Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINYUN/46INW6d3L-fOVgrdEo5SHSBLXTc.roa
File: 46INW6d3L-fOVgrdEo5SHSBLXTc.roa (raw, json)
Hash identifier: /yCVZcUwAbvLIJE1HUdG5z8HdNWGWREQZshiyHCbZlo=
Subject key identifier: E3:A2:0D:5B:A7:77:2F:E7:CE:56:0A:DD:12:8E:52:1D:20:4B:5D:37
Certificate issuer: /CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Certificate serial: 0E9F
Authority key identifier: 84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/46INW6d3L-fOVgrdEo5SHSBLXTc.roa
Signing time: Fri 01 Sep 2023 10:21:35 +0000
ROA not before: Fri 01 Sep 2023 10:21:35 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38047
IP address blocks: 103.133.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3743 (0xe9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Validity
Not Before: Sep 1 10:21:35 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E3A20D5BA7772FE7CE560ADD128E521D204B5D37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:58:3a:61:3f:d9:6e:87:65:bb:af:e9:75:3e:
ef:4c:6d:bd:c8:e4:60:06:05:42:66:3f:e9:d1:d4:
2f:f6:40:fd:f4:03:c1:72:48:c2:01:4e:2b:ca:05:
a4:c2:82:1e:7b:91:4c:b1:3b:c7:12:3f:ab:00:0e:
b2:9e:65:89:21:6a:db:c4:04:1d:e3:05:ce:b5:bc:
72:c5:c9:5b:f2:ab:bd:a6:ed:d4:fc:a6:f9:a0:73:
30:94:5c:18:9b:c7:49:21:8c:2b:23:90:c7:02:7d:
99:7a:4c:90:84:e9:63:31:eb:0a:e0:a6:8d:c6:55:
d5:e5:7e:75:7c:07:75:18:dc:99:43:80:7c:72:e0:
2c:37:9f:6d:55:f6:fa:12:ed:82:84:82:f3:f5:35:
95:44:a2:1c:14:1d:0e:44:5a:c6:e7:f4:45:6a:f4:
af:7c:93:06:2a:bd:f9:2a:d5:f3:62:d4:2e:ee:30:
b3:93:06:65:bf:04:9f:c9:11:44:c4:de:35:84:ab:
0b:d9:78:eb:d0:6c:ef:50:c8:cf:93:d4:2f:44:44:
d8:53:a5:6d:47:03:ea:a0:b6:62:e9:a6:2d:7a:eb:
b7:41:9b:7b:9b:6b:40:ce:4c:5d:2d:a2:85:49:a6:
b1:09:cf:68:79:11:d7:a3:13:89:84:c8:eb:25:fe:
05:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A2:0D:5B:A7:77:2F:E7:CE:56:0A:DD:12:8E:52:1D:20:4B:5D:37
X509v3 Authority Key Identifier:
keyid:84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/46INW6d3L-fOVgrdEo5SHSBLXTc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.152.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:d0:f1:25:c7:12:57:0e:f0:c8:84:71:dd:25:93:db:2d:3f:
ca:fa:4e:b9:80:b9:a0:c9:88:ce:9d:d6:df:92:d4:71:64:90:
cc:3f:ce:e9:e5:a3:84:57:22:d9:93:73:c4:4a:db:89:c3:49:
1a:70:99:cb:5a:d3:81:6e:3e:b0:fc:2b:f3:4d:d7:c3:d8:3f:
f0:8d:b6:4d:16:c1:4c:8f:4b:ce:75:ee:63:8a:1b:33:fb:b7:
d3:71:7e:8d:2c:fb:c7:13:f8:16:45:d9:af:f2:fd:62:9f:1a:
b7:2c:f7:2f:e7:38:39:b6:2c:0a:dd:5d:e9:03:5a:53:cd:20:
98:96:e3:01:e0:13:3a:a4:e8:17:e4:1b:42:c3:f1:bd:c4:9f:
10:f5:3f:51:9e:22:c6:b6:b8:04:ed:bd:59:23:a9:03:6b:05:
f4:56:c9:69:a7:64:38:14:2e:6b:df:b9:15:34:e9:39:1f:40:
c8:c9:7c:b6:97:4b:31:99:07:8c:03:5a:ea:e0:d5:44:cb:88:
04:4c:a9:c2:08:42:46:f6:47:5f:07:63:22:01:a8:84:21:bf:
78:e3:39:ed:fd:5d:8b:53:8b:bf:a8:7c:b9:97:0a:00:82:f0:
59:4c:13:5a:44:47:77:22:0f:b5:2e:15:27:41:6e:dd:fd:2f:
48:7f:4f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org