Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/qLEAzk0wQBDkIJbW43oQNyIfKuY.roa
File: qLEAzk0wQBDkIJbW43oQNyIfKuY.roa (raw, json)
Hash identifier: 87dJdcACoISK7+2t1RQkRsR+GRKKJd2eDOX68v9WuYs=
Subject key identifier: A8:B1:00:CE:4D:30:40:10:E4:20:96:D6:E3:7A:10:37:22:1F:2A:E6
Certificate issuer: /CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
Certificate serial: 0B8C
Authority key identifier: 87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/qLEAzk0wQBDkIJbW43oQNyIfKuY.roa
Signing time: Mon 16 Oct 2023 03:58:54 +0000
ROA not before: Mon 16 Oct 2023 03:58:54 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131149
IP address blocks: 103.123.192.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2956 (0xb8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
Validity
Not Before: Oct 16 03:58:54 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A8B100CE4D304010E42096D6E37A1037221F2AE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:9c:80:e0:5d:a2:00:cd:13:5d:15:2a:51:
46:49:01:b9:ff:ea:20:63:20:63:82:cc:b0:76:c5:
50:0b:87:fd:fc:b9:c9:73:5b:c9:18:46:ad:f8:3e:
8a:a6:df:37:fc:85:17:53:8b:3c:fb:50:dd:57:96:
c0:da:0f:fa:cc:6f:ee:1e:2b:c2:c4:0a:db:94:ac:
25:70:51:2b:e8:ca:bf:f3:3e:02:d4:4a:f5:77:d5:
b6:84:3a:5f:ec:1f:e1:25:ab:c8:ef:57:bc:13:32:
e2:71:20:ab:5a:0c:c8:8f:73:d2:1a:4a:29:a0:fb:
72:49:5e:8f:8a:d0:a1:8d:a6:60:b7:39:ea:80:23:
b8:e3:47:58:b9:a9:c5:15:f3:a8:a8:ae:ca:36:c3:
e2:d0:56:63:be:16:10:b5:dc:22:fd:31:1e:5f:0e:
a7:1e:0a:03:22:5f:c8:b5:33:70:da:d0:11:2a:10:
06:7b:08:9f:bf:19:3f:1e:25:2f:db:9d:e2:7a:9f:
ac:ee:15:f3:50:52:5e:eb:09:7d:d3:44:35:8e:9f:
fd:70:9a:0e:0d:30:f9:78:22:4e:2d:a9:ec:2d:a2:
a2:5f:35:f9:12:da:97:30:45:b6:6d:95:a2:88:9b:
92:1c:6b:0a:32:9f:8b:f6:8e:2b:85:d8:6e:b5:88:
6d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B1:00:CE:4D:30:40:10:E4:20:96:D6:E3:7A:10:37:22:1F:2A:E6
X509v3 Authority Key Identifier:
keyid:87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/qLEAzk0wQBDkIJbW43oQNyIfKuY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.192.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:6d:e1:42:e9:86:03:36:04:8a:50:d3:4c:0f:90:b6:e0:84:
5e:36:41:2d:e5:83:f1:d3:6d:5c:09:ed:7f:5c:e7:00:e7:15:
cb:af:45:4f:ef:e2:4e:69:d3:8e:18:99:20:07:87:62:7f:24:
31:07:4c:7f:0d:4d:bf:df:7b:b0:89:56:4f:00:70:26:a7:fe:
f0:df:88:f3:5e:6e:d7:a1:85:fd:cb:62:39:81:a7:5e:b0:31:
de:81:82:9a:0a:22:67:81:9c:e6:bc:5f:6d:84:ea:31:9c:2e:
db:b5:e8:f3:88:bd:31:86:2a:22:65:bd:ce:4d:c4:91:14:18:
7f:20:71:12:ad:2f:a0:8c:86:0e:72:78:e8:8c:30:cb:df:bb:
8a:69:42:2b:4f:22:4f:5f:b7:b8:18:01:f8:77:f9:20:9a:b8:
19:ea:af:35:98:e0:b0:c0:47:4d:54:bb:72:7e:48:d8:d1:b9:
95:5a:78:fc:2f:3f:ae:36:99:89:b6:0a:fa:0f:74:d0:32:ee:
18:c5:de:63:42:e2:e2:c5:0a:be:98:40:d4:b4:58:e9:93:3a:
18:96:65:00:d3:57:8f:35:22:71:ed:85:ce:ef:41:44:f6:42:
42:d7:69:3f:0c:2d:1d:a9:c1:41:bf:ac:eb:b3:44:44:a2:63:
42:f2:08:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org