Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FISC/Xf1_i5SGLijuQW5AdYdqDR5mqO8.roa
File: Xf1_i5SGLijuQW5AdYdqDR5mqO8.roa (raw, json)
Hash identifier: URNnVjOAqs4XrzcO21m/O3AF6rMk/PisS6DDfi/Cew0=
Subject key identifier: 5D:FD:7F:8B:94:86:2E:28:EE:41:6E:40:75:87:6A:0D:1E:66:A8:EF
Certificate issuer: /CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Certificate serial: 0B39
Authority key identifier: F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/Xf1_i5SGLijuQW5AdYdqDR5mqO8.roa
Signing time: Fri 01 Sep 2023 08:51:09 +0000
ROA not before: Fri 01 Sep 2023 08:51:09 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131588
IP address blocks: 103.229.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2873 (0xb39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Validity
Not Before: Sep 1 08:51:09 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5DFD7F8B94862E28EE416E4075876A0D1E66A8EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c9:1b:fd:fe:6f:3d:30:a9:c5:e2:70:c9:cd:
d2:14:00:6a:d7:e8:ff:a3:43:89:2a:38:a5:7a:5d:
5a:3d:fc:3d:c2:59:73:dd:40:85:98:82:28:54:6e:
11:38:b0:a3:e5:11:8e:a3:2a:c8:e6:3e:ea:9c:a9:
b3:c1:82:c4:34:f6:e0:29:68:87:d5:89:2d:07:84:
b4:33:8f:6b:4c:21:82:3e:ee:a7:8b:43:19:a5:b2:
cd:48:a8:23:65:c1:f3:ea:62:26:ef:20:d3:b7:fa:
fc:4e:98:0f:12:a6:93:83:65:fc:07:bd:a7:c9:2c:
33:42:e9:45:3b:be:d2:81:a3:20:17:b7:83:6c:b0:
49:84:b9:f2:30:a3:b7:4a:17:49:28:b2:ab:6a:75:
c0:31:a9:67:7a:9d:93:54:b4:bb:89:9e:ea:08:2d:
6b:34:c7:a1:78:bb:6d:f8:c7:52:98:11:42:ec:68:
cc:f0:8b:2d:bb:bb:ab:77:24:e6:61:b6:5a:bb:95:
cb:8a:62:4e:91:da:be:87:7e:63:d6:8c:71:05:60:
ab:73:51:05:f0:11:23:3a:2f:c3:4f:e1:0f:71:16:
12:6b:c0:ec:07:2c:b1:91:19:bc:43:e7:9d:6e:be:
c5:e0:c1:c9:de:14:a6:32:ec:9c:b3:4c:86:2e:7d:
5d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FD:7F:8B:94:86:2E:28:EE:41:6E:40:75:87:6A:0D:1E:66:A8:EF
X509v3 Authority Key Identifier:
keyid:F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8M4QvXwrOaA6cMMCuisIZSwIB9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/Xf1_i5SGLijuQW5AdYdqDR5mqO8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.132.0/24
Signature Algorithm: sha256WithRSAEncryption
77:06:55:98:85:1e:87:da:69:b3:3b:8d:43:bc:52:5f:e3:dc:
fd:76:c5:84:44:fc:96:7f:fd:19:d5:0f:e6:0c:74:a3:f9:1d:
38:df:79:7f:14:b6:b9:9a:07:c2:57:96:d3:e1:52:f9:b4:4c:
76:ab:7c:1b:79:a5:59:be:55:e8:93:f6:7c:c2:14:a8:e3:a1:
96:a8:d2:f1:13:37:13:df:01:ac:c3:f5:e9:33:30:1b:03:64:
78:3d:bf:55:ee:12:8e:a8:3a:02:a0:d3:ac:c8:ea:a9:29:0a:
7a:8b:30:1b:13:8e:ec:79:04:a2:e6:97:19:81:72:74:6b:8e:
ba:d3:af:8e:36:3b:36:34:41:e2:ee:29:cc:89:65:fd:70:7b:
6e:0c:f5:a9:c3:57:11:51:bf:25:d4:1d:52:8a:cd:79:c1:b3:
8c:78:04:83:c8:27:ab:e3:46:ca:39:b4:0b:4d:1b:89:00:45:
3d:05:06:a4:13:d4:13:bf:a0:56:54:cf:01:a0:86:fa:33:bd:
f2:84:28:5c:3d:ab:47:78:68:9b:33:e1:79:5c:fa:59:6a:12:
3d:b2:5d:44:7d:a3:48:26:be:f9:ee:d4:cf:5e:92:79:0a:ce:
06:c9:a3:fd:07:74:dc:c3:12:7a:05:33:06:83:f8:86:68:47:
d7:20:4b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:20 2024 by rpki-client on console-fra.rpki-client.org