Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APNT/-V_vngYXB0PgTCQtXsdSI01aCA0.roa
File: -V_vngYXB0PgTCQtXsdSI01aCA0.roa (raw, json)
Hash identifier: 09vJk79GIevAkt3uxudSJehzXEHsty3JUCRYnwlo1WQ=
Subject key identifier: F9:5F:EF:9E:06:17:07:43:E0:4C:24:2D:5E:C7:52:23:4D:5A:08:0D
Certificate issuer: /CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Certificate serial: 1098
Authority key identifier: C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/-V_vngYXB0PgTCQtXsdSI01aCA0.roa
Signing time: Thu 15 Sep 2022 02:44:07 +0000
ROA not before: Thu 15 Sep 2022 02:44:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 55789
IP address blocks: 103.130.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4248 (0x1098)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Validity
Not Before: Sep 15 02:44:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F95FEF9E06170743E04C242D5EC752234D5A080D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7f:88:aa:55:79:ba:1c:75:e4:3f:31:89:8d:
b5:0d:02:3c:cc:d2:5f:f8:f7:ee:d3:81:e0:bb:da:
24:05:fb:32:d1:ee:c6:ff:92:0e:61:fa:d4:ee:86:
13:3e:ef:7e:ac:71:01:15:d3:09:67:f0:4b:ac:49:
c7:57:7d:2b:b3:11:40:a6:ec:e6:d5:0d:65:a8:14:
ae:2a:6e:87:dc:59:7e:bd:67:4a:eb:c8:81:96:b2:
ba:10:d7:0d:92:2a:c1:08:59:58:9d:42:ec:b0:6a:
ba:3e:79:53:4f:f2:e6:b6:f4:4e:13:80:b2:28:8b:
2d:d5:26:51:3b:03:b0:5e:b8:36:5c:91:9c:ce:ab:
06:ee:5d:15:99:27:fb:89:de:6b:46:32:9b:fb:28:
6c:92:05:8d:ca:4d:05:1f:b2:13:55:c3:0b:64:c9:
a1:4e:de:60:05:3f:7a:7b:6b:27:f4:38:f1:45:20:
df:fe:e4:43:37:38:64:d8:d4:07:f5:2d:76:b8:17:
33:d9:61:93:f6:88:c2:5f:aa:65:b4:2d:62:2d:4c:
da:c9:2b:be:5b:f9:dc:3b:54:44:c2:05:d5:57:3d:
82:c0:fc:72:2e:1f:53:e9:eb:08:bd:b4:2c:e8:64:
70:1b:c8:e1:52:f5:72:04:bf:41:05:69:52:e0:5e:
c2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5F:EF:9E:06:17:07:43:E0:4C:24:2D:5E:C7:52:23:4D:5A:08:0D
X509v3 Authority Key Identifier:
keyid:C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/-V_vngYXB0PgTCQtXsdSI01aCA0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.28.0/22
Signature Algorithm: sha256WithRSAEncryption
44:c2:f5:7e:6e:95:f0:a9:dc:1d:17:94:10:2b:b8:b8:b7:e6:
d0:e4:b3:6d:c5:9c:ae:55:c0:5c:45:48:80:5d:8d:1c:cb:ba:
63:bb:d0:56:56:05:2b:25:e2:40:fb:c3:ec:af:37:5c:3c:35:
ae:04:39:87:73:97:69:6d:b7:f7:d8:ed:ee:12:5f:10:c1:cf:
38:cd:7e:c3:0b:74:cb:35:82:ae:51:99:fd:b9:62:1a:f1:1a:
f5:62:ed:b8:f6:08:46:72:e7:10:95:ba:4c:29:fc:08:1e:ab:
c6:b6:b5:02:a5:56:c2:ad:54:e2:18:98:89:c1:b6:aa:ae:39:
cd:67:21:a2:1e:03:e1:2a:7b:d0:72:c5:f1:6b:5b:9a:bd:aa:
05:0d:58:0b:8e:8d:60:d3:56:b0:7d:a8:a3:be:29:f4:19:33:
79:ad:e3:58:06:53:f3:5b:9b:37:6c:74:94:37:3a:3d:b7:66:
56:0b:12:96:65:64:c8:cd:e6:6a:a6:9a:80:8b:dc:cd:98:b3:
3b:03:5f:71:ee:b4:2f:f7:6d:3b:10:5e:f6:17:da:69:79:25:
49:42:73:ad:14:c9:23:73:76:02:41:66:11:97:d8:22:b5:c0:
1d:f3:9f:8e:bf:cd:ba:82:81:45:12:ec:fe:b5:7c:d5:b6:69:
99:15:b6:64
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEJgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzI1
MjhEOEM1QjY3NkZEOUEyNERGREE3RTkyMTc0NTdCNzMxMDI2MzAeFw0yMjA5MTUw
MjQ0MDdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEY5NUZFRjlFMDYxNzA3
NDNFMDRDMjQyRDVFQzc1MjIzNEQ1QTA4MEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrf4iqVXm6HHXkPzGJjbUNAjzM0l/49+7TgeC72iQF+zLR7sb/
kg5h+tTuhhM+736scQEV0wln8EusScdXfSuzEUCm7ObVDWWoFK4qbofcWX69Z0rr
yIGWsroQ1w2SKsEIWVidQuywaro+eVNP8ua29E4TgLIoiy3VJlE7A7BeuDZckZzO
qwbuXRWZJ/uJ3mtGMpv7KGySBY3KTQUfshNVwwtkyaFO3mAFP3p7ayf0OPFFIN/+
5EM3OGTY1Af1LXa4FzPZYZP2iMJfqmW0LWItTNrJK75b+dw7VETCBdVXPYLA/HIu
H1Pp6wi9tCzoZHAbyOFS9XIEv0EFaVLgXsJPAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU+V/vngYXB0PgTCQtXsdSI01aCA0wHwYDVR0jBBgwFoAUwlKNjFtnb9miTf2n
6SF0V7cxAmMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBOVC93
bEtOakZ0bmI5bWlUZjJuNlNGMFY3Y3hBbU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L3dsS05qRnRuYjltaVRmMm42U0YwVjdjeEFtTS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQTlQvLVZfdm5nWVhCMFBnVENRdFhzZFNJ
MDFhQ0EwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmeCHDAN
BgkqhkiG9w0BAQsFAAOCAQEARML1fm6V8KncHReUECu4uLfm0OSzbcWcrlXAXEVI
gF2NHMu6Y7vQVlYFKyXiQPvD7K83XDw1rgQ5h3OXaW2399jt7hJfEMHPOM1+wwt0
yzWCrlGZ/bliGvEa9WLtuPYIRnLnEJW6TCn8CB6rxra1AqVWwq1U4hiYicG2qq45
zWchoh4D4Sp70HLF8Wtbmr2qBQ1YC46NYNNWsH2oo74p9Bkzea3jWAZT81ubN2x0
lDc6PbdmVgsSlmVkyM3maqaagIvczZizOwNfce60L/dtOxBe9hfaaXklSUJzrRTJ
I3N2AkFmEZfYIrXAHfOfjr/NuoKBRRLs/rV81bZpmRW2ZA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org