Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINYUN/WJQedYffFD1vaDC661s5p2DvsIo.roa
File: WJQedYffFD1vaDC661s5p2DvsIo.roa (raw, json)
Hash identifier: cyXk3j2Cfmoy2/lo5NbZqnFJQ8DPwojNqZhYJWp0bLM=
Subject key identifier: 58:94:1E:75:87:DF:14:3D:6F:68:30:BA:EB:5B:39:A7:60:EF:B0:8A
Certificate issuer: /CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Certificate serial: 0C0E
Authority key identifier: 84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/WJQedYffFD1vaDC661s5p2DvsIo.roa
Signing time: Sun 07 Feb 2021 06:03:35 +0000
ROA not before: Sun 07 Feb 2021 06:03:35 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38047
IP address blocks: 103.133.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3086 (0xc0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Validity
Not Before: Feb 7 06:03:35 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=58941E7587DF143D6F6830BAEB5B39A760EFB08A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:c2:36:15:ca:3a:0a:58:c7:21:dd:00:b7:
08:4b:1e:80:be:8e:5c:a1:d4:2d:f8:3e:6a:b0:73:
79:0f:27:8c:d1:d1:19:91:64:1b:bb:70:e8:a6:e3:
4c:c8:89:b5:7d:20:79:b0:1d:36:2f:e0:ae:9d:7c:
c5:54:d4:7d:48:33:e9:4e:c0:82:6d:63:76:be:bb:
7b:2d:ee:4b:02:ef:87:d9:14:28:b1:41:e3:ea:13:
b0:f9:41:a9:98:9b:cb:04:15:ec:1a:a9:87:94:cd:
f0:fa:ea:98:44:37:9e:30:fc:3e:38:09:ab:c5:d7:
ba:cd:38:24:f7:e3:c2:b6:6e:f9:a0:ae:42:12:cf:
d3:21:d5:3f:dd:e4:15:f4:3c:e2:1c:4a:c4:cb:08:
2c:79:aa:fe:b2:52:46:45:f2:26:c2:f9:1f:66:6e:
2e:4c:ad:bc:78:db:7f:85:bd:50:dd:02:ff:ca:5d:
96:6d:a0:05:40:e2:c8:e0:55:ad:2a:af:bf:50:16:
74:8c:c0:a3:58:b3:9e:02:a7:0d:7c:d0:5f:fb:6f:
59:52:fe:fb:80:2e:85:58:d7:af:48:49:a3:91:08:
ee:84:69:43:b9:6a:4a:97:53:0d:fd:e5:0c:b6:c9:
e9:0b:84:29:c4:06:99:a2:03:48:da:62:33:fd:57:
9e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:94:1E:75:87:DF:14:3D:6F:68:30:BA:EB:5B:39:A7:60:EF:B0:8A
X509v3 Authority Key Identifier:
keyid:84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/WJQedYffFD1vaDC661s5p2DvsIo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.152.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:bd:19:85:6f:99:51:26:44:6a:eb:36:84:5c:41:bc:a4:0e:
99:6f:2c:d6:1e:82:4d:3d:14:b5:40:a0:f6:7e:fa:0d:6f:ab:
c5:22:f0:0f:82:1e:28:57:cb:88:34:57:1b:36:2d:07:83:84:
70:22:33:db:f5:2a:c4:b0:97:0a:3e:c9:66:90:8f:cf:4a:87:
3d:30:c2:06:0d:f9:97:6a:44:aa:98:83:ee:a6:b5:e7:67:7f:
ed:d2:35:8e:cc:51:1a:bd:02:87:a7:ff:ec:61:57:75:0d:02:
fd:36:d8:ac:e2:13:2a:d7:df:5b:2a:94:94:fb:f3:7a:21:ed:
0d:9a:8a:a7:51:b5:d6:6f:8f:8e:aa:c0:77:fb:3b:e9:5b:15:
30:2f:54:9c:25:15:ee:6b:f4:6a:7b:0f:6b:b2:74:e1:81:d8:
49:9b:41:7a:bd:e4:3f:c9:c5:24:7d:48:87:c4:40:30:65:37:
1d:e7:d4:28:1d:5a:04:ab:76:bb:64:f7:93:d1:8c:d8:68:03:
3d:3e:a6:f0:89:26:b7:f4:3c:2a:91:7b:1a:3c:ee:1c:81:d9:
a7:42:5d:50:47:82:ba:f0:4e:78:7a:03:ef:a8:1a:21:ee:e2:
1d:1c:87:e5:ce:c5:9a:ad:39:a0:87:ee:3b:c2:4b:7d:3e:74:
ae:44:8b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org