Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/f4WuoKvTBVW_ZgM_ZAORTTU5k3U.roa
File: f4WuoKvTBVW_ZgM_ZAORTTU5k3U.roa (raw, json)
Hash identifier: HzbdcLGTmoRuoSRFp6PoQ8QSc7veZQ9A5Xhou8N2KdE=
Subject key identifier: 7F:85:AE:A0:AB:D3:05:55:BF:66:03:3F:64:03:91:4D:35:39:93:75
Certificate issuer: /CN=1CB1CA70A33248FB3DAEE8BF41E2DAA76A7DCFD3
Certificate serial: 0A48
Authority key identifier: 1C:B1:CA:70:A3:32:48:FB:3D:AE:E8:BF:41:E2:DA:A7:6A:7D:CF:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HLHKcKMySPs9rui_QeLap2p9z9M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/f4WuoKvTBVW_ZgM_ZAORTTU5k3U.roa
Signing time: Thu 15 Sep 2022 02:41:56 +0000
ROA not before: Thu 15 Sep 2022 02:41:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131603
IP address blocks: 103.42.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2632 (0xa48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CB1CA70A33248FB3DAEE8BF41E2DAA76A7DCFD3
Validity
Not Before: Sep 15 02:41:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7F85AEA0ABD30555BF66033F6403914D35399375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:41:17:93:46:d1:17:5d:27:78:dc:cf:f6:b9:
52:c4:b3:08:0b:c7:f3:7b:5b:60:ac:05:02:69:6d:
a9:33:d5:b5:46:8d:1e:63:01:e9:ff:5b:65:2c:f6:
0a:70:f4:30:e9:e6:13:44:28:cb:a3:35:8f:24:44:
9a:b6:2f:2e:5a:5d:2d:6e:7d:bb:d9:0b:a5:1c:3f:
c0:8e:d2:1d:d7:2b:fb:40:0b:39:6a:4d:4b:30:58:
4a:ba:06:88:cc:25:b8:f5:46:6c:09:e5:be:8c:16:
24:b5:4f:be:70:3b:8e:7b:16:ea:c7:32:75:5d:b1:
d2:2a:5b:1c:e9:70:6f:3e:7c:09:2c:51:66:39:a5:
8c:be:69:cd:66:8f:6f:05:be:2f:9f:c3:55:fc:e6:
df:d8:e1:7b:43:b9:ed:d1:32:08:a1:3c:ba:6f:eb:
31:54:47:16:4b:ca:e5:79:48:e9:f3:5c:4c:78:eb:
de:cd:6f:de:9e:53:56:c5:71:d6:19:19:f0:c5:bf:
1c:0b:d1:c8:52:36:ed:ae:ec:5b:a1:90:48:e3:8c:
d6:6a:e8:ef:a6:12:b8:b4:0f:f4:75:18:bf:0f:f4:
e7:ed:8a:d6:a5:d6:e1:c3:95:12:ff:66:29:c8:d7:
a0:88:3f:bd:5e:13:c9:98:6a:57:21:fa:2b:b1:c3:
0c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:85:AE:A0:AB:D3:05:55:BF:66:03:3F:64:03:91:4D:35:39:93:75
X509v3 Authority Key Identifier:
keyid:1C:B1:CA:70:A3:32:48:FB:3D:AE:E8:BF:41:E2:DA:A7:6A:7D:CF:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/HLHKcKMySPs9rui_QeLap2p9z9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HLHKcKMySPs9rui_QeLap2p9z9M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/f4WuoKvTBVW_ZgM_ZAORTTU5k3U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.42.144.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:45:df:58:f0:ef:14:1c:e8:d4:b9:7d:19:8d:f3:0a:7d:9d:
87:e0:d4:26:a3:e9:98:26:3a:9f:66:b9:6b:48:59:a0:75:5b:
8d:43:ff:29:cb:b9:47:5d:2c:e5:51:5c:82:e4:ad:36:c1:fd:
94:6a:e5:70:e7:32:52:6c:74:09:44:57:a9:fe:be:ec:4a:40:
bb:50:35:73:0f:35:74:51:ae:e3:28:29:e3:46:b2:00:ae:99:
48:93:8c:8d:81:47:00:d3:f9:0f:d1:df:d3:54:a1:ba:b9:98:
10:9f:bb:f6:e4:c7:d4:9d:02:fc:8f:b5:e9:14:8b:18:82:5f:
90:46:6b:7b:b2:dd:be:76:19:29:a4:0a:3b:1f:e2:b5:6e:79:
9c:a5:b1:a9:26:43:a9:af:52:cc:0c:6f:02:e5:24:1a:e4:d8:
a9:f5:ee:b2:4a:86:b8:1c:c4:4a:79:9c:e3:57:c0:33:a7:70:
04:80:a1:e9:77:57:d1:55:c4:63:8c:e9:d1:2f:a2:89:bc:47:
0a:7a:1c:74:2b:f6:ba:46:0e:2f:41:9b:c9:13:4d:52:49:65:
55:dd:65:cb:a1:ae:85:f9:08:61:71:98:5f:be:4c:03:84:f1:
96:56:bc:62:6f:0c:92:b9:81:1b:a4:09:ff:2b:7c:42:36:d9:
d9:4b:30:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org