Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINYUN/TxImB5lHQakTONi4uR2joSeMYrs.roa
File: TxImB5lHQakTONi4uR2joSeMYrs.roa (raw, json)
Hash identifier: Ahf1j3pmIZET7FdZeABOXz8CwryZCjq/9Rri9SjuKls=
Subject key identifier: 4F:12:26:07:99:47:41:A9:13:38:D8:B8:B9:1D:A3:A1:27:8C:62:BB
Certificate issuer: /CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Certificate serial: 0ABC
Authority key identifier: 84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/TxImB5lHQakTONi4uR2joSeMYrs.roa
Signing time: Tue 29 Sep 2020 10:09:21 +0000
ROA not before: Tue 29 Sep 2020 10:09:21 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 138145
IP address blocks: 103.133.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2748 (0xabc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Validity
Not Before: Sep 29 10:09:21 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4F122607994741A91338D8B8B91DA3A1278C62BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:49:f6:9e:47:7f:f7:4f:21:56:72:66:ed:
5c:a7:c2:a0:1d:b3:ef:73:57:0b:e2:c7:a2:d6:4c:
8b:f3:01:99:30:cf:31:82:6a:a4:fa:37:dd:ed:e1:
15:47:ac:a9:63:1f:73:16:47:a4:85:b4:8c:2b:b7:
a8:43:6d:66:09:29:d0:b4:58:e9:ff:83:e2:82:58:
77:8d:33:c3:8f:82:e1:a7:2e:0f:39:9e:79:c3:a9:
47:a7:d9:03:bf:86:25:37:87:8f:20:67:07:c7:50:
b7:f3:a5:d1:16:8a:f2:c8:c9:0e:9c:19:0b:89:10:
ef:90:d0:43:7c:e0:7c:15:c3:fd:86:46:eb:6d:42:
e9:ca:d9:5a:1d:e3:61:9e:cb:ef:f4:f4:b0:a7:fb:
26:4c:e4:f8:73:d9:47:9b:f0:9f:c3:20:e9:15:96:
5f:7f:74:83:ed:a7:ad:a0:fd:c1:8e:21:1c:f8:c9:
6c:c6:c4:58:ad:df:d4:56:25:70:53:74:ce:87:13:
c4:65:41:43:ae:b5:b9:fe:ff:7f:27:38:ef:41:5c:
1b:74:2c:87:b1:c0:96:24:b1:48:ac:0c:c7:01:bc:
c1:e0:eb:77:93:41:85:5f:5a:bd:c0:19:f1:b1:fa:
2a:73:85:37:5b:e9:ba:b2:bf:9e:25:85:16:91:ad:
39:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:12:26:07:99:47:41:A9:13:38:D8:B8:B9:1D:A3:A1:27:8C:62:BB
X509v3 Authority Key Identifier:
keyid:84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/TxImB5lHQakTONi4uR2joSeMYrs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.153.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:cd:a2:6e:b3:76:61:c7:48:44:6f:2b:90:61:af:91:dc:22:
25:36:c5:8f:f7:4f:2a:db:42:a3:05:62:5c:25:6e:06:e5:99:
e9:71:77:63:7b:20:37:56:f4:05:97:cb:ef:43:4a:98:19:22:
55:3c:71:a9:b4:f1:c8:cd:38:ad:57:d9:f3:f3:e8:4a:17:1a:
56:1a:dc:56:6e:5f:66:34:a9:1d:04:5d:dc:9c:bb:85:31:08:
9f:67:6e:6f:db:f2:50:09:c9:48:fb:73:80:57:3d:14:5b:ab:
80:83:91:6b:62:ac:30:87:19:0b:9c:8f:07:d1:55:6a:9d:fc:
f6:dc:cd:bb:bb:76:30:3e:4a:06:1c:2f:b6:5b:ff:6e:f4:45:
5b:86:27:bc:d3:b2:61:c4:e0:7f:58:01:cc:dd:9e:b4:f1:c5:
92:b1:c6:4d:ae:04:6c:94:fd:2e:91:71:37:6c:de:44:f3:d8:
ce:f8:6a:6f:f7:31:0d:c4:9d:cf:82:1a:52:06:c9:2f:e3:d4:
15:64:a8:81:bb:b7:66:6b:12:c9:7c:59:47:8c:23:d7:79:18:
32:72:d1:04:52:02:e4:61:9d:80:d3:87:05:6a:d5:bb:9a:97:
d7:a2:49:a9:3b:4f:98:d3:c7:88:ab:86:2a:07:d9:2d:bb:24:
66:aa:53:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org