Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/aYG8Bi4Ntnwv2aedMcB9sn2bE3I.roa
File: aYG8Bi4Ntnwv2aedMcB9sn2bE3I.roa (raw, json)
Hash identifier: zCqeWOsd+cbrHtbgB3tztocMzSDhlUSX0CpAHHNJqd0=
Subject key identifier: 69:81:BC:06:2E:0D:B6:7C:2F:D9:A7:9D:31:C0:7D:B2:7D:9B:13:72
Certificate issuer: /CN=CA1B71EFAC6F6AA43027609C18A734982764554B
Certificate serial: 0D08
Authority key identifier: CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/aYG8Bi4Ntnwv2aedMcB9sn2bE3I.roa
Signing time: Fri 01 Sep 2023 10:20:21 +0000
ROA not before: Fri 01 Sep 2023 10:20:21 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17408
IP address blocks: 103.138.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3336 (0xd08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA1B71EFAC6F6AA43027609C18A734982764554B
Validity
Not Before: Sep 1 10:20:21 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6981BC062E0DB67C2FD9A79D31C07DB27D9B1372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:05:f3:72:35:8d:8a:61:39:fd:2f:d1:d9:29:
7e:75:ad:27:b6:ee:92:8e:30:c4:ba:11:ea:8e:80:
5d:93:d1:88:48:78:d8:65:3a:c5:da:68:92:e7:9d:
a4:c5:5b:3d:1f:a2:9e:83:8b:53:bb:14:c7:fc:ac:
61:81:f1:a5:96:5c:a6:50:7e:1c:30:1b:34:28:f1:
31:0a:1c:03:e5:ac:9f:da:6e:ed:d3:8f:2c:ca:93:
7a:a6:2c:6c:e8:e8:2c:13:99:65:2b:8a:8c:91:1a:
85:95:82:d1:e3:16:0c:58:1e:e1:28:5c:9d:86:29:
29:c4:83:f6:43:67:c1:34:5d:ba:a7:7a:5e:96:90:
49:5b:06:d3:02:d1:7b:d2:a3:82:d4:01:25:80:d7:
af:16:1e:33:1d:49:2b:56:dc:8f:9e:66:5a:2d:56:
85:72:ea:23:cd:34:00:ff:ce:24:80:bc:cb:69:27:
cf:91:48:8e:06:80:6f:58:9e:6a:b9:65:91:8a:98:
52:f8:cf:32:df:a4:58:13:47:4b:51:32:13:de:f0:
44:ce:aa:c0:a9:ca:b1:7d:fa:84:30:12:5b:84:70:
7b:1e:d9:03:db:5e:0a:69:fe:23:d3:33:27:ef:70:
ac:08:e4:2a:0c:46:19:1b:63:1b:dc:51:28:4f:a1:
7a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:81:BC:06:2E:0D:B6:7C:2F:D9:A7:9D:31:C0:7D:B2:7D:9B:13:72
X509v3 Authority Key Identifier:
keyid:CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/aYG8Bi4Ntnwv2aedMcB9sn2bE3I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.106.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:72:f6:01:7a:55:13:9e:84:f7:28:60:73:0a:0f:99:26:95:
99:d5:23:d2:56:1a:a6:d8:01:9c:fb:89:aa:84:b7:45:85:28:
80:e9:53:b5:4f:57:08:30:9b:77:3a:b9:a6:99:7c:b2:8c:5f:
3f:da:58:65:28:00:6c:08:de:99:80:a5:9e:78:2c:69:4b:36:
d8:9a:0d:47:17:57:a3:49:f5:8a:7f:c2:f3:3a:80:6a:3c:9a:
4a:bc:bc:77:97:91:60:0d:40:1c:65:0e:04:0e:c8:e9:5f:f2:
f1:22:87:57:26:a7:69:53:38:62:a7:67:da:f0:b8:69:30:6d:
de:f6:a5:d1:09:73:09:04:55:70:75:cb:c0:42:63:5c:42:1c:
52:e4:8a:ab:68:82:40:05:ce:e4:ed:26:f5:0c:a3:93:0f:e4:
84:a7:43:6e:fc:6a:f4:8c:d7:00:63:3a:8d:24:08:7f:24:e1:
27:d9:54:97:64:a9:19:af:a4:86:83:9c:34:d2:b6:a9:0b:d1:
2e:8c:6b:21:23:04:44:4c:11:9f:77:b1:80:c7:a2:51:83:b8:
5b:12:36:97:a1:3c:00:df:7b:1f:db:32:82:17:03:2b:40:75:
aa:a5:5a:6d:1d:97:2e:ee:c4:75:41:41:31:2e:01:2a:57:01:
c9:8f:73:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org