Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/nnmrt6IeXfTCl2oNRod7a0Qa_sE.roa
File: nnmrt6IeXfTCl2oNRod7a0Qa_sE.roa (raw, json)
Hash identifier: yTNZz1LAVMgRlFNJVq+xHec8ImAW/kol/GLjGAGq+As=
Subject key identifier: 9E:79:AB:B7:A2:1E:5D:F4:C2:97:6A:0D:46:87:7B:6B:44:1A:FE:C1
Certificate issuer: /CN=1CB1CA70A33248FB3DAEE8BF41E2DAA76A7DCFD3
Certificate serial: 095D
Authority key identifier: 1C:B1:CA:70:A3:32:48:FB:3D:AE:E8:BF:41:E2:DA:A7:6A:7D:CF:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HLHKcKMySPs9rui_QeLap2p9z9M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/nnmrt6IeXfTCl2oNRod7a0Qa_sE.roa
Signing time: Wed 29 Sep 2021 02:42:07 +0000
ROA not before: Wed 29 Sep 2021 02:42:07 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131603
IP address blocks: 103.42.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2397 (0x95d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CB1CA70A33248FB3DAEE8BF41E2DAA76A7DCFD3
Validity
Not Before: Sep 29 02:42:07 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=9E79ABB7A21E5DF4C2976A0D46877B6B441AFEC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:ab:9f:94:55:55:fa:be:7e:58:47:28:0b:
41:e5:77:9d:cc:1c:77:d9:0d:00:ef:83:11:18:25:
19:9f:ad:a6:f1:f6:68:84:93:80:81:c5:e4:e6:af:
87:a4:ba:de:00:98:1f:f0:92:fe:04:a8:e4:b4:32:
44:f3:37:c0:da:8b:51:50:60:45:3d:15:6c:33:a9:
98:98:45:46:bd:70:65:d0:8b:f0:53:9e:e2:6a:3e:
f8:d5:c9:52:93:e2:4b:6e:35:46:d1:67:00:1e:4a:
c3:96:ec:8e:19:9b:62:12:25:07:e8:61:a6:d5:34:
9a:0b:63:0c:f9:3f:79:7f:57:ef:3d:ad:e6:4e:42:
a4:d5:09:86:b7:8d:0c:ca:61:4e:2b:bc:b6:ed:2b:
93:33:b9:81:bc:e5:44:46:4c:27:30:51:86:5f:88:
cb:23:89:36:25:25:1a:bb:75:e9:0c:3b:c2:35:4d:
f0:e9:f8:13:48:58:e3:df:ae:9b:28:d9:26:3b:fc:
10:29:64:f0:59:d3:41:66:7f:27:6c:a9:0d:e2:b9:
e4:ee:07:08:df:de:35:1e:59:3f:82:f6:78:c0:d4:
4b:50:ce:7d:b2:c6:08:66:8d:51:a6:36:81:aa:5b:
5a:a9:dd:2b:86:1f:b0:67:89:a5:de:f7:64:f2:1e:
18:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:79:AB:B7:A2:1E:5D:F4:C2:97:6A:0D:46:87:7B:6B:44:1A:FE:C1
X509v3 Authority Key Identifier:
keyid:1C:B1:CA:70:A3:32:48:FB:3D:AE:E8:BF:41:E2:DA:A7:6A:7D:CF:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/HLHKcKMySPs9rui_QeLap2p9z9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HLHKcKMySPs9rui_QeLap2p9z9M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/nnmrt6IeXfTCl2oNRod7a0Qa_sE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.42.144.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:db:11:53:f3:20:e6:8c:0f:c6:50:40:32:4f:8d:ac:7d:6d:
10:74:0b:4e:4f:1a:c6:37:1d:15:a9:99:5a:96:8b:09:3f:ae:
f7:2e:b0:88:05:59:16:e9:be:47:32:67:5c:5c:10:41:53:5b:
d2:88:17:bc:ab:7a:37:31:4f:76:77:1a:4d:8d:84:ff:a6:b8:
5e:51:d5:d5:3d:11:4c:8b:6a:be:b6:b5:f9:81:25:f1:76:ee:
6d:d0:dc:72:c6:25:9f:d6:42:a0:72:cc:16:b8:7a:dc:a5:d8:
c3:fd:3b:90:b5:cd:a7:af:b5:91:63:f5:32:44:9f:4a:e9:0d:
72:fd:1d:91:f9:d9:03:13:c4:a3:04:39:5d:ba:55:28:59:56:
23:3b:e1:df:6e:7d:63:64:f6:4e:d0:d1:31:19:6b:41:33:8f:
db:9d:65:e5:03:45:95:ee:23:6d:ba:02:19:2c:a7:79:b1:21:
5f:4a:2b:15:d6:ff:5b:0b:93:da:0d:ad:06:2e:3b:39:28:2a:
8e:08:dd:a2:31:fc:66:58:87:e8:0f:20:49:4e:8c:d1:f6:c8:
8f:bc:2c:ad:97:b2:af:da:7f:64:c8:f3:b8:cc:3f:32:45:a6:
ae:54:76:11:c3:60:cc:ac:76:8e:50:7c:40:34:47:50:b2:47:
68:22:cb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org