Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APNT/J7qxA4Qe-x87kGBg4HJ5TCRhsRw.roa
File: J7qxA4Qe-x87kGBg4HJ5TCRhsRw.roa (raw, json)
Hash identifier: BxZXKy5PSbat5D/CZMBk8lFR1ryT0EqE4wJAYVv5hBg=
Subject key identifier: 27:BA:B1:03:84:1E:FB:1F:3B:90:60:60:E0:72:79:4C:24:61:B1:1C
Certificate issuer: /CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Certificate serial: 0EEE
Authority key identifier: C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/J7qxA4Qe-x87kGBg4HJ5TCRhsRw.roa
Signing time: Sun 07 Feb 2021 13:13:33 +0000
ROA not before: Sun 07 Feb 2021 13:13:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131659
IP address blocks: 103.130.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3822 (0xeee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Validity
Not Before: Feb 7 13:13:33 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=27BAB103841EFB1F3B906060E072794C2461B11C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5a:9c:92:6e:73:b3:a4:5b:eb:26:04:4e:21:
60:46:35:66:3d:74:b6:d7:e9:73:92:7a:ed:0b:15:
91:ec:ee:af:2d:09:6b:50:7e:a6:99:b4:d4:76:76:
c3:b6:3f:4f:f1:54:2f:0e:68:cc:c6:ae:7a:20:d3:
c3:a0:8e:e4:72:55:84:f5:d6:88:71:c5:e2:09:fd:
55:64:d2:4e:fd:2d:91:46:a8:ad:bc:a8:f4:50:bc:
fd:ca:4f:1a:94:e9:91:73:88:30:d1:2a:40:c5:d0:
8d:1b:99:00:07:f6:55:5e:9f:75:eb:76:7b:c4:fa:
a1:e4:f4:d9:3b:85:bc:ab:22:77:3a:aa:de:e5:1c:
b1:ad:76:92:9e:2c:85:f7:51:a5:bc:bb:9c:ca:20:
e0:06:fd:ca:88:ee:b3:a9:13:d7:1b:ed:6e:50:b4:
d6:2d:7e:34:28:79:c0:a9:17:d5:cd:5b:6b:5e:30:
19:1b:95:37:af:42:14:69:41:f9:f7:92:43:78:03:
45:46:28:90:57:c4:68:d7:07:a8:b6:a5:74:ec:0f:
58:4d:14:cb:c6:eb:c9:3d:e1:a0:33:e6:da:1f:85:
f3:66:1c:d0:89:63:8b:27:15:7e:40:78:f0:0b:0b:
44:90:81:6a:b5:1f:4e:1f:d7:75:76:27:3f:fe:47:
0f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BA:B1:03:84:1E:FB:1F:3B:90:60:60:E0:72:79:4C:24:61:B1:1C
X509v3 Authority Key Identifier:
keyid:C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/J7qxA4Qe-x87kGBg4HJ5TCRhsRw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.31.0/24
Signature Algorithm: sha256WithRSAEncryption
13:fd:42:06:bd:d1:00:41:7e:05:50:04:17:28:88:45:99:88:
4a:6e:d6:f6:e6:f0:b8:b0:6f:76:4d:d7:bc:f6:28:78:7b:1b:
36:93:a5:1b:e2:98:9a:a5:85:5b:91:ff:ff:41:4d:ff:d2:16:
0c:b7:ae:83:c3:fe:e6:8e:96:db:40:07:85:91:18:b9:44:8b:
50:44:c1:71:a9:14:4f:71:cf:d1:0c:eb:b0:37:a8:8b:b7:9f:
44:18:8e:93:1f:6f:15:dc:3f:bc:8e:b4:90:c0:cd:22:66:15:
5f:52:4c:53:15:2f:ee:9f:26:37:a5:72:ea:e9:a9:15:bf:88:
5f:b0:22:08:63:72:2c:7c:6a:1c:0b:5c:6d:ef:ca:86:6e:d9:
5f:e9:67:fd:24:81:46:7b:34:67:17:77:bb:e0:1a:4a:fa:c3:
ea:d8:84:31:a5:8d:c5:ea:2f:4d:cb:3a:0a:40:7a:4c:c0:5c:
1f:0c:f8:57:52:61:c4:3a:8b:71:2c:d1:43:0a:39:a7:75:01:
d4:40:fe:b9:26:08:d4:8c:c1:2a:70:d0:13:a9:14:f2:d1:99:
ad:cb:53:79:e9:a6:73:84:b0:f7:67:02:f2:38:54:27:b5:2d:
dc:da:93:9b:26:0b:10:12:48:5c:e8:cc:06:bc:e3:f6:82:09:
c1:18:51:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org