Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINYUN/qRL_fXosCOnHVrRqr53_S_BqmYE.roa
File: qRL_fXosCOnHVrRqr53_S_BqmYE.roa (raw, json)
Hash identifier: o9inSAbugtiS8i9t6AL8wIoOkWncQu20TwxibeX9wHI=
Subject key identifier: A9:12:FF:7D:7A:2C:08:E9:C7:56:B4:6A:AF:9D:FF:4B:F0:6A:99:81
Certificate issuer: /CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Certificate serial: 0BD2
Authority key identifier: 84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/qRL_fXosCOnHVrRqr53_S_BqmYE.roa
Signing time: Tue 01 Dec 2020 02:14:04 +0000
ROA not before: Tue 01 Dec 2020 02:14:04 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38047
IP address blocks: 103.133.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3026 (0xbd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Validity
Not Before: Dec 1 02:14:04 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A912FF7D7A2C08E9C756B46AAF9DFF4BF06A9981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ba:e6:67:da:0f:e8:06:4e:d1:b8:f2:7d:90:
b1:90:c1:56:f4:56:58:e9:6e:04:62:a7:52:04:d4:
26:ca:9b:ef:05:0a:e2:74:ab:49:4c:16:ae:42:72:
3d:b7:bd:26:fc:aa:fe:b0:f9:fa:e4:c5:c0:41:c3:
83:0d:5c:25:7e:ed:99:6e:2f:cd:f8:80:f8:e4:f2:
d6:d3:1b:f2:4b:03:11:bd:68:86:99:a6:f2:4e:0a:
ff:db:b3:c9:73:d8:bc:78:6b:80:96:6c:02:b8:b6:
6c:bc:74:4e:5e:40:68:0d:4a:86:3c:a9:aa:f8:b9:
5f:6f:08:6b:b2:22:d9:2c:5b:90:ca:b1:00:59:44:
92:b7:47:d8:07:83:25:d9:58:b3:d8:2d:44:43:b2:
d7:ef:8e:19:93:33:76:e1:bb:e5:29:c1:70:cc:17:
24:6d:d0:a2:7e:1e:e8:5c:c3:de:2c:ba:61:81:3c:
b0:e7:95:a7:59:ae:14:48:b0:93:6d:40:7b:5f:7e:
31:72:cc:0d:b9:cf:e7:16:2a:2f:ea:d3:d9:b1:76:
ba:13:76:e9:ff:64:fb:a2:70:0f:bc:27:52:63:1c:
ad:b3:64:e5:a7:fa:c2:c9:80:39:9d:44:b8:34:ae:
f9:6b:15:3b:47:62:c1:32:4b:57:4c:9a:13:93:d2:
4f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:12:FF:7D:7A:2C:08:E9:C7:56:B4:6A:AF:9D:FF:4B:F0:6A:99:81
X509v3 Authority Key Identifier:
keyid:84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/qRL_fXosCOnHVrRqr53_S_BqmYE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.155.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:06:a0:6a:46:66:e0:37:86:2c:dc:1b:85:41:5a:57:d5:1b:
5a:57:a0:48:57:c8:97:37:89:ba:6f:2d:16:c7:c6:cd:6f:64:
29:ca:50:60:c1:b4:17:91:5a:a9:dd:be:64:1d:f9:a1:42:5e:
18:66:33:a3:37:fd:8b:8e:92:74:86:8f:1b:9b:d7:91:ce:97:
93:32:1f:b4:8a:48:97:c5:fe:37:b1:38:45:67:15:24:19:2d:
05:a3:c6:4f:3f:89:d0:0d:8b:62:4e:46:db:06:b9:01:06:3f:
8e:07:55:68:bb:79:97:46:99:e0:d6:49:ce:d9:38:0d:48:cb:
bb:05:4e:53:3b:5f:ab:c2:e4:8d:fa:1a:a7:7d:84:8e:5f:0e:
60:04:a0:49:07:b1:66:82:d9:27:3f:f3:10:45:7f:a7:b4:f8:
79:6b:77:8e:08:70:d2:d4:aa:a1:d1:50:ca:02:50:39:be:e6:
8c:4a:87:39:8a:68:3b:aa:91:61:2f:61:c4:45:75:93:75:cd:
c2:97:71:b5:cf:a5:33:dc:d2:32:bb:62:b9:32:4a:d5:0f:da:
e6:10:ec:59:96:aa:b7:a0:42:e6:99:79:a7:33:4c:36:d9:e6:
0c:7e:e0:e2:13:8b:41:3d:42:15:69:80:94:c3:65:65:67:69:
ef:08:e8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org