Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APNT/12lca4qbGpMPOh7vRPHgd8i6j8I.roa
File: 12lca4qbGpMPOh7vRPHgd8i6j8I.roa (raw, json)
Hash identifier: LWPtpytVk/rSoQbcT1NRTuXoQVStVuH4Iqv20mi3UXM=
Subject key identifier: D7:69:5C:6B:8A:9B:1A:93:0F:3A:1E:EF:44:F1:E0:77:C8:BA:8F:C2
Certificate issuer: /CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Certificate serial: 1098
Authority key identifier: C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/12lca4qbGpMPOh7vRPHgd8i6j8I.roa
Signing time: Thu 15 Sep 2022 02:44:06 +0000
ROA not before: Thu 15 Sep 2022 02:44:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131659
IP address blocks: 103.130.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4248 (0x1098)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Validity
Not Before: Sep 15 02:44:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D7695C6B8A9B1A930F3A1EEF44F1E077C8BA8FC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f6:6e:28:22:1c:98:86:f5:b5:4a:b9:91:75:
7e:9b:b2:3c:99:1b:fe:3e:08:15:29:46:c9:21:f4:
35:a2:2e:95:e7:d2:0b:33:fa:88:dd:ce:e3:c5:f1:
31:e5:b1:3a:72:65:f8:38:4c:60:48:4c:56:5f:41:
a4:b2:e3:82:e2:77:e1:12:1b:2b:07:75:6b:e8:1b:
9e:87:04:d3:25:60:7d:5a:e0:ab:c1:82:ec:2c:09:
4e:bb:38:af:04:66:03:6f:de:27:32:f1:05:89:ff:
13:d8:ed:d1:66:05:65:e2:fa:04:4c:1d:0e:9a:7d:
1d:20:e2:92:f4:54:95:b1:aa:be:c6:95:bc:1e:89:
09:23:30:a8:8d:89:c8:3b:f7:f6:30:28:cd:5a:3a:
9e:29:a4:b9:e7:de:98:0d:cb:9d:0c:9b:1a:18:30:
77:ee:0f:31:f1:d1:72:de:59:32:cb:0e:f1:b0:81:
e8:0d:6f:e8:86:9d:25:c3:5e:99:7d:18:c1:26:74:
16:6b:16:2f:51:65:29:43:0b:8c:ee:89:4e:49:2e:
b4:ad:54:dd:c9:55:69:ec:83:45:7d:dd:0f:97:75:
30:12:1c:47:a7:3c:6f:cd:e3:84:42:38:0d:fa:10:
a7:84:0f:6d:c1:19:37:48:c2:4d:49:f1:2e:a1:1c:
88:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:69:5C:6B:8A:9B:1A:93:0F:3A:1E:EF:44:F1:E0:77:C8:BA:8F:C2
X509v3 Authority Key Identifier:
keyid:C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/12lca4qbGpMPOh7vRPHgd8i6j8I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.31.0/24
Signature Algorithm: sha256WithRSAEncryption
93:17:57:ed:fb:d6:80:db:af:aa:36:af:da:a3:8a:bc:1b:49:
be:2f:c2:e1:bd:f1:6e:14:1f:19:fa:74:70:68:12:93:84:01:
bd:6d:9c:a8:2c:92:12:00:75:b7:fc:88:a3:ff:57:91:30:54:
c9:e2:cb:51:80:f3:04:df:6c:38:27:89:06:f2:c3:56:b0:18:
31:89:40:d8:88:cd:ec:c1:6a:d6:44:0e:3f:ce:11:6e:10:f3:
55:63:1c:16:a1:17:7d:fc:db:30:14:48:93:0b:35:f7:89:de:
bc:93:30:20:6e:be:c3:2f:a1:24:61:38:62:d6:e5:7c:64:31:
f1:2b:db:1d:cd:07:e9:2f:12:e6:19:de:05:16:be:82:4a:2e:
cd:3e:5d:05:4e:be:0a:1d:4f:96:c2:f8:67:34:f5:7b:de:b6:
f5:fa:6e:3a:9f:d4:6d:2e:29:0c:e8:7b:41:61:13:ca:4a:28:
6a:a0:fb:37:88:db:78:21:06:69:ad:8e:e1:27:5a:41:2b:95:
1c:b3:ef:7a:8c:05:1e:ed:9e:97:f9:91:25:e3:c3:9f:d2:f7:
8c:1b:9d:99:73:1f:45:fd:3f:6a:6e:e6:68:3c:9d:68:d4:c8:
0e:8c:1f:73:73:2a:46:c3:36:ac:44:94:91:dc:1b:df:a2:cd:
59:9e:9e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org