Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WNCL/icibvB-JVZZKXGtLNAn5WSWOt_c.roa
File: icibvB-JVZZKXGtLNAn5WSWOt_c.roa (raw, json)
Hash identifier: YQ84K/4k1pAshJehI6L5vxDV4lrFqWVtX5HB4h2rtyI=
Subject key identifier: 89:C8:9B:BC:1F:89:55:96:4A:5C:6B:4B:34:09:F9:59:25:8E:B7:F7
Certificate issuer: /CN=9D441AADD239AD926010AFC4DB20454EF2C4B0C1
Certificate serial: 0772
Authority key identifier: 9D:44:1A:AD:D2:39:AD:92:60:10:AF:C4:DB:20:45:4E:F2:C4:B0:C1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/nUQardI5rZJgEK_E2yBFTvLEsME.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WNCL/icibvB-JVZZKXGtLNAn5WSWOt_c.roa
Signing time: Tue 29 Sep 2020 10:09:17 +0000
ROA not before: Tue 29 Sep 2020 10:09:17 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 134823
IP address blocks: 103.123.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1906 (0x772)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D441AADD239AD926010AFC4DB20454EF2C4B0C1
Validity
Not Before: Sep 29 10:09:17 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=89C89BBC1F8955964A5C6B4B3409F959258EB7F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:16:50:4a:ac:58:d8:6d:ce:e0:85:0f:57:27:
c8:0f:ec:ab:10:c8:04:28:41:b4:20:70:79:93:f1:
84:05:39:15:46:0c:8e:ef:04:cf:22:96:71:87:ba:
5b:e1:f6:1c:4c:98:53:3c:b0:a7:7d:92:69:04:74:
56:24:82:e7:cd:f0:e3:27:53:13:a1:3b:ad:19:55:
6c:e9:cd:81:5e:a4:8c:30:1d:fb:ef:ba:5e:25:90:
a5:be:a1:d2:45:d7:8d:ac:e8:02:0c:71:4e:f5:15:
54:cb:8c:b8:20:da:c9:d2:0f:38:6d:5e:3f:da:8f:
f2:ba:87:31:30:1c:7f:2c:18:a9:88:1f:86:5e:51:
a2:f5:c3:d0:a1:3c:01:ef:bc:46:0a:4b:a7:0d:9b:
97:63:ac:02:c6:9e:b6:27:4a:60:1d:08:5e:27:1f:
21:b4:cf:f0:ba:6d:62:be:8f:ea:0e:aa:82:d5:bd:
0a:90:8b:ca:8d:72:12:57:79:cd:ae:f0:58:f3:d8:
8b:ed:b3:d1:73:20:7b:5f:81:23:e7:57:bd:2b:02:
da:22:8c:09:a9:ba:fc:f0:5d:b8:0b:84:8b:23:95:
d7:10:e1:c0:ba:78:50:87:34:14:be:51:2e:6c:b2:
ea:f0:ea:88:12:3b:58:26:56:49:a5:da:e6:de:ce:
83:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C8:9B:BC:1F:89:55:96:4A:5C:6B:4B:34:09:F9:59:25:8E:B7:F7
X509v3 Authority Key Identifier:
keyid:9D:44:1A:AD:D2:39:AD:92:60:10:AF:C4:DB:20:45:4E:F2:C4:B0:C1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WNCL/nUQardI5rZJgEK_E2yBFTvLEsME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nUQardI5rZJgEK_E2yBFTvLEsME.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WNCL/icibvB-JVZZKXGtLNAn5WSWOt_c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.132.0/22
Signature Algorithm: sha256WithRSAEncryption
43:dd:26:a4:6d:94:66:a5:ff:08:0c:81:91:e3:76:f1:06:b3:
cb:54:c2:6e:49:b2:9f:bd:ff:68:ec:68:a7:9c:19:01:ff:03:
ac:76:31:d5:e3:e2:d4:2e:10:7c:25:b7:3d:89:a6:65:58:a4:
7d:28:25:d2:ae:03:73:70:30:46:8d:85:2f:b4:7c:55:66:2b:
0c:2a:9d:29:f2:f6:65:6a:a2:7d:b8:59:34:8a:eb:5a:ba:5d:
ce:ab:ea:c8:f9:b4:9b:30:87:94:fe:30:74:b8:32:cc:00:4f:
5a:62:fb:7c:3a:25:85:c5:f1:46:d9:0f:dc:8d:db:56:60:1d:
f1:b3:74:83:db:98:bd:f7:58:cb:01:53:a8:55:f2:c7:e2:84:
22:9e:cd:50:4b:1c:97:fb:25:85:b6:19:d3:fc:64:fc:be:44:
56:46:21:4c:78:62:53:b8:7f:41:cf:e7:a0:dc:7a:f9:ef:c5:
90:5f:4c:df:5c:50:c2:00:96:17:e0:8c:55:18:9a:e8:c6:1b:
13:73:72:4e:a4:1f:f8:a5:2e:43:f9:6a:9b:d4:9b:5f:bf:3d:
d9:66:ec:ee:f1:a2:93:4f:c1:5f:83:ac:d3:97:3f:b5:fb:0c:
51:cc:ac:a9:ed:fd:18:ca:7c:0e:ef:b7:d6:44:18:8a:12:f6:
01:6e:f6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:50 2025 by rpki-client