Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/9B0Di1WNCAk-n0x_ujtDFiEx64Y.roa
File: 9B0Di1WNCAk-n0x_ujtDFiEx64Y.roa (raw, json)
Hash identifier: JtJFcB91zyrCc4DTRjnOZj09mdPUBs0SKWq3kVwqv84=
Subject key identifier: F4:1D:03:8B:55:8D:08:09:3E:9F:4C:7F:BA:3B:43:16:21:31:EB:86
Certificate issuer: /CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Certificate serial: 0EB1
Authority key identifier: B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/9B0Di1WNCAk-n0x_ujtDFiEx64Y.roa
Signing time: Fri 01 Sep 2023 10:24:22 +0000
ROA not before: Fri 01 Sep 2023 10:24:22 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131662
IP address blocks: 103.135.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3761 (0xeb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Validity
Not Before: Sep 1 10:24:22 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F41D038B558D08093E9F4C7FBA3B43162131EB86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:67:dd:b0:42:16:f8:87:15:ea:87:4c:eb:c3:
da:c0:4d:cd:c8:67:8e:d2:4f:09:83:cd:bf:c9:eb:
0a:0c:91:93:ed:b5:bb:bd:04:6c:16:f0:be:87:51:
94:ae:af:c3:7e:5f:8f:60:4f:04:a5:7b:98:03:c8:
b9:97:23:9f:4b:e7:70:b9:50:83:ce:ac:18:37:3c:
62:b7:9b:b2:9f:19:51:1f:7d:00:b3:68:77:42:d2:
91:29:1b:8e:b4:17:28:c0:fb:1c:de:4b:d2:50:e0:
22:05:52:92:6f:e9:d1:c4:6c:d1:e7:a0:f0:f1:e2:
06:80:21:65:62:9a:03:da:4c:2b:9b:1c:b8:4a:ac:
7d:9e:9d:05:ba:75:a6:11:a5:87:83:0d:86:8a:29:
b2:79:65:9e:dd:22:05:94:73:f7:97:00:78:e3:9a:
80:2e:ee:e9:b7:4e:e3:a9:85:a1:e3:af:d6:b8:e5:
07:d9:e7:4e:dd:45:c7:99:d2:35:c0:b0:19:d5:9c:
16:90:05:4b:82:14:a6:40:fc:71:6b:05:da:7a:2d:
93:15:cd:d3:e5:27:be:4d:a8:40:0c:e7:11:e6:2e:
a9:7c:e5:f3:78:69:a0:e1:5f:e9:dd:ce:55:24:17:
7a:97:8b:85:fd:83:b3:75:6c:63:b7:89:5f:5d:86:
7f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1D:03:8B:55:8D:08:09:3E:9F:4C:7F:BA:3B:43:16:21:31:EB:86
X509v3 Authority Key Identifier:
keyid:B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/tWybLjoECHnP0A_nTWl_sEZc8no.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/9B0Di1WNCAk-n0x_ujtDFiEx64Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.17.0/24
Signature Algorithm: sha256WithRSAEncryption
68:43:62:37:32:87:34:c6:5c:cc:cb:25:bb:12:c3:68:4e:96:
5c:40:a4:fc:cd:d9:5b:5c:2e:d7:a0:21:64:6b:ce:d8:38:70:
c9:9b:98:ba:bc:8c:0d:c2:ce:70:35:89:40:36:2a:c0:9a:8e:
9f:c9:ac:94:e6:e9:c1:68:28:c8:df:88:75:f0:57:2c:bb:8c:
97:62:f4:02:9a:6a:89:4e:3a:2f:4a:db:32:52:3d:ce:ae:12:
3f:90:d3:2f:93:7c:22:60:5a:54:1b:39:f6:d2:25:8e:c5:e1:
bb:4f:fa:1a:7b:4c:42:12:15:be:28:4b:e1:8f:e4:77:ff:e2:
8e:23:e3:b6:84:f4:68:d8:b8:45:26:22:11:27:9e:8e:61:d5:
bb:13:38:b6:e2:8f:71:0e:11:f3:f4:95:2c:53:83:db:22:29:
12:bd:73:66:01:df:71:b6:24:2b:a7:c3:3b:d2:06:64:ef:c8:
8f:19:35:5e:19:4f:02:b2:61:8e:ed:b9:20:b3:d0:41:36:ad:
f2:9b:86:04:96:ea:6d:25:29:b0:f6:41:72:0b:66:44:3d:81:
97:09:0d:3a:70:25:cc:30:69:b4:92:d2:c3:17:ae:52:5b:90:
a8:95:39:52:96:0a:b3:02:6f:23:21:75:cf:96:c5:f8:15:68:
36:34:ac:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:52 2024 by rpki-client on console-ams.rpki-client.org