Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/KSGPn4322plOjAugSj2ytPlUtEE.roa
File: KSGPn4322plOjAugSj2ytPlUtEE.roa (raw, json)
Hash identifier: 0INBLttt1+YhuP2saY/sKhPBPnmua1i/7QoV+BccK4U=
Subject key identifier: 29:21:8F:9F:8D:F6:DA:99:4E:8C:0B:A0:4A:3D:B2:B4:F9:54:B4:41
Certificate issuer: /CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Certificate serial: 0C2C
Authority key identifier: B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/KSGPn4322plOjAugSj2ytPlUtEE.roa
Signing time: Sun 07 Feb 2021 13:04:27 +0000
ROA not before: Sun 07 Feb 2021 13:04:27 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 138145
IP address blocks: 103.135.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3116 (0xc2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Validity
Not Before: Feb 7 13:04:27 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=29218F9F8DF6DA994E8C0BA04A3DB2B4F954B441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ab:f2:af:e7:d3:ef:b6:f0:1f:a6:5b:12:bc:
8a:93:36:6d:e2:20:e4:b9:1f:8c:19:e6:c2:1d:87:
12:6f:58:61:c9:0a:91:7e:5c:e1:32:8a:70:78:43:
b8:ee:a4:94:e7:d8:87:ef:bd:c9:b4:e2:1f:ed:e1:
77:f5:ad:fd:a1:c8:10:af:3b:3c:0e:b0:80:63:72:
bb:e2:2e:74:1b:e4:ba:6e:b2:f7:1c:f6:79:c0:f5:
ff:2e:b2:82:45:5d:7d:6a:b1:e3:43:8d:7f:9a:ba:
4a:75:4d:be:a9:cb:8d:f0:b9:cf:2a:fe:f4:73:db:
f7:81:54:b0:3f:26:c8:10:94:a7:bb:d5:ee:21:ab:
db:d3:94:b0:c1:11:7c:a9:b2:b0:0a:41:1b:bd:d0:
79:60:1e:16:b1:2e:52:9f:9e:07:a9:c6:00:18:90:
23:3f:fd:68:64:2a:c3:4c:48:8e:39:ba:d9:12:3f:
93:50:0f:7b:2e:f0:8b:29:1b:cb:93:c2:01:69:57:
f0:70:af:31:a8:16:83:41:cd:9b:2e:d8:69:69:16:
11:09:ea:e2:29:16:76:f0:1f:9c:8b:bb:e0:59:f7:
e3:84:72:66:a1:01:17:e9:03:b9:94:c6:3e:3b:11:
78:2e:78:57:d8:78:bc:86:b8:dd:49:41:18:77:a6:
22:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:21:8F:9F:8D:F6:DA:99:4E:8C:0B:A0:4A:3D:B2:B4:F9:54:B4:41
X509v3 Authority Key Identifier:
keyid:B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/tWybLjoECHnP0A_nTWl_sEZc8no.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/KSGPn4322plOjAugSj2ytPlUtEE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.19.0/24
Signature Algorithm: sha256WithRSAEncryption
47:66:5e:43:ad:fb:b6:2c:24:00:77:a1:72:73:86:69:49:9c:
7e:8d:da:c1:34:68:93:03:77:63:7f:15:d7:d0:ff:db:68:f5:
92:11:29:45:20:10:9a:de:0e:97:e5:3c:66:d6:a3:a3:56:77:
5b:42:57:8b:ed:33:3f:40:2d:52:18:97:2d:08:cc:ff:60:c9:
2b:ad:8f:47:a8:b8:0c:fe:d4:fb:80:5c:e4:b3:94:df:8f:53:
7a:26:d0:82:ee:9a:9e:3e:18:77:e6:e7:55:96:01:aa:ad:6c:
2b:8f:bc:60:95:df:86:4f:14:bb:06:b3:97:64:a3:53:6e:a4:
69:14:7c:8e:e1:37:be:d8:f7:5e:1f:36:61:d5:f2:8b:b0:5c:
fc:f4:50:68:4b:6d:88:d3:29:22:8c:83:54:bf:39:28:9c:e5:
a3:9c:42:4e:7c:b7:d9:76:54:68:41:eb:de:1f:69:99:e6:34:
fd:8b:31:d4:24:d5:ed:81:89:b7:91:56:c8:a6:b2:d9:c5:31:
15:21:59:e7:7f:ce:54:a2:f8:35:bb:98:b0:df:7e:c5:e2:4a:
50:0e:09:d8:42:86:f4:4b:91:ce:fa:83:92:23:06:3d:e2:05:
c1:fb:4b:c6:13:45:c3:51:8c:a8:48:06:28:38:8a:99:79:eb:
9d:fe:18:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org