Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/8JfdSLmzCFShQfo1q4OS7ldEaLM.roa
File: 8JfdSLmzCFShQfo1q4OS7ldEaLM.roa (raw, json)
Hash identifier: 8emP7KSU0JGD5mIh/oFqFyVek+9AQFynhFNpYvy5/Qc=
Subject key identifier: F0:97:DD:48:B9:B3:08:54:A1:41:FA:35:AB:83:92:EE:57:44:68:B3
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0E4A
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/8JfdSLmzCFShQfo1q4OS7ldEaLM.roa
Signing time: Wed 29 Sep 2021 02:40:11 +0000
ROA not before: Wed 29 Sep 2021 02:40:11 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 1131591
IP address blocks: 103.231.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3658 (0xe4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:40:11 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=F097DD48B9B30854A141FA35AB8392EE574468B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d3:07:40:63:93:79:9e:9c:2e:0c:73:77:45:
f5:dd:f6:e7:13:f3:f2:d0:a1:00:cc:a1:e1:61:84:
9c:4b:27:7f:c6:51:57:1d:d4:0f:2a:48:e5:7e:fe:
3c:cf:4e:54:6f:23:1a:b9:f9:50:3d:48:0d:a4:fd:
8a:52:25:58:b3:61:10:ef:ec:c3:ce:5f:2f:e1:d0:
3a:52:c6:b5:60:06:fe:8d:b8:51:31:2b:7b:44:8e:
26:53:f0:18:44:5c:8a:50:b0:05:34:86:8a:da:22:
6c:d0:60:1a:5a:1b:02:72:f0:82:a4:05:e4:d8:c9:
5b:3c:e3:5f:0a:22:ce:20:a6:ac:d7:d4:1d:11:d2:
68:db:37:1a:8f:42:c4:ff:ce:7b:ca:b2:0d:9e:75:
c9:f4:68:bd:84:c8:80:b2:73:4d:d2:35:9a:5d:b5:
6f:45:e8:8e:df:72:85:6d:15:96:e9:15:2f:d7:d3:
61:3d:18:1c:3b:96:07:e0:a9:1d:cf:fc:77:22:08:
97:8c:46:1d:ee:ce:60:cf:ef:87:f4:71:f2:86:3f:
5f:67:e6:dd:fe:0c:2d:1a:09:5c:59:eb:90:21:2d:
c4:d2:2d:ed:ec:b1:5e:e4:52:a5:ff:40:4d:0d:b4:
65:1a:af:b4:f1:6b:8d:45:61:b1:a5:9e:ab:40:38:
ac:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:97:DD:48:B9:B3:08:54:A1:41:FA:35:AB:83:92:EE:57:44:68:B3
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/8JfdSLmzCFShQfo1q4OS7ldEaLM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.231.51.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:84:b7:7f:bf:a0:ff:bd:bf:72:b0:c2:24:a8:39:9a:1b:86:
03:9b:63:62:e4:a8:7e:9c:5e:22:86:8b:e4:d1:32:3a:27:26:
a8:45:4d:1e:df:a5:52:2a:ad:fb:ee:d6:ee:f6:4e:61:21:99:
14:c2:89:69:44:40:30:89:8d:52:65:32:6b:d7:5e:0b:b5:0b:
18:a4:0a:8a:49:18:22:b7:0f:5b:b4:1b:1a:1d:72:52:23:3b:
ea:e9:b9:4a:45:0d:97:ee:cc:d4:4c:b0:d9:02:33:7a:9e:07:
e0:54:3e:78:9b:3f:01:e4:2f:e9:79:00:8a:fb:f3:4d:9d:bb:
e1:14:49:67:58:19:a6:0b:20:69:f9:31:b7:e3:e8:9b:5c:b0:
1c:d7:ea:3e:f2:33:05:95:b3:0d:88:e6:e3:03:2a:7f:36:e1:
1f:ed:86:18:be:9f:4d:ad:e7:a2:10:68:9e:d0:70:cc:12:20:
c8:a3:f1:ef:62:5c:fc:13:a0:4e:c9:a7:50:e1:d1:55:f2:69:
b7:eb:c0:a6:53:a3:65:16:2e:b4:e9:15:5c:66:3d:18:3f:02:
d6:4b:39:9f:89:d6:de:3d:e0:3d:57:d1:72:d6:8e:8e:d3:84:
74:eb:3b:14:c9:92:c8:fb:95:f8:37:2d:62:0b:e1:e2:2e:f5:
62:f9:2c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org