Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINYUN/x9YcSwdPMs7RyE71-ex1YRXI9YE.roa
File: x9YcSwdPMs7RyE71-ex1YRXI9YE.roa (raw, json)
Hash identifier: YxqNdd4pjUKJgJ/VQ26tB2Au0H775orPbDJe7dUUyOE=
Subject key identifier: C7:D6:1C:4B:07:4F:32:CE:D1:C8:4E:F5:F9:EC:75:61:15:C8:F5:81
Certificate issuer: /CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Certificate serial: 0BFE
Authority key identifier: 84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/x9YcSwdPMs7RyE71-ex1YRXI9YE.roa
Signing time: Wed 03 Feb 2021 12:10:17 +0000
ROA not before: Wed 03 Feb 2021 12:10:17 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38047
IP address blocks: 103.133.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3070 (0xbfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Validity
Not Before: Feb 3 12:10:17 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C7D61C4B074F32CED1C84EF5F9EC756115C8F581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:e5:ae:9a:0d:20:0b:51:fb:6c:86:36:c1:
68:39:49:a1:81:3b:6f:11:47:e6:0d:21:a5:3f:92:
54:96:29:ff:2d:5f:b5:26:54:50:79:db:64:d6:f8:
e9:f5:37:1e:0e:0b:9f:60:1e:fb:72:50:b7:c4:9c:
05:6d:25:b3:7b:e2:40:0a:06:8e:d6:fc:88:48:f4:
5f:c0:13:f7:5b:49:0e:88:1f:27:b6:c3:16:a9:07:
07:71:58:37:a8:a3:9e:c8:b1:a5:f8:f8:95:20:9f:
fa:35:21:6f:48:0c:15:d4:23:92:21:64:14:9a:fc:
ac:9d:bb:43:54:30:1a:a2:fb:2b:d2:c5:f1:bf:8f:
c2:9f:35:df:5e:0d:19:a5:a3:c6:ac:94:0e:bb:37:
b4:93:df:fc:ce:07:a4:44:d1:2d:c6:21:56:db:68:
63:b0:ac:09:98:e6:ac:1c:2e:b9:c2:0b:a7:cd:15:
21:ee:84:ed:ca:b8:9e:f2:9a:ba:0d:3a:1a:fc:84:
69:c7:19:85:01:a5:bb:e0:b5:37:3e:df:81:b7:7b:
9b:a4:b0:a7:2c:89:c9:3e:09:64:e6:42:f4:34:14:
68:1a:89:ed:f1:75:e0:b9:a4:58:7d:67:4f:79:69:
64:05:08:60:5b:f8:aa:fe:16:34:de:67:07:a6:fa:
2c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D6:1C:4B:07:4F:32:CE:D1:C8:4E:F5:F9:EC:75:61:15:C8:F5:81
X509v3 Authority Key Identifier:
keyid:84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/x9YcSwdPMs7RyE71-ex1YRXI9YE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.152.0/24
Signature Algorithm: sha256WithRSAEncryption
50:10:4a:6a:07:09:2f:ad:ce:04:e3:36:68:64:4a:3a:ef:23:
df:2e:55:5a:3f:63:e3:f0:98:84:b2:c2:0a:f3:a7:5b:54:e7:
09:a4:8b:c3:7f:ba:e9:d1:78:de:3a:31:c4:ab:72:9a:bf:f9:
d7:35:b6:f3:bd:00:8a:79:ae:05:ed:a7:08:93:0b:58:84:16:
77:12:64:4e:db:87:66:40:38:cb:9a:e0:3c:6e:5d:26:d5:d8:
5d:4c:d2:4e:45:9e:36:51:ee:d4:44:58:7a:fd:e2:8a:fc:2b:
de:81:97:d2:93:20:ae:e4:88:d8:60:51:62:d4:23:9c:1c:b4:
32:c5:8d:a7:4a:47:85:08:f0:a3:36:ad:1a:47:33:56:89:5a:
a6:05:ce:d8:7f:48:a5:da:c5:35:fa:e1:7a:4c:3b:35:1b:80:
52:80:36:b0:d1:04:32:b4:a3:36:de:a1:db:95:22:08:b9:e8:
a6:f7:4b:b2:db:2d:f7:5a:f9:6e:71:ee:c4:72:c1:84:86:08:
8a:97:4b:c2:d0:df:d4:73:e4:83:e9:04:dc:0f:60:3f:e2:03:
6b:6b:bc:66:01:33:0c:0f:af:c3:a2:dd:df:9d:88:e0:01:cc:
88:5f:59:43:1f:e3:3f:83:1e:2f:33:c0:43:46:e9:85:93:83:
2c:52:0d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org