Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINYUN/ZKV3WiUJkNWnz52PjeXewPFg0o8.roa
File: ZKV3WiUJkNWnz52PjeXewPFg0o8.roa (raw, json)
Hash identifier: JtQiEd2+Ba8/4HlrtbjaEV2PthjgwVeITmYGaVkVY8c=
Subject key identifier: 64:A5:77:5A:25:09:90:D5:A7:CF:9D:8F:8D:E5:DE:C0:F1:60:D2:8F
Certificate issuer: /CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Certificate serial: 0C0C
Authority key identifier: 84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/ZKV3WiUJkNWnz52PjeXewPFg0o8.roa
Signing time: Sun 07 Feb 2021 06:03:21 +0000
ROA not before: Sun 07 Feb 2021 06:03:21 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38047
IP address blocks: 103.133.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3084 (0xc0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Validity
Not Before: Feb 7 06:03:21 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=64A5775A250990D5A7CF9D8F8DE5DEC0F160D28F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:78:5b:92:b8:0b:df:ba:b4:48:f9:f2:5c:
62:14:72:57:dc:73:b5:4e:b6:f2:3a:2d:b4:cd:65:
f5:b6:e5:4d:c2:dc:c3:e9:43:12:b3:fb:c7:1e:bc:
b3:e7:f2:12:1c:86:04:38:45:94:f9:9e:88:7b:25:
04:40:6f:aa:7c:e5:a1:43:83:41:22:42:ab:a1:7f:
98:c2:d9:ec:fb:0b:43:d8:47:c9:fd:b9:d0:04:f4:
c2:2b:76:b4:91:3d:ae:b6:28:97:ff:64:1a:2b:cb:
2d:63:ce:ee:47:e7:c9:96:af:41:e9:ba:dc:98:19:
31:84:3b:94:35:88:19:fd:a6:e2:72:cd:15:05:51:
85:cb:72:ad:3e:3f:0c:83:31:a4:28:a4:7c:be:67:
24:ab:ed:5a:ad:a4:de:30:eb:11:e4:5c:dc:20:34:
86:7f:f6:8c:99:58:14:73:0e:7f:01:3d:d1:d9:e4:
1e:29:77:a5:4b:6e:f2:5b:31:d9:67:1f:06:77:37:
f9:a4:31:51:5e:66:e7:0e:6c:9a:3b:2c:0d:77:e0:
55:ea:25:2d:f7:60:fc:7d:8c:44:58:ee:08:35:0f:
7f:06:bf:54:83:57:5a:84:f9:0b:c4:b6:fa:53:76:
46:a6:89:24:7c:32:a5:9a:0f:e7:b5:1c:12:d6:29:
6d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A5:77:5A:25:09:90:D5:A7:CF:9D:8F:8D:E5:DE:C0:F1:60:D2:8F
X509v3 Authority Key Identifier:
keyid:84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/ZKV3WiUJkNWnz52PjeXewPFg0o8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.154.0/24
Signature Algorithm: sha256WithRSAEncryption
29:85:c9:7e:b4:77:5c:13:5f:7e:70:de:3d:a6:b2:dc:a6:ec:
d5:51:00:29:77:1a:0f:0d:4c:25:83:71:ec:d1:7f:d3:be:03:
41:c6:9a:bc:82:59:34:83:ca:c9:b6:98:d7:34:eb:32:bd:87:
74:1d:89:ca:f6:a5:ac:31:cb:ec:93:f8:f7:9e:b7:f3:4a:2b:
a5:58:73:42:b2:b8:76:f4:08:42:b7:66:88:8c:a4:5f:6c:6d:
aa:d1:30:e1:b7:1a:8d:46:df:30:3d:43:d0:a1:81:5e:92:cf:
fb:07:0c:ba:2f:bd:84:20:07:0a:d5:94:27:39:69:5d:d7:76:
8f:cb:87:1b:14:03:61:7a:ab:e2:d3:09:01:72:a9:98:c2:6a:
27:06:07:dc:90:c0:75:4e:f0:23:e6:07:64:34:eb:7a:ea:d1:
32:88:39:d2:0e:0f:c5:2b:9b:da:17:ee:73:c3:74:58:a0:e8:
ae:6c:26:07:47:24:88:7c:ec:ba:7d:f1:db:35:8b:1a:12:b3:
b1:14:5f:58:df:dc:49:d7:a1:77:37:1c:d4:1b:e1:7f:84:ed:
7e:af:82:96:e8:79:4d:de:75:7f:71:7e:87:5a:59:b0:ae:da:
16:ac:42:46:74:a6:61:7a:c5:32:9d:98:46:1f:12:b6:63:a8:
2a:1a:b6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org