Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINYUN/QK1y4uHHIv0vs-j27JDQhA2vmGY.roa
File: QK1y4uHHIv0vs-j27JDQhA2vmGY.roa (raw, json)
Hash identifier: Q7hHIT0DAsdiffTdUV78i28lqRZubMCkHX06ln8Cvwc=
Subject key identifier: 40:AD:72:E2:E1:C7:22:FD:2F:B3:E8:F6:EC:90:D0:84:0D:AF:98:66
Certificate issuer: /CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Certificate serial: 0C10
Authority key identifier: 84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/QK1y4uHHIv0vs-j27JDQhA2vmGY.roa
Signing time: Sun 07 Feb 2021 06:03:57 +0000
ROA not before: Sun 07 Feb 2021 06:03:57 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38047
IP address blocks: 103.133.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3088 (0xc10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Validity
Not Before: Feb 7 06:03:57 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=40AD72E2E1C722FD2FB3E8F6EC90D0840DAF9866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6a:20:c9:f3:ab:76:70:79:fd:e8:73:7d:b0:
5c:07:5a:c8:6c:eb:cf:81:24:61:75:8e:d3:e1:d9:
74:1f:8a:4b:e1:a3:a9:a8:eb:30:69:6a:9e:c1:ae:
05:84:97:68:ce:c4:1f:cb:53:f0:5c:51:f1:54:68:
ad:ed:33:f6:52:e8:e0:3c:8f:4a:5a:c3:e4:89:ac:
a2:df:fa:b6:50:5c:c2:c9:cd:9d:b9:d4:90:49:b2:
4c:ff:71:d7:43:e3:a2:1b:db:b8:a8:56:4b:e0:19:
aa:d2:74:8e:c0:6f:3f:f0:13:d7:f5:24:32:c0:a7:
e4:c0:e4:74:06:68:c6:f0:67:be:61:82:d2:58:89:
98:54:50:3c:81:89:9e:13:6a:1d:35:99:71:f3:ba:
72:12:90:82:1e:80:b9:4e:c3:4a:04:55:94:3d:7f:
4f:b8:40:3e:93:d2:08:82:c5:77:ad:ff:8f:c3:05:
e8:1c:bc:30:95:9c:a0:cc:18:de:57:0c:32:03:f1:
f0:97:0f:bd:44:e2:a4:95:55:4c:1b:4a:c6:7e:4f:
6d:e1:4e:81:08:d8:76:c1:36:38:23:6c:09:85:98:
62:8e:47:9e:b4:71:55:b6:f3:78:e1:05:0f:28:ec:
0a:da:f3:07:cd:28:89:35:42:c2:e9:7c:5b:c1:bc:
7f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AD:72:E2:E1:C7:22:FD:2F:B3:E8:F6:EC:90:D0:84:0D:AF:98:66
X509v3 Authority Key Identifier:
keyid:84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/QK1y4uHHIv0vs-j27JDQhA2vmGY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.153.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:f9:e7:d6:f2:44:ea:e2:55:8f:81:90:9e:7b:ad:76:ed:4d:
23:8b:05:e0:6b:a6:4a:9e:e9:f5:20:77:d0:bb:97:1d:ad:89:
52:18:05:18:f8:65:6b:ee:d3:a2:7f:15:b5:ae:ef:fe:3d:75:
b3:06:15:45:52:4a:d3:5b:49:37:9e:96:81:b3:59:9c:11:3a:
fd:4a:e5:d9:85:2c:b2:ea:23:f3:19:9b:e9:2f:5b:de:3b:e8:
d2:b4:6e:7a:3e:27:43:08:e6:5e:57:cb:20:c9:ac:59:ed:ec:
74:ec:ff:c7:6d:23:63:b0:ee:8a:5e:46:59:6f:0c:81:b2:85:
a2:da:12:df:65:9b:6d:f1:7a:78:6a:f7:38:73:48:36:a8:d1:
f8:73:4a:20:25:00:29:32:7d:03:30:cd:85:4b:40:03:ca:ab:
37:60:93:20:45:68:c2:a6:d0:c9:32:30:f8:a7:f9:59:62:58:
7f:df:21:79:09:d6:b1:ff:60:64:ea:07:f5:7d:b2:bb:05:2b:
db:ee:5e:e6:a5:de:3a:fd:68:23:49:01:be:bc:6f:ff:5b:d9:
5a:79:23:cf:2b:ab:91:9b:64:3f:b2:d6:73:bb:91:78:9a:4a:
44:d6:87:a3:ca:ae:43:0f:d9:66:b9:e6:52:59:8f:9d:06:db:
9e:b3:82:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org