Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/V6x2XEYzSsB9YJmPcMR1XEKN6Z8.roa
File: V6x2XEYzSsB9YJmPcMR1XEKN6Z8.roa (raw, json)
Hash identifier: M8JDoe5H464DA477gaWpoPqvmVR4eG8VH4p+J1097W0=
Subject key identifier: 57:AC:76:5C:46:33:4A:C0:7D:60:99:8F:70:C4:75:5C:42:8D:E9:9F
Certificate issuer: /CN=1CB1CA70A33248FB3DAEE8BF41E2DAA76A7DCFD3
Certificate serial: 095E
Authority key identifier: 1C:B1:CA:70:A3:32:48:FB:3D:AE:E8:BF:41:E2:DA:A7:6A:7D:CF:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HLHKcKMySPs9rui_QeLap2p9z9M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/V6x2XEYzSsB9YJmPcMR1XEKN6Z8.roa
Signing time: Wed 29 Sep 2021 02:42:07 +0000
ROA not before: Wed 29 Sep 2021 02:42:07 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131603
IP address blocks: 103.229.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2398 (0x95e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CB1CA70A33248FB3DAEE8BF41E2DAA76A7DCFD3
Validity
Not Before: Sep 29 02:42:07 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=57AC765C46334AC07D60998F70C4755C428DE99F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:eb:af:83:75:2b:f2:30:4d:5a:c8:da:ee:2e:
06:9f:aa:00:02:49:f1:70:3b:e5:57:0f:72:5f:bd:
bc:93:b9:50:be:5f:1d:0f:a0:96:51:ba:72:46:a4:
65:63:e7:83:f3:d0:1a:9f:be:2b:2d:92:dc:d1:54:
21:80:94:6d:a8:f0:9e:81:c2:1b:e1:00:49:b6:d4:
a4:b3:86:9a:e5:8a:4b:c8:96:c1:56:7d:e2:83:09:
a9:97:73:8d:c6:f1:45:82:be:a2:52:0a:bd:51:96:
69:e5:40:27:57:23:08:f6:c8:82:42:9c:ce:f1:6f:
be:1d:d9:07:3b:ac:c7:cc:91:43:5f:a8:ef:8a:e0:
f8:a9:8e:48:9a:95:da:88:7e:2d:5d:98:c1:8f:ab:
a9:f4:f1:80:98:f0:1d:07:ff:e3:71:21:42:ec:ce:
4c:52:0c:e5:61:c6:e8:10:43:67:bd:f7:59:5e:0c:
62:7d:82:a1:e6:52:bb:76:bd:59:63:c3:48:b6:3a:
b9:a5:7c:f6:e7:ce:db:ad:47:65:4f:21:99:10:67:
f1:f5:00:e7:ec:73:4d:03:4e:68:91:d1:36:c0:70:
22:47:ee:36:fe:9d:18:52:45:ad:9d:c3:99:59:ab:
d9:3b:6b:2c:28:56:1c:fe:eb:96:b0:82:5c:e8:b2:
6a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AC:76:5C:46:33:4A:C0:7D:60:99:8F:70:C4:75:5C:42:8D:E9:9F
X509v3 Authority Key Identifier:
keyid:1C:B1:CA:70:A3:32:48:FB:3D:AE:E8:BF:41:E2:DA:A7:6A:7D:CF:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/HLHKcKMySPs9rui_QeLap2p9z9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HLHKcKMySPs9rui_QeLap2p9z9M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/V6x2XEYzSsB9YJmPcMR1XEKN6Z8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.50.0/24
Signature Algorithm: sha256WithRSAEncryption
04:7b:f6:2c:29:70:46:36:53:a6:b6:10:15:04:21:4d:17:54:
bf:df:47:0b:90:b0:29:f4:8c:c8:4f:3b:f4:a8:71:2e:79:33:
27:9f:5e:66:6d:3b:90:8d:e0:6e:1d:6a:72:b9:47:62:21:f0:
e8:9e:29:89:4b:5d:36:a9:bd:b5:83:d4:37:e1:c2:05:8f:e3:
2b:da:4b:35:8e:22:96:f0:5e:8d:ca:97:8c:16:5c:73:02:fe:
59:f2:2a:27:d3:6a:aa:56:05:f4:c0:77:4f:6a:06:32:0d:bd:
92:06:5a:c1:e5:ad:36:bc:18:23:a4:aa:a1:2e:a4:d0:f8:fe:
05:8d:01:84:c4:8b:09:4d:00:4c:50:28:77:3a:e7:d5:5d:5e:
a2:25:cf:07:4f:c4:6c:71:2e:7e:33:61:82:d9:55:c2:36:8e:
db:df:98:d4:71:f6:2d:16:0f:93:09:25:93:6b:16:5f:1c:a6:
90:94:b5:03:52:f3:4d:42:36:28:2a:e6:b7:39:a1:61:f3:4f:
c7:8a:e2:9c:93:ef:e8:e8:95:58:fc:2e:b4:8d:ef:b0:f2:2a:
7a:20:fd:b6:fc:83:01:83:50:d1:d2:1e:2f:63:72:91:48:0e:
46:33:43:50:79:5b:c7:c6:37:22:2f:34:c8:c9:4c:29:42:66:
36:f3:23:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org