Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/crf13_Z-0XITGEXBlt5cHvTmfc4.roa
File: crf13_Z-0XITGEXBlt5cHvTmfc4.roa (raw, json)
Hash identifier: SPOVHAtPj+0yBUdFzaTizG7ouvqoVCfV8qM82o7utVM=
Subject key identifier: 72:B7:F5:DF:F6:7E:D1:72:13:18:45:C1:96:DE:5C:1E:F4:E6:7D:CE
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 12C1
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/crf13_Z-0XITGEXBlt5cHvTmfc4.roa
Signing time: Fri 01 Sep 2023 08:04:57 +0000
ROA not before: Fri 01 Sep 2023 08:04:57 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131591
IP address blocks: 103.231.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4801 (0x12c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:57 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=72B7F5DFF67ED172131845C196DE5C1EF4E67DCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:01:a1:ce:94:b4:13:7f:6f:37:c4:d6:d0:55:
02:9e:37:00:ce:23:69:6d:1a:ba:7b:73:90:8d:50:
14:74:e6:ce:da:1d:b3:db:eb:60:5f:f5:fb:42:cc:
4f:58:e9:f5:ab:b4:1e:f3:bf:a9:9b:d7:c7:3b:a1:
25:b5:b7:d8:82:8f:f1:60:8e:68:9f:a4:3e:79:4c:
52:8c:40:8f:ca:39:f4:43:bd:fe:96:5b:aa:0d:ad:
c5:06:a7:90:28:92:84:13:b2:6c:dc:75:10:ba:6b:
20:82:a2:37:7e:35:e6:dd:a6:99:1c:3f:70:12:b8:
10:dd:4d:60:a6:da:f9:90:1b:19:2d:2b:fb:e1:12:
f8:a5:26:cb:31:1b:30:94:f3:56:40:df:ce:a6:d0:
7f:ae:ea:26:f6:2e:9a:25:9e:90:be:72:f6:c6:43:
1c:4d:38:bb:22:4e:1e:56:9f:e5:47:47:2c:b5:6d:
9d:98:b9:f6:e8:a5:19:53:a0:9d:fe:c0:78:5d:4b:
7a:99:a5:62:22:48:b4:f7:9f:35:20:8d:04:a6:77:
d9:e8:66:04:ce:d3:f5:2c:13:b9:02:6f:7d:10:4e:
9e:85:3f:bb:f9:7e:86:ed:d0:34:d4:e1:96:2e:da:
de:9a:0e:8e:a3:42:e8:73:ae:ea:42:6f:57:34:a1:
70:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B7:F5:DF:F6:7E:D1:72:13:18:45:C1:96:DE:5C:1E:F4:E6:7D:CE
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/crf13_Z-0XITGEXBlt5cHvTmfc4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.231.50.0/24
Signature Algorithm: sha256WithRSAEncryption
64:22:1a:98:92:64:c9:4e:24:aa:b3:49:2c:8e:cf:e2:12:4c:
96:99:e4:ea:53:bd:3e:68:46:f9:81:0f:bb:d5:4b:ab:c4:ff:
fa:8a:7d:ac:c0:ec:6b:b8:43:a7:40:9e:0b:62:c5:fd:45:2d:
d2:e3:b7:71:39:31:21:0e:c2:af:4f:a2:89:62:ac:17:06:d3:
ae:96:bc:a2:d1:70:26:20:a2:e8:0c:4c:7d:bd:d0:50:89:20:
63:b4:ef:69:33:cc:11:99:df:38:9b:eb:78:1d:33:31:58:67:
f1:f5:f1:91:93:26:81:10:c5:96:f4:71:3e:19:38:e1:96:e7:
5e:3d:1b:3c:42:28:a4:b9:a1:02:8a:94:d1:7c:9c:88:87:1f:
74:7b:e7:6d:4f:43:5b:78:a6:1c:58:a2:4c:b4:13:66:9a:5c:
8d:7c:4c:73:38:79:28:ed:b2:11:68:71:ae:c9:db:7e:a0:7c:
f0:16:84:94:89:96:bb:d3:7f:e4:3f:96:27:12:64:5b:c8:af:
b7:83:64:fc:c0:76:d1:d8:9a:e2:74:0e:68:a9:c2:d0:2e:75:
7e:50:a7:f9:70:05:18:8a:fa:e8:68:42:12:50:f3:25:1e:99:
c6:15:62:83:06:14:79:08:cf:26:8e:e8:20:e2:6f:32:04:92:
cd:9e:72:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org