Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FISC/YMS8M44nPe92BG1lYtKLak8rcWI.roa
File: YMS8M44nPe92BG1lYtKLak8rcWI.roa (raw, json)
Hash identifier: JrERXO5JUst6q9ikUC0q5ODlks0P2LNbQAXFoia84JI=
Subject key identifier: 60:C4:BC:33:8E:27:3D:EF:76:04:6D:65:62:D2:8B:6A:4F:2B:71:62
Certificate issuer: /CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Certificate serial: 0B38
Authority key identifier: F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/YMS8M44nPe92BG1lYtKLak8rcWI.roa
Signing time: Fri 01 Sep 2023 08:51:09 +0000
ROA not before: Fri 01 Sep 2023 08:51:09 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131588
IP address blocks: 103.229.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2872 (0xb38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Validity
Not Before: Sep 1 08:51:09 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=60C4BC338E273DEF76046D6562D28B6A4F2B7162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:07:8c:ca:e4:43:ea:b7:4e:9f:5c:49:93:b7:
fa:84:26:ac:d7:23:b5:cc:ba:0e:19:ea:8e:8a:00:
f3:7d:56:26:9c:86:0b:02:86:82:fb:a9:8f:a9:30:
e2:07:d7:b4:ad:ee:bb:af:24:72:82:77:b7:1c:80:
ca:8f:be:57:f0:90:60:91:d1:c3:49:9a:d4:d0:50:
ae:22:92:c5:c7:79:a4:8a:05:41:53:b2:2c:c0:12:
0c:4f:52:84:d4:94:5d:fd:a6:c9:4d:8a:3a:c3:dd:
0a:a7:9f:bd:e5:40:43:25:d0:14:cb:0b:32:44:39:
d4:3b:80:44:95:fd:43:7f:c0:f8:fe:35:19:8c:06:
af:5e:1d:4a:ae:83:dc:e2:79:b0:a9:48:39:a4:a5:
08:15:3c:4a:8c:1a:ff:be:71:df:47:84:de:08:05:
ac:8b:18:d1:88:2d:4c:21:87:b3:a0:a5:78:6f:85:
70:00:9f:1c:63:cd:79:65:6a:a6:2d:5a:28:79:53:
31:e9:52:2e:ce:27:9d:d3:d7:02:2d:f6:40:58:14:
62:22:9f:2e:85:56:18:26:d6:21:f2:33:de:ed:00:
10:1e:09:66:2c:47:4e:26:4b:9c:bb:f1:37:60:95:
6a:27:16:c4:9b:a0:62:3e:84:b6:8e:f4:c0:89:a2:
27:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C4:BC:33:8E:27:3D:EF:76:04:6D:65:62:D2:8B:6A:4F:2B:71:62
X509v3 Authority Key Identifier:
keyid:F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8M4QvXwrOaA6cMMCuisIZSwIB9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/YMS8M44nPe92BG1lYtKLak8rcWI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.134.0/24
Signature Algorithm: sha256WithRSAEncryption
99:b6:4f:88:a3:ed:8d:21:af:84:3c:cf:c2:9c:63:63:45:60:
d9:3a:fa:95:c6:a9:b9:e1:0e:07:d4:05:16:77:82:38:9c:19:
b2:f1:39:53:90:9e:ee:b6:74:9e:5e:9e:2e:83:48:a9:0b:64:
1d:53:45:68:8c:4e:d5:fd:2b:75:04:5d:d2:8a:4a:60:ae:c9:
be:a3:40:bc:a1:a3:51:ed:a3:2e:10:85:0a:76:90:49:5b:3f:
07:6f:c5:30:9b:ee:8c:e8:be:c4:4c:0d:53:11:3e:87:47:d6:
73:c5:96:3c:1c:b1:e8:be:6f:d8:3d:7a:2c:2e:e5:48:58:d4:
dd:b8:1d:cf:f0:2f:69:41:d3:0a:aa:ad:fe:28:2b:ef:90:88:
65:44:a5:d0:4f:3e:80:61:7b:3b:57:de:fa:c5:47:d7:42:b0:
0b:53:36:59:2a:ba:c7:38:52:dd:e2:aa:dc:06:60:91:da:74:
88:9f:b6:1c:68:89:2b:cf:4b:d0:2e:2d:16:f8:a2:aa:d2:d6:
40:a6:89:4c:e0:b4:08:d4:82:90:92:2a:fe:dd:aa:c9:8d:0c:
80:c4:4d:c9:3c:30:d9:f4:d8:02:87:96:f8:07:14:ba:04:a7:
6d:5b:3a:c6:b2:2e:8a:28:a6:68:8c:8c:03:56:ec:3a:00:dc:
22:5b:3d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:13 2024 by rpki-client on console-ams.rpki-client.org