Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FISC/2kcBK0rr0AAhEmAkkXt7r1GPf_s.roa
File: 2kcBK0rr0AAhEmAkkXt7r1GPf_s.roa (raw, json)
Hash identifier: o46mbwTNRAKbYq1Kc2etS8U/IJ+QOQgfZbljXyAT0Sc=
Subject key identifier: DA:47:01:2B:4A:EB:D0:00:21:12:60:24:91:7B:7B:AF:51:8F:7F:FB
Certificate issuer: /CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Certificate serial: 0B3A
Authority key identifier: F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/2kcBK0rr0AAhEmAkkXt7r1GPf_s.roa
Signing time: Fri 01 Sep 2023 08:51:10 +0000
ROA not before: Fri 01 Sep 2023 08:51:10 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131588
IP address blocks: 103.229.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2874 (0xb3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Validity
Not Before: Sep 1 08:51:10 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DA47012B4AEBD00021126024917B7BAF518F7FFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:c8:c9:c3:68:cd:fb:06:42:c7:2f:b8:b9:
9d:b9:1f:36:9b:92:22:89:1e:cc:c6:51:0d:ae:56:
b1:cd:1b:89:9b:47:3b:f0:e1:26:73:32:c2:2e:eb:
78:29:a3:08:e7:55:d5:f8:b9:5f:f3:fc:0d:ee:aa:
9f:51:d2:a6:04:19:f6:5b:d0:45:a0:cb:8a:37:29:
6e:37:51:f6:78:d6:4f:01:8b:ab:a5:76:da:aa:69:
ea:ea:11:81:ac:1d:17:d8:3e:f4:5a:d5:33:0b:05:
e8:b0:e5:10:af:38:57:78:a7:7c:6d:6b:be:d4:78:
5f:58:57:40:f8:d1:70:60:a6:13:c5:c7:a9:bb:da:
5c:af:76:81:aa:6b:d3:0a:71:63:4a:3b:59:0f:68:
88:fe:68:6a:07:8a:a2:37:88:6d:83:50:5e:9c:77:
3e:7a:b2:79:79:83:6c:ae:3d:dc:76:7a:28:e6:5e:
ac:7b:a0:3f:af:84:e9:9c:8a:b4:e2:98:75:74:b4:
78:d8:25:0d:36:eb:e4:bc:26:5c:e5:30:d2:cc:16:
b1:c8:68:4b:4b:e3:3c:d8:53:40:0b:53:1e:69:16:
d8:a0:43:06:3c:5e:b0:4a:fd:e4:0b:b3:17:83:d2:
81:82:55:76:0a:c1:84:bd:db:a2:fe:99:f5:b8:82:
40:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:47:01:2B:4A:EB:D0:00:21:12:60:24:91:7B:7B:AF:51:8F:7F:FB
X509v3 Authority Key Identifier:
keyid:F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8M4QvXwrOaA6cMMCuisIZSwIB9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/2kcBK0rr0AAhEmAkkXt7r1GPf_s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.135.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c1:9f:cb:91:7d:98:cf:2b:0c:25:9f:0d:0d:2f:ee:21:f1:
ba:f3:17:e1:6b:dc:3b:64:df:2a:99:14:32:f3:4c:f3:58:26:
c0:f0:4a:2b:32:07:8e:84:58:2a:eb:ea:aa:88:85:b1:6f:f5:
ca:90:cb:14:66:4b:c5:95:d6:63:6d:40:46:1b:e9:b5:14:8f:
6f:4c:d2:25:58:69:2a:f9:53:7f:ac:51:33:cc:cc:88:c6:4d:
07:33:81:ab:07:89:02:8d:97:cc:79:75:89:dc:a8:3e:ed:25:
7a:fc:b1:99:1c:9c:93:cf:d2:5b:55:75:56:50:12:3b:41:0a:
4c:0a:cf:0d:d2:53:41:37:8c:92:b2:f7:ed:db:da:d9:47:a7:
ae:24:72:33:0e:22:49:52:74:70:1d:eb:e3:7c:d5:03:ec:f8:
31:5f:d3:36:75:a9:b9:19:40:16:4d:87:7a:f9:8c:26:5b:a4:
d0:13:2e:4f:e9:e4:58:ae:52:67:e1:fe:a2:fc:70:2c:ff:be:
3b:07:a3:be:6c:a1:f4:fd:87:73:90:b2:b0:9d:6c:76:0e:9e:
b4:27:99:27:83:ab:ef:75:b0:ea:5d:61:0f:b7:03:7b:1d:f0:
1e:f7:57:24:5e:f4:ed:b1:0d:93:17:35:c0:1a:35:43:34:a8:
b1:63:8e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org