908D352B8B23DA6687B94C67CB578FCB0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a0:6b:9b:77:8a:3f:b7:95:28:0d:78:ff:6f:
c6:b1:4b:63:d9:6d:98:ba:c8:9d:a9:60:98:15:72:
f3:7e:15:ab:d8:6f:72:80:93:48:38:72:8c:a6:58:
ae:f3:5d:ba:61:9a:67:b4:90:cf:d8:bf:43:54:ef:
cf:06:74:ec:7e:09:a0:60:4d:28:1e:0d:d2:c2:88:
48:3c:76:73:a9:cd:e8:d0:5f:a7:93:f5:37:da:f3:
b8:b2:c6:b1:d6:b9:01:12:b9:04:c5:7c:29:40:a0:
08:1b:1b:b5:2e:7b:bb:2d:14:a9:35:02:20:3a:0e:
e2:7c:da:51:34:68:ef:ea:74:bd:4d:6d:f0:34:b2:
e0:67:46:24:5d:46:07:34:f9:d2:0c:ec:50:68:cc:
00:fb:18:bd:aa:c1:3b:b1:99:e1:6f:87:c8:3b:97:
d0:78:55:4c:7c:c8:f8:9d:23:1a:29:1d:46:6d:5f:
a8:ff:76:c4:77:c4:29:5c:0a:bf:70:37:35:74:3d:
73:e6:d3:97:48:1c:6f:87:17:01:62:8c:2f:82:96:
d7:4e:c8:ac:95:e1:9c:97:0e:fc:2c:4d:eb:e1:67:
a0:42:ec:2a:cb:05:94:a6:7c:bf:77:79:a4:79:e3:
95:74:cc:1e:29:a6:28:23:27:80:f5:5e:6a:1c:3e:
fb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F8:89:90:8D:35:2B:8B:23:DA:66:87:B9:4C:67:CB:57:8F:CB:0C
X509v3 Authority Key Identifier:
keyid:CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/8fiJkI01K4sj2maHuUxny1ePyww.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.106.0/23
Signature Algorithm: sha256WithRSAEncryption
74:46:d4:89:3e:31:8a:52:db:b3:07:62:db:e3:a4:b3:50:ec:
3c:cc:c2:ea:59:20:81:36:68:e6:74:cf:c1:d9:5a:00:ac:ed:
b1:41:0d:9d:fc:96:2a:7a:e9:79:bf:9a:ac:e6:1b:27:d3:4c:
06:ac:7e:0c:36:8d:43:e1:1c:bd:ba:cd:79:a0:50:78:46:e3:
22:92:12:7e:d8:44:e6:0e:f9:e5:70:b4:57:62:fe:f8:e0:f9:
32:6d:05:58:8b:eb:51:7f:26:af:77:a9:92:59:f7:67:3f:af:
1b:84:eb:94:37:0a:04:e0:84:ea:cc:c9:0c:2a:d1:65:20:41:
89:40:0c:31:f2:eb:58:8d:65:90:35:8d:46:6b:3b:9a:0c:f9:
1b:0f:50:61:11:6a:59:fc:cd:0d:87:23:9e:81:5f:d4:3b:8f:
15:66:0b:90:93:09:4f:50:ef:c1:24:67:88:ca:4a:ff:60:cf:
7c:ae:b1:8c:71:74:b7:ba:b4:56:1a:a9:9c:cc:0b:30:ee:2c:
f0:fb:f0:99:87:98:7c:cf:ad:86:8e:d0:40:7c:41:03:d5:a6:
81:6c:9f:9d:2c:e5:8c:77:92:22:49:60:0b:16:c8:b6:6e:f0:
89:54:31:cd:3c:df:ee:8d:cc:51:38:71:11:7b:aa:25:5e:4e:
0b:8d:7b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:22 2024 by rpki-client on console-ams.rpki-client.org