Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/59XyCGrCTtXDez2GnV5O09gFMuw.roa
File: 59XyCGrCTtXDez2GnV5O09gFMuw.roa (raw, json)
Hash identifier: kaPchAB3lLShO+142ImIxYLl0Aqhzhwq/UlNO/fZRTU=
Subject key identifier: E7:D5:F2:08:6A:C2:4E:D5:C3:7B:3D:86:9D:5E:4E:D3:D8:05:32:EC
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 12D4
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/59XyCGrCTtXDez2GnV5O09gFMuw.roa
Signing time: Fri 01 Sep 2023 08:05:03 +0000
ROA not before: Fri 01 Sep 2023 08:05:03 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131591
IP address blocks: 103.231.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4820 (0x12d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:05:03 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E7D5F2086AC24ED5C37B3D869D5E4ED3D80532EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fc:3a:a6:e5:1d:e8:6b:ea:94:c4:03:3f:88:
2f:c9:9f:1f:08:05:85:bf:32:fe:da:a4:6b:28:4e:
62:03:66:ce:20:ed:8a:05:f0:90:97:7c:ff:60:29:
e7:a1:c3:4b:52:14:c1:08:23:43:a7:9e:02:8b:27:
49:0c:34:c0:97:0d:a1:18:d1:d7:4f:10:cb:42:a6:
92:ec:54:b7:e8:8c:81:19:3b:35:e3:a8:66:3f:fc:
a0:e9:5d:4a:c9:99:98:87:b3:8e:a6:9f:7a:c2:b5:
bd:31:b2:3d:f3:7d:50:44:3d:6c:29:9a:f1:bf:3a:
94:a5:86:7a:81:5c:cf:cf:14:20:1f:27:5b:af:63:
15:80:f7:c9:db:6a:05:ae:51:d8:95:0e:86:61:35:
0f:62:c0:3c:f2:df:52:8e:60:53:77:62:03:09:2d:
5b:0c:1e:c4:25:23:d2:01:bb:c3:47:a9:72:b3:f3:
a5:4b:29:b5:a4:60:6c:6c:94:23:df:9b:2d:68:d4:
45:c9:c6:8a:2b:a0:5f:12:c0:b7:42:ba:35:34:6e:
45:6e:21:e8:22:61:11:fa:17:da:4b:e7:71:ce:a5:
cd:73:b4:62:cf:14:fd:21:27:7f:95:93:ee:c9:ac:
63:61:bd:b4:e3:71:a3:09:c3:66:f5:bd:86:37:db:
f9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D5:F2:08:6A:C2:4E:D5:C3:7B:3D:86:9D:5E:4E:D3:D8:05:32:EC
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/59XyCGrCTtXDez2GnV5O09gFMuw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.231.48.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:78:b5:6d:9e:40:e3:b9:f7:90:c2:80:3c:48:18:2a:c0:85:
a3:34:e6:f5:7b:6f:6f:33:90:0e:3e:f6:50:2d:cd:f4:59:9d:
d2:66:bc:be:31:d4:4d:d2:56:f1:0c:64:12:41:6a:48:27:d3:
31:59:ec:0d:2c:3c:34:b2:a1:79:85:68:2a:10:29:5a:31:e2:
cb:68:27:db:b2:a8:67:70:95:76:0b:3a:f4:b4:1d:31:7d:37:
27:00:b9:66:20:35:19:f3:7b:c3:d4:1f:f2:5e:a9:8d:a3:7b:
2f:cb:26:5b:55:2d:ee:7f:bd:df:dd:23:a8:b7:39:72:99:08:
5e:ea:97:b1:fd:96:e0:7c:c1:49:8e:0b:a0:27:1e:c9:9b:b8:
b3:be:d8:fb:95:57:f2:c3:bd:83:d0:91:4d:a3:66:9d:e3:36:
95:4a:c5:55:a1:fe:a5:cb:70:8d:50:8d:8c:17:1e:8b:8a:c4:
7f:da:2d:8d:72:75:02:16:c3:ac:2e:36:cd:34:20:b6:61:3b:
b2:4a:2c:89:3d:8d:00:8d:a8:42:89:4b:f0:30:00:0a:37:4e:
4e:44:b5:96:a1:cc:28:20:95:82:63:09:f6:dc:b2:c9:3c:a6:
bd:10:4d:05:3d:d8:ce:2a:53:bf:7a:54:0e:39:6b:4c:1d:95:
cf:2d:e1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:59 2024 by rpki-client on console-ams.rpki-client.org