Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/PNybdB8IcfzhHkd9sUTy2f0Z6oA.roa
File: PNybdB8IcfzhHkd9sUTy2f0Z6oA.roa (raw, json)
Hash identifier: 11E+bn/peglEGdiwoCg29GoSBRGydqzx1b+8UhERGQc=
Subject key identifier: 3C:DC:9B:74:1F:08:71:FC:E1:1E:47:7D:B1:44:F2:D9:FD:19:EA:80
Certificate issuer: /CN=CA1B71EFAC6F6AA43027609C18A734982764554B
Certificate serial: 0D09
Authority key identifier: CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/PNybdB8IcfzhHkd9sUTy2f0Z6oA.roa
Signing time: Fri 01 Sep 2023 10:20:22 +0000
ROA not before: Fri 01 Sep 2023 10:20:22 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17408
IP address blocks: 103.138.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3337 (0xd09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA1B71EFAC6F6AA43027609C18A734982764554B
Validity
Not Before: Sep 1 10:20:22 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3CDC9B741F0871FCE11E477DB144F2D9FD19EA80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:a3:f6:58:3c:77:93:a5:e8:4b:eb:e9:97:
8c:82:30:5b:8f:36:5e:b5:42:75:74:5f:f1:a3:13:
73:ee:f8:b6:fa:33:f6:ca:43:e5:db:2a:15:56:9b:
88:22:88:27:49:16:01:cd:69:c1:4b:a8:d7:36:23:
4d:4d:09:21:00:f5:21:0d:cc:43:e9:1d:23:7a:22:
06:37:80:e5:a6:ce:3a:4e:35:1f:93:28:5a:c9:cc:
04:9b:3d:98:2d:df:8a:77:b1:f1:46:ca:df:6b:e0:
26:3e:c6:62:62:8c:27:9e:eb:1f:28:0b:1c:83:d7:
75:c6:68:1c:68:2e:b9:02:a4:c8:17:c0:48:c7:ce:
86:bd:36:97:5c:4e:d5:58:03:6e:e8:56:3a:27:8a:
c7:00:bc:1b:bc:d4:7a:cf:a5:92:6d:65:45:a0:42:
e0:6a:a2:69:22:a5:c2:52:66:fe:6a:ad:85:ec:1a:
dc:65:6d:d8:87:a8:8b:e5:5c:e4:fb:a5:67:e3:bd:
c0:45:c6:ae:41:00:80:32:98:b4:3c:1c:7e:e8:b5:
25:07:be:ea:0c:be:5e:13:ac:65:7c:99:62:80:c6:
b2:a4:89:e6:09:7d:94:4d:0f:05:7c:3c:27:3a:0d:
90:ba:7e:21:aa:da:f0:30:34:86:49:f6:44:e2:1a:
14:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DC:9B:74:1F:08:71:FC:E1:1E:47:7D:B1:44:F2:D9:FD:19:EA:80
X509v3 Authority Key Identifier:
keyid:CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/PNybdB8IcfzhHkd9sUTy2f0Z6oA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.107.0/24
Signature Algorithm: sha256WithRSAEncryption
73:26:77:76:10:47:c5:db:6c:fb:2c:3b:fd:5d:3b:e1:a7:7f:
c5:3a:32:f9:34:37:af:89:77:43:e8:10:36:78:08:e8:45:18:
60:af:2f:cc:dc:34:40:f4:4a:3e:1c:cd:55:ea:f2:89:d8:24:
b6:de:26:f9:d7:ba:bd:9a:b7:60:65:f8:59:18:13:84:64:57:
f8:16:18:ae:ca:c9:cb:4e:a7:fb:b6:03:de:8d:f5:0f:b0:de:
2f:1c:45:92:92:ff:36:d8:28:96:1b:e4:ee:54:c1:d0:4b:39:
1d:12:b4:81:b8:bd:ae:ee:de:9c:39:c2:3a:05:4c:ff:f4:6e:
95:25:ea:ad:85:26:e9:78:a2:df:54:52:b6:19:6f:af:58:5a:
e8:2b:3b:33:e9:a8:2f:04:0b:09:58:35:83:6a:c5:fa:c1:a0:
7c:4d:76:ae:74:29:10:00:b9:cc:d1:98:62:c6:7e:db:d8:74:
1f:d9:09:47:8c:d6:0e:34:c1:65:3b:47:05:60:b1:01:7f:6c:
14:32:9c:70:e6:f1:46:ba:24:d9:c3:b2:b0:3f:6c:c3:d8:3f:
63:20:ec:00:3d:33:2b:13:18:cd:3e:b7:82:ff:a7:e0:54:17:
5d:3c:3e:14:15:54:0d:b7:e4:3c:5f:ee:ce:36:be:08:dc:9d:
c4:73:91:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:22 2024 by rpki-client on console-ams.rpki-client.org