Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CKMATES/6tDxiVWy4AEe8_er2befsZgkapg.roa
File: 6tDxiVWy4AEe8_er2befsZgkapg.roa (raw, json)
Hash identifier: s9weXt1HVlnJDzn0NEQK21M83ERLXhF2fyAah5LNpDc=
Subject key identifier: EA:D0:F1:89:55:B2:E0:01:1E:F3:F7:AB:D9:B7:9F:B1:98:24:6A:98
Certificate issuer: /CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Certificate serial: 0AFE
Authority key identifier: 5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/6tDxiVWy4AEe8_er2befsZgkapg.roa
Signing time: Fri 01 Sep 2023 08:30:45 +0000
ROA not before: Fri 01 Sep 2023 08:30:45 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 14618
IP address blocks: 103.119.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2814 (0xafe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Validity
Not Before: Sep 1 08:30:45 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=EAD0F18955B2E0011EF3F7ABD9B79FB198246A98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:26:9f:c0:1e:c7:00:40:a8:93:7a:e2:dc:
b6:c3:f2:9c:7a:49:ea:ab:22:74:8b:af:b5:2d:82:
c1:13:06:4d:7a:b6:ad:8f:90:97:9b:e7:e5:d0:8f:
b0:6a:b5:7c:49:96:cb:d6:3e:8b:b2:71:e3:b7:dc:
66:8e:25:96:13:85:6b:b1:3f:c3:8b:c4:46:1c:13:
f1:86:45:ad:bc:72:ba:2c:e4:bd:4c:7b:f3:4e:dc:
04:54:1c:2f:e5:10:9e:e3:0f:87:5a:4a:cd:62:5c:
be:89:55:12:7e:44:f8:84:16:54:03:73:1b:1f:5d:
6f:81:a3:fb:ed:8e:57:57:a8:32:3a:d3:78:45:a0:
8d:3e:63:1d:dc:21:ca:c7:65:27:92:43:2a:5f:9c:
7f:14:73:cf:fc:d8:c7:f4:70:f0:2d:94:f6:08:44:
2b:37:20:e9:f7:aa:50:8f:f5:e6:37:6d:90:74:80:
d1:d8:7c:24:44:6e:13:c1:25:ec:c5:01:7d:9b:15:
ff:a7:97:df:56:bd:ae:77:99:9b:72:b3:da:83:15:
d0:f8:58:5a:c8:28:73:0a:f7:7b:69:ea:7c:f5:14:
f1:5b:c9:ec:32:80:df:b6:c2:15:11:0c:23:7c:da:
2a:4f:09:0a:45:50:02:a7:08:5c:e8:48:03:15:a7:
11:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D0:F1:89:55:B2:E0:01:1E:F3:F7:AB:D9:B7:9F:B1:98:24:6A:98
X509v3 Authority Key Identifier:
keyid:5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/6tDxiVWy4AEe8_er2befsZgkapg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.213.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:33:7b:1c:39:b1:bd:af:07:1c:08:fa:db:0c:c7:d8:c9:1b:
14:0e:94:1d:03:93:4b:d5:e9:57:bb:5a:af:e0:8e:79:cb:2d:
69:b9:78:b6:d5:0a:c2:72:ae:17:2b:a7:02:20:85:eb:a8:48:
29:3b:87:58:39:86:46:82:dd:7b:67:00:2a:94:0a:1b:09:03:
d0:28:7a:9d:74:26:fd:83:90:9b:ee:2c:52:7e:3b:6b:92:2d:
7c:b9:82:75:ea:a1:48:ba:0f:85:e4:11:fa:d2:93:c2:db:c2:
21:62:bf:52:c0:a5:01:eb:1c:dd:a2:7a:32:cc:0a:b2:24:12:
5f:b7:46:5e:d9:71:43:bf:c6:25:9f:58:ab:c9:f8:b3:d4:53:
1c:e8:ae:7d:99:3d:51:5a:0f:76:e2:58:ab:5b:56:17:17:52:
be:92:c8:66:69:5b:40:f8:36:68:ca:36:b1:fb:a6:39:e8:4c:
8e:dd:4d:18:1e:8d:3c:58:cd:c9:39:d1:fa:34:71:b6:f2:20:
be:5b:39:2a:06:56:69:a1:41:20:a6:2a:3c:85:1d:ae:2b:f0:
ef:bb:f6:56:1a:b1:49:d9:e8:dd:50:59:66:19:9f:2b:2b:6b:
65:05:84:76:35:1d:3b:5c:3a:dc:71:62:cf:a9:42:b5:d4:6a:
f7:0a:a9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:11 2024 by rpki-client on console-ams.rpki-client.org