Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CKMATES/i_0BXhjPVofNeCiZEcYu58IS6g8.roa
File: i_0BXhjPVofNeCiZEcYu58IS6g8.roa (raw, json)
Hash identifier: 7b1wqh9RqfrAJHUWtQAb6KWXixStnqYyzkz9OMMfH2c=
Subject key identifier: 8B:FD:01:5E:18:CF:56:87:CD:78:28:99:11:C6:2E:E7:C2:12:EA:0F
Certificate issuer: /CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Certificate serial: 0AFD
Authority key identifier: 5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/i_0BXhjPVofNeCiZEcYu58IS6g8.roa
Signing time: Fri 01 Sep 2023 08:30:45 +0000
ROA not before: Fri 01 Sep 2023 08:30:45 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 16509
IP address blocks: 103.119.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2813 (0xafd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Validity
Not Before: Sep 1 08:30:45 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8BFD015E18CF5687CD78289911C62EE7C212EA0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:5c:af:79:72:8d:88:4f:8a:4c:5c:c1:12:
21:49:cb:ae:a0:31:1e:7e:7c:e0:13:96:b5:74:56:
0f:75:e8:41:cd:27:0e:f7:7b:67:c7:0a:95:a1:15:
22:13:e1:58:42:34:aa:e5:46:95:d9:5d:e4:f5:4a:
6c:31:ad:37:b9:3f:ad:67:bd:a6:cd:91:48:8a:d9:
b9:de:dc:53:a2:e8:a3:e2:d7:5b:fa:25:53:3e:dc:
0b:14:29:a7:01:e1:d7:e0:87:29:49:33:af:77:6d:
e6:fd:db:c6:29:b2:1c:d7:c5:61:00:23:17:07:2b:
44:2c:fd:30:8c:9e:9a:ed:13:5e:f6:a8:fc:09:ad:
7d:41:65:ed:5d:9e:ce:b9:9f:80:80:a0:70:60:fc:
7c:6e:08:25:93:d9:9f:99:93:e5:38:28:71:3e:13:
13:1c:8e:b9:dd:e6:71:7b:20:f9:84:7c:e5:34:7c:
ed:e1:99:f5:90:30:35:f4:1e:43:d4:8f:cd:e3:62:
a0:d2:18:be:a5:50:07:90:35:8a:e2:d0:04:e9:89:
c5:81:af:67:75:f1:80:07:17:ab:ae:9e:46:40:4f:
01:60:c6:5c:14:83:1e:3b:a7:70:44:77:5b:bc:e4:
7d:b0:6d:73:ac:88:fc:9d:74:1f:c4:7f:fc:69:25:
15:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FD:01:5E:18:CF:56:87:CD:78:28:99:11:C6:2E:E7:C2:12:EA:0F
X509v3 Authority Key Identifier:
keyid:5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/i_0BXhjPVofNeCiZEcYu58IS6g8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.213.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:6a:3e:34:d4:92:e2:26:70:bf:bf:64:7b:44:e6:2c:23:09:
f5:7d:b6:6d:5d:12:94:06:d7:66:08:7b:2f:50:95:90:47:5a:
52:d1:7b:c8:1c:c6:03:7d:cf:96:0d:52:58:be:a3:6e:98:a2:
5f:a6:5b:18:0b:24:3d:4c:ce:37:3a:ab:bb:a2:08:24:96:98:
52:92:e2:4a:6b:ac:6d:8c:53:ef:50:65:aa:04:77:ed:61:8b:
0c:eb:bc:01:19:fd:f7:9a:c9:0b:9e:1c:5f:75:3f:3e:88:ee:
3a:70:e2:1e:1f:6a:91:d5:d6:d6:d8:63:85:8d:49:00:c0:d3:
d6:9f:cf:c1:2e:b6:1b:4f:f3:ca:38:c8:85:cc:58:c7:60:ef:
86:94:33:7c:83:08:5c:95:ba:10:75:09:03:c4:34:2c:5f:d3:
68:43:8d:b3:c7:f9:1a:5b:1b:3d:51:4f:22:7c:62:79:a4:ab:
ab:08:26:0c:ab:09:d3:71:3b:cb:e0:44:5c:aa:1c:1a:c5:26:
15:b9:38:15:2f:cc:d2:ec:6b:75:5f:6f:5c:14:47:72:68:a7:
6a:97:37:e7:0c:4b:07:af:df:0a:cb:9f:44:62:93:63:29:e1:
fa:dc:61:9d:56:d7:8a:21:80:23:b3:9a:5f:c4:ec:f1:78:46:
61:46:ea:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:18 2024 by rpki-client on console-fra.rpki-client.org