Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKMT/ROkN9yXq9WVfnlXhyNBhO0uO-g4.roa
File: ROkN9yXq9WVfnlXhyNBhO0uO-g4.roa (raw, json)
Hash identifier: mSEdZcuP9tM1HvGbfY8VjdczCtE9yhcAycerAbFlUOQ=
Subject key identifier: 44:E9:0D:F7:25:EA:F5:65:5F:9E:55:E1:C8:D0:61:3B:4B:8E:FA:0E
Certificate issuer: /CN=48540E13F8B2CAE86CD1F8C7252839A5078F16A5
Certificate serial: 0CB3
Authority key identifier: 48:54:0E:13:F8:B2:CA:E8:6C:D1:F8:C7:25:28:39:A5:07:8F:16:A5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SFQOE_iyyuhs0fjHJSg5pQePFqU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKMT/ROkN9yXq9WVfnlXhyNBhO0uO-g4.roa
Signing time: Fri 01 Sep 2023 09:14:30 +0000
ROA not before: Fri 01 Sep 2023 09:14:30 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131645
IP address blocks: 103.141.82.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3251 (0xcb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48540E13F8B2CAE86CD1F8C7252839A5078F16A5
Validity
Not Before: Sep 1 09:14:30 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=44E90DF725EAF5655F9E55E1C8D0613B4B8EFA0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:92:60:aa:78:1e:c1:fe:3d:54:3b:49:b9:a3:
96:34:f2:dc:ed:c6:03:69:a2:6a:7b:00:3e:e7:6e:
6a:66:a2:e7:18:a2:14:2d:0b:3a:1c:d4:77:21:ee:
08:ea:fe:29:2f:5a:b5:6e:dc:9b:2f:a1:cf:e2:bc:
0a:62:e1:c1:c2:b3:5c:c4:fc:75:70:52:2f:15:c0:
e8:be:b8:a1:eb:bb:4c:bb:c3:6c:87:31:96:d8:88:
fe:70:82:f0:3b:e0:ca:aa:68:71:ca:1e:f5:04:46:
d0:78:10:ee:7b:81:88:e2:07:3f:b8:e2:8f:4d:15:
5c:86:63:63:fa:1a:45:9d:5d:a1:19:b3:f3:0f:6b:
d4:d9:4b:7e:4b:ba:5e:d2:f2:74:21:5c:25:b8:f9:
2b:43:67:bc:6b:bb:ba:5f:37:ee:f4:d5:24:56:d3:
c9:0d:31:5f:76:ca:0c:48:fe:43:33:50:3a:6d:a0:
a1:69:bd:47:bf:ed:d4:ac:21:b6:d6:f9:17:e2:eb:
9a:6d:8f:18:42:51:c5:be:88:84:41:b4:ae:c0:cd:
58:85:16:5d:6d:d8:63:66:34:69:91:b2:78:cc:c6:
f9:ee:7e:9b:a4:db:1b:2d:c9:4f:4b:29:f7:f7:6b:
ca:a7:0e:d1:c7:c9:60:64:09:5c:2e:fe:65:f1:e5:
4b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E9:0D:F7:25:EA:F5:65:5F:9E:55:E1:C8:D0:61:3B:4B:8E:FA:0E
X509v3 Authority Key Identifier:
keyid:48:54:0E:13:F8:B2:CA:E8:6C:D1:F8:C7:25:28:39:A5:07:8F:16:A5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKMT/SFQOE_iyyuhs0fjHJSg5pQePFqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SFQOE_iyyuhs0fjHJSg5pQePFqU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKMT/ROkN9yXq9WVfnlXhyNBhO0uO-g4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.82.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:9b:85:85:59:18:37:29:8f:99:1f:7d:9a:7c:6f:20:30:2f:
3f:68:49:8a:8d:79:53:44:77:7a:f9:84:ef:ec:58:c4:a1:ed:
67:bc:18:60:0a:b6:2a:e4:d0:52:53:fd:ba:f8:c1:6e:47:a3:
4d:8d:4d:2a:75:28:79:d4:3b:21:18:73:0f:5e:95:c5:59:a8:
cf:e8:e7:06:a1:e4:88:fe:7b:4c:02:31:97:3e:6e:5f:27:17:
f3:5b:d8:29:09:e2:8c:88:4a:cc:03:aa:af:e3:c2:9e:9f:08:
3d:9c:e1:8e:e8:a3:3c:a4:6f:dc:0f:bc:cf:56:aa:79:cd:9a:
e3:a5:f2:f2:8b:55:4a:0b:6f:67:a2:ce:73:58:1a:13:be:1c:
77:b8:e8:3f:26:4d:a2:d4:9f:1e:f6:a4:b4:85:ef:ee:e7:cf:
21:93:3b:36:26:97:82:b1:44:9d:3b:82:1d:e3:28:ec:ab:d2:
a6:30:c8:cd:d2:3e:92:5c:99:fb:9d:4c:d5:ea:5b:ff:fa:d9:
7c:ac:fe:df:2c:20:89:03:89:0c:36:0c:0a:2b:e2:c3:c3:2b:
f0:96:c1:21:6e:f2:b1:c3:f2:46:75:83:fb:d0:e5:d1:14:87:
4c:70:a7:00:d2:3c:b5:e2:77:2a:2c:d9:0a:fa:61:d1:53:ec:
81:7f:23:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:21 2024 by rpki-client on console-fra.rpki-client.org