Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APNT/8--S9Z7X491GK2QW6BHweqPfKsw.roa
File: 8--S9Z7X491GK2QW6BHweqPfKsw.roa (raw, json)
Hash identifier: tWEkMtZ6Qw7WwgsHUys5Fcb3PdKgwugn57c40ANNoGo=
Subject key identifier: F3:EF:92:F5:9E:D7:E3:DD:46:2B:64:16:E8:11:F0:7A:A3:DF:2A:CC
Certificate issuer: /CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Certificate serial: 1098
Authority key identifier: C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/8--S9Z7X491GK2QW6BHweqPfKsw.roa
Signing time: Thu 15 Sep 2022 02:44:07 +0000
ROA not before: Thu 15 Sep 2022 02:44:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131659
IP address blocks: 103.130.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4248 (0x1098)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Validity
Not Before: Sep 15 02:44:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F3EF92F59ED7E3DD462B6416E811F07AA3DF2ACC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:39:01:bd:1e:53:f2:f3:e6:00:4e:3f:f4:d9:
68:5f:2d:f2:37:93:34:4e:ec:16:fe:b8:fb:96:e8:
36:b6:89:10:01:c9:aa:3f:0c:de:05:80:77:44:22:
6c:f0:a9:31:bd:bd:63:f5:98:e4:02:22:c0:fe:c9:
56:34:a4:ab:55:d4:e8:f9:c3:08:cc:0c:1f:55:02:
e5:04:c0:ef:94:07:8d:8f:dd:4d:af:1e:5c:2c:4b:
51:dc:19:0e:b1:42:72:60:ec:e0:50:06:14:34:a9:
8a:2d:99:5d:d8:ef:de:b6:e4:27:5b:c4:a9:0a:63:
dc:44:a1:4d:a9:04:17:ce:51:5a:fa:d2:21:f7:3a:
6d:0f:1c:7e:c9:b6:2c:53:82:08:cb:2e:f3:b5:3c:
7f:42:c8:f0:ee:d1:bd:85:0e:21:c1:3b:da:d7:63:
38:6e:12:c6:f6:a8:51:bb:4a:50:11:30:ca:41:ca:
2e:fd:82:09:90:80:b5:68:8d:0c:47:fe:b0:36:7b:
1a:9e:ad:9f:88:ea:da:aa:aa:8e:5c:9c:09:62:51:
bf:d3:bc:26:cf:18:c2:47:03:46:2c:4e:ca:2e:92:
0c:53:7f:d3:c2:ed:e8:bc:56:1d:e8:bf:13:1e:02:
c4:aa:ca:8d:0d:98:b7:72:7d:df:16:1b:cb:37:92:
09:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EF:92:F5:9E:D7:E3:DD:46:2B:64:16:E8:11:F0:7A:A3:DF:2A:CC
X509v3 Authority Key Identifier:
keyid:C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/8--S9Z7X491GK2QW6BHweqPfKsw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.29.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:7a:39:47:37:02:97:5b:8e:6d:12:f5:59:e3:fc:8e:67:82:
52:ef:71:77:db:36:64:44:6c:fe:8a:df:78:03:54:b6:91:62:
89:e8:25:a6:93:86:f1:4b:d2:81:b7:11:b1:27:29:22:51:dc:
9c:e6:9c:a5:00:18:11:0b:99:02:e8:33:e7:a7:c6:9c:c2:34:
a9:81:06:d0:c9:40:8f:3a:d1:46:97:bd:82:ae:c1:90:ac:9c:
44:fb:4f:50:7e:2b:f6:8b:76:f6:98:fc:5f:fc:8a:ec:83:e5:
d1:91:61:83:2f:6d:c3:cf:05:9a:30:a4:ab:c2:08:8c:d3:62:
d8:cc:53:12:6a:4f:91:d5:99:ea:85:2e:62:b2:db:b6:e9:5b:
0e:cb:89:bc:1e:9a:ab:e5:8c:e2:9a:12:a9:ff:ef:45:8d:e5:
19:59:4d:b9:7d:27:3e:f3:3e:f6:0e:3a:ad:10:12:9c:5a:21:
84:5c:e7:85:95:02:48:09:c2:0a:1e:3f:67:b3:41:35:ba:2a:
6f:32:47:b1:24:1b:4e:fb:8f:4b:48:3c:0d:ba:da:72:4f:00:
2a:39:ea:29:14:58:4c:0d:67:70:8f:c6:2c:69:81:65:8e:f4:
bf:ed:d5:a0:85:3d:d8:cc:d9:87:ee:8c:9a:09:42:99:4e:fd:
e1:a4:55:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:59 2024 by rpki-client on console-ams.rpki-client.org