Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINYUN/4v1JcPfqqBV1bff7rzY0CKmGxzY.roa
File: 4v1JcPfqqBV1bff7rzY0CKmGxzY.roa (raw, json)
Hash identifier: CkKocgFQgveqNFCKAp7jHIr0U7vdE59ccTdgNUg5PRo=
Subject key identifier: E2:FD:49:70:F7:EA:A8:15:75:6D:F7:FB:AF:36:34:08:A9:86:C7:36
Certificate issuer: /CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Certificate serial: 0E9D
Authority key identifier: 84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/4v1JcPfqqBV1bff7rzY0CKmGxzY.roa
Signing time: Fri 01 Sep 2023 10:21:35 +0000
ROA not before: Fri 01 Sep 2023 10:21:35 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38047
IP address blocks: 103.133.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3741 (0xe9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Validity
Not Before: Sep 1 10:21:35 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E2FD4970F7EAA815756DF7FBAF363408A986C736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:03:56:93:d9:80:64:f7:9f:06:ac:97:ca:8a:
5e:4d:ef:1d:f9:4c:57:36:79:a7:35:0b:f3:87:9c:
5d:c0:f7:4b:66:ff:ed:34:50:0d:17:07:35:19:9b:
aa:34:22:66:78:4d:8d:8a:b0:86:d0:77:0b:b0:3e:
4b:cb:fc:44:32:b4:fb:ae:d6:00:7f:1e:8a:1e:81:
58:ee:06:f3:89:3a:b6:cc:69:7e:2a:d6:75:6c:f0:
11:2d:09:a6:f9:75:3b:18:bc:0a:bf:55:3a:62:72:
e2:ed:e4:73:c7:c2:63:6e:40:4d:d4:64:74:d1:3e:
88:a0:19:62:34:59:13:3a:a6:fd:97:e2:7c:81:b2:
43:79:6c:04:9d:4a:18:ec:f0:93:49:43:c4:0f:79:
22:d7:19:36:2a:9d:9c:45:0c:bb:a8:25:ce:65:1d:
6c:bb:26:5a:1e:c7:af:28:13:82:95:8b:c5:bd:3a:
f5:04:d6:2a:fb:77:e3:a0:0a:ed:d1:7f:20:4d:19:
ba:f1:7d:5b:cf:e8:62:2a:3b:57:cb:1b:48:88:46:
db:53:50:7d:62:2f:e3:9a:65:04:67:60:13:02:33:
85:5c:83:74:ef:69:30:7b:ac:2b:ce:ff:64:0c:af:
e3:3d:98:53:4f:c9:c4:30:e7:3f:7a:56:5a:27:5d:
bd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FD:49:70:F7:EA:A8:15:75:6D:F7:FB:AF:36:34:08:A9:86:C7:36
X509v3 Authority Key Identifier:
keyid:84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/4v1JcPfqqBV1bff7rzY0CKmGxzY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.155.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:43:5d:19:82:d7:df:3e:a4:c3:e4:d3:f2:61:1d:1a:ce:21:
7d:6b:69:79:22:30:e6:02:37:72:f9:12:64:22:d1:a3:e8:29:
b4:58:2c:15:2f:62:0f:dd:7d:99:f7:3f:81:c8:03:f2:ea:69:
61:ac:e3:24:b4:d2:b7:2d:a7:1f:c3:74:f5:5f:c4:63:65:9c:
99:67:d9:c4:64:fc:eb:ae:13:ca:43:32:51:74:41:ec:26:2f:
81:20:48:9b:2e:9a:0d:f7:c5:1d:ee:b3:51:8e:1b:85:3c:95:
48:6e:28:83:31:d9:c5:f3:79:39:a0:d7:9a:87:24:30:4e:be:
56:1b:39:6f:6f:88:6f:1a:8f:22:5d:ec:0f:73:9a:f1:59:df:
25:2b:02:3a:a5:41:94:8a:a2:b9:62:ff:61:76:72:8e:11:cc:
09:d3:d2:19:c3:09:34:44:45:f8:98:d5:2b:50:8f:c4:40:ae:
29:d0:ee:ea:76:c9:d2:15:09:3a:c6:61:87:5b:b5:bc:9b:00:
f7:e4:38:0e:f9:67:64:f6:43:a6:3b:a4:50:b5:16:d2:ac:2b:
02:90:4f:97:93:dd:80:b6:ec:2d:77:01:51:ee:cf:34:ef:8b:
2b:d6:33:77:7b:97:1e:a6:b8:79:3e:97:dc:8d:8a:fa:83:9f:
02:b6:99:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org