Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/1XskF7XZUxQttI9Pk_4drI2fjlA.roa
File: 1XskF7XZUxQttI9Pk_4drI2fjlA.roa (raw, json)
Hash identifier: rST9nuNBkf9VvzBo4McqWzUYdGc558qe+sNwN7E+hJM=
Subject key identifier: D5:7B:24:17:B5:D9:53:14:2D:B4:8F:4F:93:FE:1D:AC:8D:9F:8E:50
Certificate issuer: /CN=F3174813DFB1F9B4560472C267F76CD0C141E5DE
Certificate serial: 119F
Authority key identifier: F3:17:48:13:DF:B1:F9:B4:56:04:72:C2:67:F7:6C:D0:C1:41:E5:DE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/1XskF7XZUxQttI9Pk_4drI2fjlA.roa
Signing time: Fri 01 Sep 2023 08:50:23 +0000
ROA not before: Fri 01 Sep 2023 08:50:23 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131606
IP address blocks: 103.124.40.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4511 (0x119f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3174813DFB1F9B4560472C267F76CD0C141E5DE
Validity
Not Before: Sep 1 08:50:23 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D57B2417B5D953142DB48F4F93FE1DAC8D9F8E50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e8:7a:67:1b:22:38:3f:25:4a:83:48:8a:b7:
34:2c:55:bd:13:73:ee:20:12:b4:12:f2:66:9b:28:
7c:58:8a:ef:a7:e7:0c:8a:20:c2:e1:d4:d5:cc:52:
2a:a4:c6:40:44:81:d0:c1:8e:90:f9:0d:c9:d0:ad:
35:23:64:fe:4f:f7:fb:8f:c2:92:b7:b1:b1:ca:08:
ac:46:a7:42:f1:32:ab:e5:e9:1d:5e:c4:c4:b6:8d:
00:9b:b4:93:16:fa:50:d9:a7:67:fb:a3:31:0d:30:
fd:83:1d:76:ed:14:9f:fc:83:d9:d8:ed:d1:87:70:
06:c1:5c:dd:ed:ad:42:93:2e:a6:25:d6:7f:16:cb:
d5:56:1f:43:60:f5:a6:74:5d:cc:3a:c2:87:c0:ab:
c5:30:6d:71:e4:c1:e6:f0:94:bf:cd:a7:95:f4:2d:
91:ed:9d:ee:e5:8a:4b:66:d5:88:6d:02:1b:57:23:
3d:cd:84:55:7d:bc:53:5c:cb:46:6c:9b:a2:90:00:
fe:b4:29:f8:e9:c6:ef:24:df:ca:6f:14:a0:68:f6:
95:f1:3c:41:6f:23:84:e6:aa:ea:28:92:6b:07:86:
79:c5:19:93:c1:65:f9:79:6f:15:50:28:12:be:48:
dc:a5:72:85:da:5a:23:87:b4:e4:c1:cd:4b:02:49:
cd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7B:24:17:B5:D9:53:14:2D:B4:8F:4F:93:FE:1D:AC:8D:9F:8E:50
X509v3 Authority Key Identifier:
keyid:F3:17:48:13:DF:B1:F9:B4:56:04:72:C2:67:F7:6C:D0:C1:41:E5:DE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/1XskF7XZUxQttI9Pk_4drI2fjlA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.124.40.0/23
Signature Algorithm: sha256WithRSAEncryption
39:be:40:4f:65:ff:75:21:e8:54:fb:e7:78:9b:a4:80:10:f7:
2d:72:d0:56:68:be:09:6e:60:cc:43:fd:c0:30:d0:a5:b1:d7:
6b:d8:8c:be:0a:87:a5:60:1d:f7:00:9a:d0:ea:3d:06:bd:5c:
40:c5:ae:e3:20:14:14:b1:28:7c:1a:d8:17:be:3b:a2:03:e8:
35:04:5e:dc:08:7b:75:92:07:aa:20:fc:c0:38:19:d0:e2:02:
36:4c:9a:56:92:12:53:1c:27:f1:3b:28:e4:d0:96:82:f7:03:
7f:ef:4a:48:b9:8e:ef:4e:d8:e9:a6:55:c1:12:c9:40:5a:4e:
39:67:40:72:40:a9:8d:d2:7e:51:e2:6b:9e:77:49:39:92:f2:
50:62:0c:fb:e7:79:96:25:78:91:93:1f:59:17:30:8d:54:27:
f4:f1:bc:d1:a4:ce:04:d4:61:56:d4:ab:34:ae:9b:b3:0a:3d:
55:d5:f9:34:c6:1f:be:9a:8a:c3:ca:a6:ec:43:c1:d9:49:67:
b8:bb:e1:e5:64:7f:23:ae:04:15:62:ea:cd:9f:3d:a8:1c:69:
63:89:90:40:7e:70:87:40:dc:22:a1:66:69:0a:21:12:bb:5d:
19:b0:6c:6f:92:b0:e3:63:a1:a1:0e:be:51:02:e2:3c:6f:ac:
fa:f2:76:51
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org