Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/pLAVWCsQtU1AZdnXTV6MThIqPaQ.roa
File: pLAVWCsQtU1AZdnXTV6MThIqPaQ.roa (raw, json)
Hash identifier: U0Y6lNddNKACSvKwNAj0cHEHXpeZdguFJPsJshTfaek=
Subject key identifier: A4:B0:15:58:2B:10:B5:4D:40:65:D9:D7:4D:5E:8C:4E:12:2A:3D:A4
Certificate issuer: /CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Certificate serial: 0DB9
Authority key identifier: B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/pLAVWCsQtU1AZdnXTV6MThIqPaQ.roa
Signing time: Thu 15 Sep 2022 02:50:43 +0000
ROA not before: Thu 15 Sep 2022 02:50:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131662
IP address blocks: 103.135.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3513 (0xdb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Validity
Not Before: Sep 15 02:50:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A4B015582B10B54D4065D9D74D5E8C4E122A3DA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:81:4f:54:c5:7e:ae:eb:ff:87:7d:e7:3b:55:
d2:c9:18:78:46:af:ec:ca:f6:0e:e3:8a:c5:e6:7a:
b3:6c:dd:57:34:d1:af:a3:63:0e:95:87:e7:a8:3d:
d2:fb:88:ac:69:a8:98:3f:3d:2a:b1:a5:7f:e7:49:
2c:4d:71:bd:d3:08:a3:c5:b4:c2:a6:dd:91:f0:58:
f6:51:b6:8b:31:48:e8:ce:bf:5a:51:e2:1a:a2:3e:
02:ba:1f:4c:54:9c:85:92:b7:79:03:35:f3:72:d8:
16:5e:1b:5f:ce:d6:b0:b6:7b:49:be:90:0d:04:79:
a7:95:9d:90:b1:e9:73:e5:e8:9c:98:d2:c7:d4:1a:
31:8c:2e:43:36:6b:b1:35:a7:59:a7:52:58:0b:a9:
c5:9f:ab:e7:ad:09:01:c2:ef:93:85:98:7b:42:89:
71:9a:ee:8f:66:97:ff:0e:ab:a1:c7:82:db:79:1a:
7f:34:ed:fb:89:6b:90:b3:19:01:56:5f:70:1e:26:
98:89:59:df:f5:19:7c:70:4f:d7:5b:5f:1b:01:75:
23:5f:f9:37:a5:cd:c3:df:fc:cc:ca:1d:ea:52:ae:
ed:ef:cd:08:86:ac:19:30:55:0f:42:e9:b4:a0:59:
89:6e:30:11:c5:3b:76:f5:42:c6:40:ed:a0:4c:e1:
71:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B0:15:58:2B:10:B5:4D:40:65:D9:D7:4D:5E:8C:4E:12:2A:3D:A4
X509v3 Authority Key Identifier:
keyid:B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/tWybLjoECHnP0A_nTWl_sEZc8no.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/pLAVWCsQtU1AZdnXTV6MThIqPaQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.17.0/24
Signature Algorithm: sha256WithRSAEncryption
52:c2:9b:f2:e1:04:9f:9e:77:61:a9:65:f5:4b:4e:95:cd:fc:
68:a4:3b:f7:8c:98:15:cc:c8:9f:bb:25:b8:12:f8:d8:20:67:
5c:68:be:f5:c1:bd:0e:9e:2f:6d:4b:3d:84:01:0d:d2:62:b6:
49:c5:fa:cc:e7:56:5b:5c:53:47:ba:01:71:f9:21:34:94:7b:
bb:94:b9:60:67:37:45:57:fc:22:33:9e:27:2c:64:80:e6:51:
1d:70:47:36:dd:96:88:47:52:68:8a:63:35:99:ca:22:5d:41:
37:e5:46:dc:b9:b2:56:82:94:12:80:73:be:42:1d:16:ae:19:
ad:a0:c6:63:f5:73:3d:4b:af:f2:b1:11:7f:07:f9:1a:08:3c:
83:2a:08:ac:77:1d:6f:49:6f:17:0d:15:bb:47:03:84:40:cc:
6f:e0:eb:2a:16:64:ca:4c:3e:9a:93:0c:ec:e7:72:f7:9c:d0:
12:b6:17:b5:c5:59:dd:66:37:3c:58:9e:27:e2:dc:46:17:40:
67:c7:5e:97:20:b7:e5:77:cd:91:a0:20:d5:1d:ae:be:f7:80:
b1:a4:1e:d1:f6:e9:75:83:74:d3:0a:0c:89:21:02:1e:a0:9a:
77:bf:bb:5f:af:5d:43:be:62:ee:39:67:e5:61:63:2b:a6:a6:
98:84:1a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:52 2024 by rpki-client on console-ams.rpki-client.org