Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINYUN/XRIjMVIK0q0PCU67HHHdE1Jblnc.roa
File: XRIjMVIK0q0PCU67HHHdE1Jblnc.roa (raw, json)
Hash identifier: /0ofGYuBM6LVySPwRzZDmq5Fck5XLmTYVk7+dlWmdc0=
Subject key identifier: 5D:12:23:31:52:0A:D2:AD:0F:09:4E:BB:1C:71:DD:13:52:5B:96:77
Certificate issuer: /CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Certificate serial: 0CB7
Authority key identifier: 84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/XRIjMVIK0q0PCU67HHHdE1Jblnc.roa
Signing time: Wed 29 Sep 2021 02:42:04 +0000
ROA not before: Wed 29 Sep 2021 02:42:04 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38047
IP address blocks: 103.133.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3255 (0xcb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Validity
Not Before: Sep 29 02:42:04 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5D122331520AD2AD0F094EBB1C71DD13525B9677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1f:4a:50:9f:65:ff:35:fe:e2:41:68:8d:e0:
09:4a:08:03:2c:8b:0b:d6:5b:67:6f:ad:49:cb:e9:
ac:e9:1d:b7:ed:ca:6d:04:9a:f2:59:ce:69:0f:99:
66:4b:c2:a7:01:3c:a8:f0:87:8d:27:24:08:1c:fb:
ad:46:0b:83:60:4a:75:9a:42:00:82:f1:10:c5:4d:
48:1d:27:4f:36:2a:a0:fa:fa:f0:59:ef:93:1c:4d:
2c:fa:63:55:55:33:e9:34:11:c2:18:45:32:bf:96:
57:d7:d3:59:de:88:ab:54:ce:18:e7:e9:06:e7:a9:
28:e6:10:34:45:2a:9b:59:b5:48:93:ad:a6:bf:d6:
42:b8:31:d6:5e:9c:fd:ee:6a:ae:8f:8e:a2:7e:70:
80:99:3b:8e:8d:be:e7:39:77:8e:49:9a:40:39:fe:
03:6a:4b:bd:9d:03:48:0f:ea:88:48:8f:92:ad:bd:
8a:60:59:c8:e1:7a:64:09:65:7b:f3:d0:2b:97:0d:
cf:7a:5d:15:ca:be:23:ad:ab:1a:01:90:05:46:e4:
e3:e3:da:5d:3a:f4:f4:ed:09:a2:cf:12:bc:d2:97:
ab:6b:8f:d0:16:de:a6:13:4a:2c:52:d9:67:f4:26:
f4:8a:dd:e1:ca:ce:55:1b:45:f2:c2:2e:9a:95:67:
b3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:12:23:31:52:0A:D2:AD:0F:09:4E:BB:1C:71:DD:13:52:5B:96:77
X509v3 Authority Key Identifier:
keyid:84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/XRIjMVIK0q0PCU67HHHdE1Jblnc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.152.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:20:c2:61:b1:8e:01:1c:10:69:73:8a:dc:32:17:71:56:eb:
fd:3e:62:a1:61:74:d4:de:8d:69:fe:13:a2:3c:b6:ee:a8:94:
b1:cd:af:19:a8:30:58:31:d4:3c:4c:be:ca:36:4c:cf:a9:29:
05:35:79:20:00:ba:39:e9:14:39:82:f6:a2:61:a4:f4:2b:87:
5b:46:ca:53:ed:47:ca:ed:e6:b4:df:bb:54:cb:95:16:ab:54:
c9:a3:f5:91:a6:ef:14:da:4b:73:7e:e8:db:61:f0:c0:c1:08:
e3:08:fc:20:d0:04:5c:20:6d:cb:6a:96:03:3d:dc:48:54:cd:
71:c6:39:17:cd:e8:4d:43:db:36:06:59:03:85:53:0b:96:5a:
92:1c:93:3e:64:22:f8:ad:83:05:89:db:69:5a:0d:ab:12:ce:
d5:af:3f:6e:fe:5c:4d:e8:93:b0:e0:d7:07:6e:33:6f:18:f5:
88:db:3d:87:52:fa:99:ad:43:df:7f:6f:7c:bc:fc:6e:0b:a7:
13:9f:d7:7c:d5:18:0f:31:5b:98:4a:43:4b:99:d8:f1:30:18:
54:9b:c4:4f:8c:35:ec:7c:da:9b:53:4c:c3:f5:78:32:e2:a5:
18:4f:e7:bd:13:d8:ba:71:1f:8a:9c:54:7c:13:7b:c6:14:ea:
87:1f:ae:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org