Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINYUN/GBQB32CEUU6r8ddCXvVpX2bRAHs.roa
File: GBQB32CEUU6r8ddCXvVpX2bRAHs.roa (raw, json)
Hash identifier: mCIIG9IkaD89ttZwYS6FqC5EJJCFd6h2JtMEEJhgyzE=
Subject key identifier: 18:14:01:DF:60:84:51:4E:AB:F1:D7:42:5E:F5:69:5F:66:D1:00:7B
Certificate issuer: /CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Certificate serial: 0CB5
Authority key identifier: 84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/GBQB32CEUU6r8ddCXvVpX2bRAHs.roa
Signing time: Wed 29 Sep 2021 02:42:04 +0000
ROA not before: Wed 29 Sep 2021 02:42:04 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38047
IP address blocks: 103.133.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3253 (0xcb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Validity
Not Before: Sep 29 02:42:04 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=181401DF6084514EABF1D7425EF5695F66D1007B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c9:e9:92:6e:99:3e:70:d4:a1:ee:a6:32:a1:
dc:5e:79:4f:06:ff:ae:f0:f4:09:cc:21:19:0f:24:
5c:e7:7a:12:f8:89:88:ab:92:e0:65:4a:af:74:f3:
90:05:6f:4c:a0:b8:a7:19:ed:3e:27:df:8e:2d:3d:
9c:1e:e4:b9:28:06:df:80:04:9f:8f:d5:b8:67:22:
bb:43:e7:20:3d:6f:19:d7:62:07:a2:1d:aa:a0:e5:
2d:26:6d:84:85:1e:e9:c2:fb:65:18:9d:c6:b1:25:
50:af:e5:89:df:70:4a:8d:98:a1:19:b1:a5:b9:e0:
ab:cb:a4:77:de:39:d8:5e:bb:87:39:43:d6:60:10:
cb:67:fb:75:26:9e:8c:90:69:40:e7:37:7a:ff:af:
fb:a6:36:5b:33:90:18:6f:7a:16:c5:50:43:59:d5:
c0:48:94:d9:bc:fa:0f:88:98:12:cc:4e:13:4c:54:
55:be:ff:10:cd:c9:b3:7d:ff:ff:be:25:65:f7:91:
73:6b:24:35:8a:ff:66:7a:bc:b7:07:b6:ae:1f:b6:
5d:6f:42:3d:a6:e1:ab:d5:36:f9:f0:e2:a6:6d:3a:
0d:ad:cd:fe:ff:1d:b3:40:ca:2e:f2:e7:61:83:95:
ac:21:84:54:20:ed:b0:76:4d:1a:dc:65:05:fe:b0:
0f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:14:01:DF:60:84:51:4E:AB:F1:D7:42:5E:F5:69:5F:66:D1:00:7B
X509v3 Authority Key Identifier:
keyid:84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/GBQB32CEUU6r8ddCXvVpX2bRAHs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.155.0/24
Signature Algorithm: sha256WithRSAEncryption
54:69:8a:a2:0e:b6:f2:ab:1c:cf:7e:f3:e0:c2:fb:9c:d0:c6:
c3:1c:d7:f8:fb:ab:a1:3d:e1:c9:1f:3c:3a:57:49:b2:16:7d:
47:ad:22:55:48:bc:a1:7d:e7:cf:a1:0b:bb:44:b4:15:6f:50:
65:23:41:dd:bf:cd:0e:6f:c9:e6:0b:de:fc:5a:1c:6a:ae:81:
65:c4:d0:f6:45:05:4f:26:00:f9:b7:e0:86:60:80:c0:d5:10:
02:f6:e7:7f:2f:4e:22:7c:3f:af:7a:b6:e8:f2:bf:40:3b:76:
54:0e:e8:12:69:cd:f2:de:cf:45:ce:a4:76:d4:cb:f1:48:ca:
c9:2c:5b:e3:20:79:18:6f:7e:6e:05:01:12:11:58:a7:46:a0:
8c:66:43:16:06:be:53:d6:1e:ef:38:07:10:8e:d4:20:5f:4e:
d2:88:20:97:c1:1b:3e:af:81:6b:78:ee:42:94:6b:8e:58:de:
3d:74:fa:f7:27:25:ce:c3:28:c8:ad:7c:a7:6e:ed:83:d0:95:
90:fe:ee:58:5d:28:91:ff:8f:af:43:5d:56:ef:20:f1:8d:a0:
37:af:70:d2:fd:f0:25:76:fd:47:b6:db:09:b3:d8:4d:85:ef:
83:c9:6c:dc:cf:65:d6:06:e9:ea:a7:53:ef:06:37:bd:6d:ec:
ae:5d:7e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org