Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/X-SXcLQXPd68SY9biOI3ogI6sew.roa
File: X-SXcLQXPd68SY9biOI3ogI6sew.roa (raw, json)
Hash identifier: 420I5gddWFHLEKyBI/WrMqJ25P7VcUFYY2Uea/KtwZ8=
Subject key identifier: 5F:E4:97:70:B4:17:3D:DE:BC:49:8F:5B:88:E2:37:A2:02:3A:B1:EC
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1287
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/X-SXcLQXPd68SY9biOI3ogI6sew.roa
Signing time: Fri 01 Sep 2023 08:04:35 +0000
ROA not before: Fri 01 Sep 2023 08:04:35 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 1131591
IP address blocks: 103.231.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4743 (0x1287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:35 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5FE49770B4173DDEBC498F5B88E237A2023AB1EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c1:44:0a:59:d8:7d:14:34:50:9e:bb:dd:56:
07:0b:ba:8e:53:b3:1f:c8:05:da:9c:c2:aa:1d:46:
34:a8:b8:98:21:66:49:5f:10:f7:39:19:50:af:f4:
32:83:b5:5d:43:a8:63:eb:4f:c2:58:f8:52:f7:29:
64:ce:bd:21:8a:14:8c:66:70:d3:01:0f:4c:d4:9f:
3e:74:59:23:88:f6:b3:88:65:d2:a3:9a:97:e5:2d:
7b:69:29:65:63:03:ae:58:30:99:46:b3:03:d5:15:
24:db:93:de:e6:29:a6:2c:b0:84:a1:29:48:f0:63:
e5:1c:53:90:db:33:d4:b8:87:02:dc:63:bc:a2:e5:
f9:21:4a:f7:3e:12:e1:b6:a6:5a:8f:73:55:b1:82:
64:06:a9:a0:8d:2a:39:8f:0d:41:9c:9a:e3:d6:ad:
3e:f8:cb:bc:0a:9e:eb:d6:f9:ba:d4:c6:a9:1c:09:
2e:7a:a7:1e:e5:0a:70:a3:f1:81:f0:a0:d8:34:c4:
af:4c:85:45:02:c2:af:8f:5f:85:ba:74:d2:65:73:
0d:f5:2a:3d:c7:25:d6:0d:db:9e:e5:4b:64:3d:ae:
05:a3:c2:77:6c:39:76:89:73:29:83:d9:f5:1e:cf:
87:71:c9:68:2c:51:4c:3a:77:ef:8e:d2:86:db:3a:
8c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E4:97:70:B4:17:3D:DE:BC:49:8F:5B:88:E2:37:A2:02:3A:B1:EC
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/X-SXcLQXPd68SY9biOI3ogI6sew.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.231.51.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:b7:b3:a0:b5:f7:08:52:2e:22:60:59:05:00:5a:27:03:e2:
24:2f:27:68:bf:87:3b:a7:d7:d7:54:7f:8f:61:ba:60:9b:39:
3c:88:03:e6:13:31:f7:64:52:d1:e4:c8:59:2b:b1:47:8e:5b:
31:14:92:6a:c8:56:b3:9e:e2:56:0d:15:56:52:b2:20:7e:d5:
09:d1:8b:cf:b6:a8:17:28:09:0d:bf:3a:80:26:e1:bb:42:bc:
72:04:49:38:98:44:f1:6d:70:f9:24:50:99:8e:ae:15:84:f9:
57:89:61:7c:3f:13:f0:bc:9d:76:9e:8a:9a:31:11:5a:2b:2a:
27:42:58:6b:6b:eb:3e:40:17:1e:ad:0b:35:9d:5d:21:cb:26:
df:74:4d:6c:bb:76:28:77:f1:6a:02:0a:f3:15:22:7a:81:f5:
d2:27:9f:eb:c2:bb:4c:6f:4c:dc:92:bf:3c:c2:a6:97:d3:1e:
a0:2c:c6:b0:e7:0f:20:6f:01:33:07:f3:01:b4:72:2d:30:b5:
ca:01:e1:86:be:3e:8b:05:92:db:99:bd:34:28:09:1d:0c:14:
bc:67:b0:d5:59:7d:7f:50:45:16:92:61:73:68:4c:6d:59:5c:
af:60:28:02:e0:0a:5b:d9:bd:a3:24:d8:f6:e3:ac:9d:95:bd:
f0:5d:54:a5
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEocwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA5MDEw
ODA0MzVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDVGRTQ5NzcwQjQxNzNE
REVCQzQ5OEY1Qjg4RTIzN0EyMDIzQUIxRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdwUQKWdh9FDRQnrvdVgcLuo5Tsx/IBdqcwqodRjSouJghZklf
EPc5GVCv9DKDtV1DqGPrT8JY+FL3KWTOvSGKFIxmcNMBD0zUnz50WSOI9rOIZdKj
mpflLXtpKWVjA65YMJlGswPVFSTbk97mKaYssIShKUjwY+UcU5DbM9S4hwLcY7yi
5fkhSvc+EuG2plqPc1WxgmQGqaCNKjmPDUGcmuPWrT74y7wKnuvW+brUxqkcCS56
px7lCnCj8YHwoNg0xK9MhUUCwq+PX4W6dNJlcw31Kj3HJdYN257lS2Q9rgWjwnds
OXaJcymD2fUez4dxyWgsUUw6d++O0obbOozxAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUX+SXcLQXPd68SY9biOI3ogI6sewwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvWC1TWGNMUVhQZDY4U1k5YmlPSTNv
Z0k2c2V3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfnMzAN
BgkqhkiG9w0BAQsFAAOCAQEApLezoLX3CFIuImBZBQBaJwPiJC8naL+HO6fX11R/
j2G6YJs5PIgD5hMx92RS0eTIWSuxR45bMRSSashWs57iVg0VVlKyIH7VCdGLz7ao
FygJDb86gCbhu0K8cgRJOJhE8W1w+SRQmY6uFYT5V4lhfD8T8Lyddp6KmjERWisq
J0JYa2vrPkAXHq0LNZ1dIcsm33RNbLt2KHfxagIK8xUieoH10ief68K7TG9M3JK/
PMKml9MeoCzGsOcPIG8BMwfzAbRyLTC1ygHhhr4+iwWS25m9NCgJHQwUvGew1Vl9
f1BFFpJhc2hMbVlcr2AoAuAKW9m9oyTY9uOsnZW98F1UpQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org