Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/X2JrIbVKZlSjaelufQBj1OXuvLA.roa
File: X2JrIbVKZlSjaelufQBj1OXuvLA.roa (raw, json)
Hash identifier: 9DR1A0VQSyHzHoA9xkjnTdUqe6Ny973b8//FFG9m9gU=
Subject key identifier: 5F:62:6B:21:B5:4A:66:54:A3:69:E9:6E:7D:00:63:D4:E5:EE:BC:B0
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0D96
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/X2JrIbVKZlSjaelufQBj1OXuvLA.roa
Signing time: Mon 15 Jan 2024 21:29:33 +0000
ROA not before: Mon 15 Jan 2024 21:29:33 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131591
IP address blocks: 103.231.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3478 (0xd96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:29:33 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5F626B21B54A6654A369E96E7D0063D4E5EEBCB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bc:32:93:8b:c6:63:bc:f8:d3:2d:13:35:f9:
47:0e:fa:78:33:c1:56:33:14:ba:de:ea:30:8b:a7:
e0:e8:8b:89:d5:1c:27:8a:6f:df:c6:b6:47:ba:61:
3c:d0:f8:a9:5a:58:ae:0b:1c:93:76:77:50:73:65:
8e:f1:d4:3e:2b:9b:51:75:6c:ce:aa:cb:01:8f:b8:
b2:54:dc:78:29:89:9e:4f:df:17:a1:fe:a2:0a:8d:
81:a0:df:a6:f2:34:7a:a8:a5:bd:26:08:1e:2a:1c:
3c:6f:d6:be:51:5a:3d:a5:8e:cd:52:be:d3:3e:98:
db:b1:79:7f:94:a6:e0:0e:8e:70:73:23:cd:fe:15:
5a:60:b3:94:ac:0c:3a:e5:b2:22:4d:74:d8:9c:62:
b5:b1:52:58:84:75:e5:3c:e0:6c:4d:64:55:28:2c:
7e:9b:a8:6f:b0:a3:e2:89:6b:07:f4:db:c4:3a:ea:
f1:ca:6f:d7:7d:4b:3d:9d:4f:6c:f7:81:86:d9:5d:
8b:58:3d:3a:34:2c:67:88:28:6a:c2:0a:5e:4b:06:
0f:fd:74:5c:d4:b0:36:6e:56:d1:f5:6c:78:0b:ec:
18:3b:7e:7e:af:70:da:63:1b:09:4b:e5:75:1a:e8:
bb:ed:81:5a:e1:67:b0:f3:89:bd:3e:c9:7e:03:84:
f9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:62:6B:21:B5:4A:66:54:A3:69:E9:6E:7D:00:63:D4:E5:EE:BC:B0
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/X2JrIbVKZlSjaelufQBj1OXuvLA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.231.49.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:51:c1:68:ba:88:11:34:48:31:cf:31:19:5e:3b:5d:d6:98:
5e:52:6a:90:4c:29:1f:e5:49:fc:49:e5:90:86:d6:5d:d2:45:
96:45:0f:56:f4:1c:e5:ef:47:13:b4:7a:87:76:e7:2d:36:de:
e7:22:bc:cd:35:f5:79:1e:02:21:ef:e1:b3:04:7d:ba:ef:de:
98:a1:b1:fc:dd:07:4e:3f:11:7b:19:ac:1e:dc:e5:aa:1d:98:
de:4b:37:99:7f:c5:4c:65:85:4e:48:ab:ed:06:e5:9f:01:83:
53:17:3e:ab:8b:7a:d7:29:cd:8a:78:08:03:3d:5c:5a:e9:f1:
46:94:85:ad:81:de:b6:f6:6c:f4:4d:fc:8e:3f:ae:90:e6:11:
e3:21:34:73:11:7f:1e:a2:a3:78:7e:e7:6c:01:ad:61:6c:67:
7d:d0:c6:7b:66:62:ba:97:8d:ee:cb:79:55:75:36:c7:49:89:
ca:3a:81:1f:44:8c:21:57:7c:6e:7e:07:a7:8f:ff:8f:5c:e2:
8f:da:a2:84:fc:ab:a6:21:1a:23:67:44:c0:42:1c:fe:ba:f4:
0c:50:e6:07:fa:32:e0:d6:87:7e:e3:74:11:c6:fb:3e:52:6a:
51:f5:5f:11:3e:13:b6:60:64:14:7b:c1:8f:4f:c4:25:cd:c8:
ca:06:a0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org