Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINYUN/le6kxu_AxyDwNt0ox9rRu0FkTAo.roa
File: le6kxu_AxyDwNt0ox9rRu0FkTAo.roa (raw, json)
Hash identifier: HZJCzDa6/Oc371VX2aGhTAdB2FCLjmIVspeqeNFsQdo=
Subject key identifier: 95:EE:A4:C6:EF:C0:C7:20:F0:36:DD:28:C7:DA:D1:BB:41:64:4C:0A
Certificate issuer: /CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Certificate serial: 0DA4
Authority key identifier: 84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/le6kxu_AxyDwNt0ox9rRu0FkTAo.roa
Signing time: Thu 15 Sep 2022 02:41:40 +0000
ROA not before: Thu 15 Sep 2022 02:41:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38047
IP address blocks: 103.133.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3492 (0xda4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Validity
Not Before: Sep 15 02:41:40 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=95EEA4C6EFC0C720F036DD28C7DAD1BB41644C0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:ae:2e:2c:ba:10:eb:21:f7:b0:be:4e:e1:
64:71:f9:e9:a6:d6:7f:5f:c8:1f:1e:59:16:fd:e1:
bb:d6:3e:c3:d7:63:ab:e3:06:6f:82:56:dc:0a:d7:
ab:3c:80:20:5b:f5:da:81:45:af:eb:9c:3b:ad:e0:
5f:69:9c:40:fe:8d:b3:eb:9f:4d:76:da:76:1e:f7:
cb:91:8e:8a:c9:c9:b9:3a:07:68:a7:29:78:7c:aa:
ef:63:67:d9:1a:dd:91:ac:15:fe:dd:28:02:2c:f0:
3e:db:5b:b5:7d:18:8c:9d:2b:41:07:c3:d2:7d:d3:
ef:38:1a:32:2b:47:a1:c4:f4:20:ba:7e:f4:51:07:
75:7a:7a:98:d5:a3:b0:92:d5:26:ab:a9:56:10:dd:
f8:bb:24:f2:e2:74:5d:bd:6a:8b:e2:91:c8:a2:09:
1e:e7:a4:1a:d4:8c:5b:5e:8e:9e:7c:0e:03:c4:6b:
c9:6f:62:b3:f7:ee:34:d8:3d:79:09:86:3a:f8:84:
16:d6:10:a2:39:15:f1:1f:36:e4:e3:3b:90:d6:a1:
50:7e:1c:8f:45:c1:e9:ba:01:71:bf:9b:af:08:6f:
41:20:76:9b:af:10:1d:d9:eb:1b:54:80:43:97:5b:
e6:b9:82:33:61:50:b9:1b:f6:a0:60:2b:ce:3e:d8:
07:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EE:A4:C6:EF:C0:C7:20:F0:36:DD:28:C7:DA:D1:BB:41:64:4C:0A
X509v3 Authority Key Identifier:
keyid:84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/le6kxu_AxyDwNt0ox9rRu0FkTAo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.152.0/24
Signature Algorithm: sha256WithRSAEncryption
05:0a:d0:b6:05:9d:4d:a9:4a:1f:da:7e:37:57:fa:38:bb:ed:
7c:9b:c1:58:7c:7e:2f:e9:92:96:61:f6:d9:83:96:0a:76:a1:
8a:33:49:70:a6:40:44:10:c5:f5:a3:8d:88:c5:48:a1:3a:1e:
6d:7b:76:2f:94:ac:f9:66:5f:89:63:7d:fb:7e:f5:0c:32:2e:
80:3f:e3:3d:c8:56:fc:98:3f:f7:77:69:63:e5:9b:1d:1d:fb:
4b:6b:07:f1:32:33:70:8d:f0:6f:72:39:3f:89:5d:94:7e:17:
7f:2e:3a:5f:2c:11:21:a7:fd:71:08:ef:b6:12:53:f6:28:b6:
33:da:cb:73:09:a5:ae:ab:3a:b4:df:90:75:85:39:57:99:ba:
ab:d2:66:53:db:73:8e:1a:75:e0:8a:62:18:a8:83:70:e7:05:
d3:b6:83:f2:b9:d3:f7:1f:ba:af:72:80:08:d7:a5:ec:4f:49:
b4:25:b0:eb:e4:7e:34:70:88:2f:a1:82:ba:34:d1:c5:7f:76:
c5:f8:04:c0:4d:d2:1b:26:56:7e:45:3c:b4:cc:fe:39:19:72:
70:75:64:fb:52:4d:d8:99:a7:99:20:76:97:8c:44:7f:07:f6:
ec:2c:57:db:2d:0f:aa:47:ca:e2:f8:18:ad:2f:94:63:a3:a0:
88:15:53:cc
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDaQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODRG
ODUwQzA2NTFCNjk5RTE5MERDOUQ5N0NEMURFMzI2QzE2NEVDNTAeFw0yMjA5MTUw
MjQxNDBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDk1RUVBNEM2RUZDMEM3
MjBGMDM2REQyOEM3REFEMUJCNDE2NDRDMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCh64uLLoQ6yH3sL5O4WRx+emm1n9fyB8eWRb94bvWPsPXY6vj
Bm+CVtwK16s8gCBb9dqBRa/rnDut4F9pnED+jbPrn0122nYe98uRjorJybk6B2in
KXh8qu9jZ9ka3ZGsFf7dKAIs8D7bW7V9GIydK0EHw9J90+84GjIrR6HE9CC6fvRR
B3V6epjVo7CS1SarqVYQ3fi7JPLidF29aovikciiCR7npBrUjFtejp58DgPEa8lv
YrP37jTYPXkJhjr4hBbWEKI5FfEfNuTjO5DWoVB+HI9Fwem6AXG/m68Ib0Egdpuv
EB3Z6xtUgEOXW+a5gjNhULkb9qBgK84+2AczAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUle6kxu/AxyDwNt0ox9rRu0FkTAowHwYDVR0jBBgwFoAUhPhQwGUbaZ4ZDcnZ
fNHeMmwWTsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWElOWVVO
L2hQaFF3R1ViYVo0WkRjblpmTkhlTW13V1RzVS5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvaFBoUXdHVWJhWjRaRGNuWmZOSGVNbXdXVHNVLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvWElOWVVOL2xlNmt4dV9BeHlEd050MG94
OXJSdTBGa1RBby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn
hZgwDQYJKoZIhvcNAQELBQADggEBAAUK0LYFnU2pSh/afjdX+ji77XybwVh8fi/p
kpZh9tmDlgp2oYozSXCmQEQQxfWjjYjFSKE6Hm17di+UrPlmX4ljfft+9QwyLoA/
4z3IVvyYP/d3aWPlmx0d+0trB/EyM3CN8G9yOT+JXZR+F38uOl8sESGn/XEI77YS
U/YotjPay3MJpa6rOrTfkHWFOVeZuqvSZlPbc44adeCKYhiog3DnBdO2g/K50/cf
uq9ygAjXpexPSbQlsOvkfjRwiC+hgro00cV/dsX4BMBN0hsmVn5FPLTM/jkZcnB1
ZPtSTdiZp5kgdpeMRH8H9uwsV9stD6pHyuL4GK0vlGOjoIgVU8w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org