Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/VHjWVElFWzmJjXBJYvP-jNcJjdM.roa
File: VHjWVElFWzmJjXBJYvP-jNcJjdM.roa (raw, json)
Hash identifier: QejnkEICLalM3Sm43DMbGDMlNhnsiK3gP4h+CpErwrE=
Subject key identifier: 54:78:D6:54:49:45:5B:39:89:8D:70:49:62:F3:FE:8C:D7:09:8D:D3
Certificate issuer: /CN=1CB1CA70A33248FB3DAEE8BF41E2DAA76A7DCFD3
Certificate serial: 0A48
Authority key identifier: 1C:B1:CA:70:A3:32:48:FB:3D:AE:E8:BF:41:E2:DA:A7:6A:7D:CF:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HLHKcKMySPs9rui_QeLap2p9z9M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/VHjWVElFWzmJjXBJYvP-jNcJjdM.roa
Signing time: Thu 15 Sep 2022 02:41:56 +0000
ROA not before: Thu 15 Sep 2022 02:41:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131603
IP address blocks: 103.229.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2632 (0xa48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CB1CA70A33248FB3DAEE8BF41E2DAA76A7DCFD3
Validity
Not Before: Sep 15 02:41:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5478D65449455B39898D704962F3FE8CD7098DD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:17:6e:12:c2:fe:34:ef:00:4d:a1:86:22:63:
98:01:ea:29:1f:c7:e6:8c:eb:2f:f9:8e:57:45:7c:
bc:3d:fd:c7:5f:87:db:35:37:56:60:55:cf:44:e7:
46:ad:e0:9d:4b:c2:a1:b5:1f:20:e1:f3:bb:52:ec:
ab:34:68:15:26:c5:81:53:93:b5:63:6e:0e:6b:50:
a1:86:96:99:dc:0b:3f:74:0f:71:71:08:7c:a5:ba:
98:21:5d:cc:c3:6b:9d:0d:c9:0e:0c:54:38:a6:b3:
d2:74:3a:57:c4:f7:38:90:65:ac:6f:72:37:30:e0:
27:f5:05:69:4c:f8:07:d8:e2:eb:d7:1e:8f:f5:b8:
3b:e1:76:5a:7a:2f:39:63:d6:72:25:1c:92:70:5b:
db:70:7c:41:43:82:58:c1:b9:75:50:1f:85:0b:7e:
46:36:55:db:a6:6f:3d:37:23:02:06:0c:ce:5c:2d:
f8:58:66:71:a7:d9:7e:38:cd:d0:48:6f:4f:2d:70:
84:d7:d0:ec:99:33:fa:f3:81:c3:53:ed:f8:2e:55:
e8:94:a2:8b:6a:d5:4f:31:f5:45:b5:19:86:95:ad:
fe:a3:2f:84:0f:e7:ae:1d:15:9e:e3:a7:14:59:b1:
de:05:a2:5e:15:e1:cc:cf:e1:dc:ae:58:d5:b9:4c:
ce:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:78:D6:54:49:45:5B:39:89:8D:70:49:62:F3:FE:8C:D7:09:8D:D3
X509v3 Authority Key Identifier:
keyid:1C:B1:CA:70:A3:32:48:FB:3D:AE:E8:BF:41:E2:DA:A7:6A:7D:CF:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/HLHKcKMySPs9rui_QeLap2p9z9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HLHKcKMySPs9rui_QeLap2p9z9M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/VHjWVElFWzmJjXBJYvP-jNcJjdM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.50.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:29:2f:69:a3:93:45:c0:41:09:54:df:fa:6e:a0:d5:7f:e8:
91:0d:0c:77:aa:d6:31:41:35:53:19:57:e9:54:d3:2d:ac:30:
0e:2b:7d:5b:c0:a0:70:79:db:d9:de:c8:54:0a:ce:a4:08:f7:
0b:43:76:23:cf:4a:cc:fa:28:36:f7:51:50:c1:9f:82:49:b8:
79:83:dd:cf:ec:77:1f:ff:53:81:88:92:54:5a:47:10:be:8c:
e4:36:02:9d:b0:55:0c:1b:e7:38:a3:5c:12:63:0f:9f:8b:ad:
34:a3:c6:c3:f2:7b:31:35:36:a8:02:29:18:6b:5f:2f:06:f6:
8f:17:1f:2b:4e:8d:ce:ef:60:75:3f:00:98:d5:7d:5d:f3:c3:
11:47:49:94:55:71:e5:54:07:a7:9a:42:26:19:30:50:17:35:
c4:43:06:c8:79:2f:40:55:6f:b0:a2:85:c5:50:89:62:e6:0a:
1b:ba:08:cb:f3:f8:dc:28:16:9d:43:2f:c9:6b:24:ca:9b:2c:
1e:e8:1c:e1:da:16:de:84:33:3c:dd:71:d7:ff:df:80:f0:81:
d0:95:91:31:11:ae:c7:9d:43:d5:23:bc:fb:8b:1f:76:95:32:
dd:ce:e3:fe:ff:c4:17:ca:4c:01:08:7e:e0:c8:7a:7c:84:eb:
e9:30:bb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org