Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINYUN/7z6Vv7kKrIQss4CkA2of6TH0NgQ.roa
File: 7z6Vv7kKrIQss4CkA2of6TH0NgQ.roa (raw, json)
Hash identifier: wm2BPm+C7J7fK4gb01NBaPQgMv93BnqNRAom6U0eTNA=
Subject key identifier: EF:3E:95:BF:B9:0A:AC:84:2C:B3:80:A4:03:6A:1F:E9:31:F4:36:04
Certificate issuer: /CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Certificate serial: 0E99
Authority key identifier: 84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/7z6Vv7kKrIQss4CkA2of6TH0NgQ.roa
Signing time: Fri 01 Sep 2023 10:21:34 +0000
ROA not before: Fri 01 Sep 2023 10:21:34 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38047
IP address blocks: 103.133.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3737 (0xe99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Validity
Not Before: Sep 1 10:21:34 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=EF3E95BFB90AAC842CB380A4036A1FE931F43604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:96:6c:7b:57:3e:b8:ee:18:53:c9:c7:13:
02:31:ba:fa:0e:f1:11:af:2a:e0:e9:a7:d9:ad:40:
a8:e3:4f:1a:a2:08:6d:35:9c:04:7a:c4:9b:4d:0b:
f3:65:4a:d2:e5:db:f1:5b:1e:a6:9c:15:33:fa:76:
a2:66:ba:31:3e:01:6b:14:37:2a:dc:b2:0f:28:14:
ea:df:df:f1:87:ce:18:42:18:47:00:f5:09:15:05:
e9:00:d4:2c:c8:0c:15:1a:91:6e:70:6f:7a:61:e7:
48:de:e6:29:32:91:41:97:46:c6:84:42:9f:e1:52:
db:8b:9b:ee:5f:ab:f9:23:63:b6:c4:7f:59:01:76:
a2:18:c3:1b:88:25:4f:1d:99:b3:6a:da:07:69:8b:
67:b2:f6:57:61:d4:43:01:7a:ac:13:e3:ff:de:a8:
a2:c8:81:7e:e8:be:52:35:89:d7:29:6d:1b:2a:03:
05:81:fc:21:e4:c8:81:db:fa:53:3b:15:e1:56:26:
63:2d:b1:fd:fd:2f:8e:9b:1d:05:c7:8d:cd:d7:a8:
81:f1:5b:b5:4a:d7:c3:b3:15:68:da:06:d3:75:5f:
2e:ce:c8:98:d6:81:c0:36:6d:2e:fa:82:1c:af:9c:
76:35:dc:7c:85:b5:2d:e7:b9:36:1b:1f:99:fc:33:
31:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3E:95:BF:B9:0A:AC:84:2C:B3:80:A4:03:6A:1F:E9:31:F4:36:04
X509v3 Authority Key Identifier:
keyid:84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/7z6Vv7kKrIQss4CkA2of6TH0NgQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.154.0/24
Signature Algorithm: sha256WithRSAEncryption
49:78:ed:3a:07:1b:70:2b:8a:45:0d:0a:dc:80:71:ad:75:2a:
14:ab:ed:75:a2:d6:ce:8a:3f:41:00:72:49:4e:c2:8c:21:8e:
a9:1a:1b:6c:30:9a:17:ed:b4:e2:4f:73:af:9e:1e:bd:a4:37:
03:a3:54:99:f5:37:ad:33:7a:29:84:71:e2:7c:a2:99:1b:5a:
45:2b:fe:1a:7a:bc:03:14:a6:bf:72:93:aa:69:eb:a1:1b:32:
a1:28:76:5c:26:3d:c4:09:34:8c:c0:45:9f:17:06:93:83:b8:
c0:a5:9c:cf:d0:3c:f8:ab:66:65:d1:1f:85:bb:36:df:94:08:
07:3d:08:7f:83:99:09:a4:eb:c4:12:c6:0c:7b:e1:27:07:e2:
b6:bc:de:48:93:8d:7d:8e:bd:f7:d6:0a:3b:47:58:50:aa:80:
53:94:1f:01:b3:af:7e:75:ee:c8:fa:04:77:66:13:cd:c0:cf:
10:5d:74:9e:21:4b:6c:6f:89:51:8e:d1:7e:a4:75:20:9e:63:
f0:54:59:96:2d:32:61:64:d9:b6:11:98:9f:88:ba:03:90:38:
6e:41:d0:d6:fb:af:70:ce:d7:35:34:57:29:3d:ba:95:ca:1a:
14:9f:8c:76:5c:bb:97:0a:0d:b0:7f:9a:cf:1d:d7:96:b0:7b:
bd:c0:ce:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org