Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/Chd6VPUp4NP9vLYSbPyiWKUrAaI.roa
File: Chd6VPUp4NP9vLYSbPyiWKUrAaI.roa (raw, json)
Hash identifier: R/EDQ/kJ/v0dnwakN7dY6jkXMQRahQbpPVAGNfeaZHk=
Subject key identifier: 0A:17:7A:54:F5:29:E0:D3:FD:BC:B6:12:6C:FC:A2:58:A5:2B:01:A2
Certificate issuer: /CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Certificate serial: 0C28
Authority key identifier: B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/Chd6VPUp4NP9vLYSbPyiWKUrAaI.roa
Signing time: Sun 07 Feb 2021 13:03:43 +0000
ROA not before: Sun 07 Feb 2021 13:03:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131662
IP address blocks: 103.135.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3112 (0xc28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Validity
Not Before: Feb 7 13:03:43 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0A177A54F529E0D3FDBCB6126CFCA258A52B01A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:28:a0:db:0c:c7:a1:b8:06:49:36:21:66:
68:97:6b:a8:82:1e:4b:10:f9:9f:c8:b5:65:47:15:
59:34:99:13:34:79:55:87:a6:8b:ed:3a:90:35:ef:
c8:74:38:9b:f6:76:66:df:d2:74:10:64:8b:2b:16:
65:a7:89:01:dd:d6:54:b5:c1:31:63:43:76:9c:c2:
d6:26:f4:0a:ba:65:ba:0c:91:cd:af:30:f4:29:cd:
e0:9c:75:72:4f:60:54:7b:1d:bc:30:b4:44:77:22:
66:83:7c:77:bd:57:fa:6d:81:15:4d:5d:f8:5f:b1:
37:fc:0e:cb:ed:c8:8f:cb:38:62:63:07:24:24:37:
59:42:b0:3d:ff:83:91:e1:d8:69:20:ff:93:be:e5:
d3:50:b3:27:2a:87:4e:ee:fb:2a:c9:a2:2b:3e:12:
da:61:60:f7:48:68:fe:d7:0f:c1:ab:df:e6:25:5b:
be:c9:66:39:3c:02:b5:72:5e:e0:8b:2a:56:87:fb:
be:a1:84:4a:33:32:b5:50:e3:71:e7:fa:5c:5b:eb:
7c:7a:36:40:f9:af:6d:9b:24:72:35:b9:32:a6:ae:
34:4a:88:27:79:ee:9d:5b:13:72:11:58:5f:04:7e:
6f:5e:a2:ff:95:dd:51:be:3b:03:08:a9:72:d4:44:
73:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:17:7A:54:F5:29:E0:D3:FD:BC:B6:12:6C:FC:A2:58:A5:2B:01:A2
X509v3 Authority Key Identifier:
keyid:B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/tWybLjoECHnP0A_nTWl_sEZc8no.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/Chd6VPUp4NP9vLYSbPyiWKUrAaI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.18.0/24
Signature Algorithm: sha256WithRSAEncryption
58:45:c5:95:07:9f:7e:49:cb:7d:cc:d1:15:83:09:fb:d0:b0:
28:fe:b3:c0:d4:d3:f8:c8:8f:b9:c5:00:15:99:ea:3c:ce:51:
63:ec:2e:29:9a:a1:bc:15:7c:f3:f8:ec:64:c2:70:73:b5:51:
e5:32:a6:be:01:f4:d0:71:1e:45:51:54:42:9e:1c:c3:fc:81:
f4:c1:dd:d9:cf:b6:c3:03:9a:ac:cf:6d:5c:7f:0b:16:95:b1:
e8:50:0f:98:0e:da:b9:95:91:38:00:b2:20:33:e3:36:39:00:
93:39:74:7c:87:b4:cb:7f:a1:c7:8d:88:0c:98:5c:e7:59:50:
7c:ce:38:24:b8:94:a2:82:28:65:fb:b2:ce:d9:e8:b2:fd:af:
9d:6e:5f:a8:a3:5f:b2:78:b7:ec:6f:93:03:ce:d2:36:0f:8b:
2a:9c:a3:59:9a:6c:91:4c:f1:94:6d:b5:40:da:75:3c:23:aa:
08:60:35:f1:0a:18:66:14:e8:b2:00:78:d9:a4:60:27:12:0a:
8f:1f:3c:9e:68:ce:96:e3:4d:7a:62:96:6e:a7:60:2b:88:b8:
91:57:38:10:49:0c:6c:45:4c:cf:e7:4b:2d:6b:46:8f:80:f5:
c4:a3:a4:df:87:93:c3:1a:47:b6:c4:53:ce:9f:ac:1d:7c:75:
c4:3d:55:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org