Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/h53hop0b1SYHFO4YaHK1BAz5Dss.roa
File: h53hop0b1SYHFO4YaHK1BAz5Dss.roa (raw, json)
Hash identifier: pNq2YbuLYEtdQ+pNFVwI72SGAZ07EMZkPY7b3Znnjsg=
Subject key identifier: 87:9D:E1:A2:9D:1B:D5:26:07:14:EE:18:68:72:B5:04:0C:F9:0E:CB
Certificate issuer: /CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Certificate serial: 0CCD
Authority key identifier: B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/h53hop0b1SYHFO4YaHK1BAz5Dss.roa
Signing time: Wed 29 Sep 2021 02:53:03 +0000
ROA not before: Wed 29 Sep 2021 02:53:03 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131662
IP address blocks: 103.135.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3277 (0xccd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Validity
Not Before: Sep 29 02:53:03 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=879DE1A29D1BD5260714EE186872B5040CF90ECB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:78:4c:f7:b5:53:05:9c:16:98:0d:1e:ba:
6f:df:b9:7a:cb:ca:a0:6d:25:1f:31:71:1d:86:16:
a7:5c:82:f0:e0:05:d0:84:f8:84:c4:7b:12:9b:b4:
dd:68:c2:b2:54:04:84:a1:36:a9:f2:2c:d4:65:fd:
d1:1d:06:d7:69:a6:2a:93:e3:a2:05:f0:6a:13:18:
65:b5:67:2d:43:8f:32:f6:73:86:a3:0f:02:b4:66:
51:18:c1:94:5d:b2:90:b7:fa:75:eb:fd:60:91:59:
c1:50:e2:49:22:a8:1e:e7:04:f0:da:b2:66:fd:e5:
c2:d8:19:86:9b:4e:d8:fd:74:19:18:d9:36:b0:4b:
69:b7:4c:9f:14:77:2f:11:76:fa:45:5b:ba:fd:6e:
3a:18:f1:9a:53:a4:5d:96:f7:c0:49:35:98:7e:99:
70:46:ba:eb:16:89:4e:12:48:4d:e6:74:99:cc:35:
66:90:33:5e:65:d2:59:fc:a2:ad:f3:ee:01:fc:66:
68:52:7a:c2:95:3f:c7:08:c3:20:0b:fc:aa:ee:04:
26:d6:94:90:f6:dc:cb:ac:f6:4f:d7:9d:26:38:6c:
bb:f0:71:48:d1:34:f2:eb:57:8b:20:5b:e7:bc:42:
a3:5d:17:42:ad:66:0b:0a:97:4f:ca:a4:7b:81:55:
77:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9D:E1:A2:9D:1B:D5:26:07:14:EE:18:68:72:B5:04:0C:F9:0E:CB
X509v3 Authority Key Identifier:
keyid:B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/tWybLjoECHnP0A_nTWl_sEZc8no.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/h53hop0b1SYHFO4YaHK1BAz5Dss.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.17.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:bd:de:0e:9d:14:c5:ee:ef:f5:ac:fc:76:85:fa:fe:47:01:
76:37:9e:b0:58:3b:0c:dd:45:19:7b:7f:fb:f3:29:d4:08:39:
7c:61:1c:6a:10:b3:ae:7d:33:df:1b:96:3c:c2:a3:aa:49:63:
c3:1a:61:10:9f:b1:22:3d:c4:f2:bc:92:f3:d5:56:ce:b0:00:
c2:a5:8f:ca:07:af:49:f1:81:6d:0b:c9:7a:7a:eb:81:02:54:
04:35:99:2b:f1:fe:31:62:ea:24:3a:a4:b2:2c:17:01:9f:42:
22:88:14:14:5c:21:d7:cd:1e:41:bd:2f:55:08:82:b6:e1:34:
48:fc:fe:4a:7c:62:1c:49:3f:39:e2:5b:d3:82:51:52:70:ac:
2f:23:fb:dc:ea:58:71:41:54:23:94:f6:37:db:90:6c:c0:83:
02:4f:ef:36:03:42:33:9f:7d:ba:3b:cc:56:e5:fb:70:b2:6d:
df:f3:60:9a:13:66:da:0b:26:65:d7:e5:4b:b4:74:96:07:2c:
76:af:6c:94:35:c2:04:07:54:2c:c9:92:68:e9:76:4b:47:65:
53:c7:67:ff:ab:f2:c6:5e:8b:6a:6f:d4:27:a8:be:60:af:fb:
7e:42:60:26:85:37:c6:d9:81:0d:6b:6f:ad:c4:c1:a7:ce:d7:
6d:fe:37:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:52 2024 by rpki-client on console-ams.rpki-client.org