Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APNT/K5XCBblVZ-_5iEQAGstro7ijXm4.roa
File: K5XCBblVZ-_5iEQAGstro7ijXm4.roa (raw, json)
Hash identifier: Qot4hMOQw4r4FodLaCpA+3HvHC5BUxGIZs4CiyVlttQ=
Subject key identifier: 2B:95:C2:05:B9:55:67:EF:F9:88:44:00:1A:CB:6B:A3:B8:A3:5E:6E
Certificate issuer: /CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Certificate serial: 11A1
Authority key identifier: C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/K5XCBblVZ-_5iEQAGstro7ijXm4.roa
Signing time: Fri 01 Sep 2023 08:04:02 +0000
ROA not before: Fri 01 Sep 2023 08:04:02 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131659
IP address blocks: 103.130.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4513 (0x11a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Validity
Not Before: Sep 1 08:04:02 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2B95C205B95567EFF98844001ACB6BA3B8A35E6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4e:79:c9:8c:6d:c8:58:25:9c:cd:cb:37:7e:
9d:f1:2c:0d:98:e5:9f:6e:10:30:c0:23:d7:d4:c9:
30:f2:c8:90:88:41:8d:f7:a2:1b:21:01:4f:db:3d:
24:6f:d5:87:4b:96:bc:84:0b:33:be:fb:98:4f:0a:
3a:5f:55:cd:a3:3b:0d:c6:0d:3d:14:3a:c0:2d:e7:
8f:f5:75:09:7a:1f:b4:d2:d3:02:bf:a1:14:07:e5:
f0:85:ac:44:81:e8:d0:7a:1a:09:78:1a:c8:ee:71:
dc:3e:d2:fb:da:72:ae:4c:56:2f:ce:ef:39:c3:47:
dd:6e:e2:f5:82:3f:02:73:52:1c:b7:a2:62:b4:03:
13:02:44:e2:54:e1:7d:e0:78:91:ff:92:26:39:34:
67:5f:05:2a:e8:03:5b:42:f8:20:ff:a6:56:ae:7f:
b2:66:4b:9d:8e:d0:75:83:f1:94:d2:28:3f:dd:50:
bf:68:b7:9e:96:34:19:b1:23:70:1a:32:aa:a5:a5:
f7:f8:b0:78:0c:7f:0b:2f:33:bc:58:40:23:79:2a:
75:39:71:60:c5:3e:4c:46:d8:66:f0:fc:52:cc:a5:
d4:d8:db:09:6c:1d:0c:2c:53:1b:32:06:c3:b5:de:
b9:f7:d0:b9:e2:b9:98:e7:58:11:57:3e:a0:bc:95:
75:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:95:C2:05:B9:55:67:EF:F9:88:44:00:1A:CB:6B:A3:B8:A3:5E:6E
X509v3 Authority Key Identifier:
keyid:C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/K5XCBblVZ-_5iEQAGstro7ijXm4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.28.0/24
Signature Algorithm: sha256WithRSAEncryption
12:fd:e4:91:3d:b6:38:5d:8e:68:40:d4:c6:23:d7:ae:ec:39:
7e:9c:94:ba:d4:96:a7:9e:2f:5f:0e:33:6f:38:8b:bd:00:b7:
29:f1:e9:f5:11:5f:f9:27:95:36:32:f0:fc:29:b2:1a:33:51:
b2:42:78:9e:53:35:53:c7:6a:93:97:8b:0f:20:07:98:49:77:
cc:b8:02:a2:0a:36:34:12:9d:20:0e:24:67:a0:4e:bf:2b:58:
ba:ca:af:0a:cf:9d:26:d9:c1:c1:72:82:5f:e2:ee:be:70:05:
c1:b7:d2:6c:15:98:95:31:75:9c:0c:a8:9b:1d:96:91:79:6c:
c9:4c:8a:3c:76:4d:d6:c0:8b:4b:b1:d3:b4:7d:87:52:a9:a0:
ac:20:c4:7f:35:1c:bc:1f:16:bb:52:c9:07:0d:2f:98:0f:4f:
b0:e2:c4:ea:b0:f1:cd:73:f7:53:f2:d3:78:9d:11:51:fa:7b:
3f:32:79:5e:c6:28:96:86:ae:3c:5f:94:c1:a7:fe:b3:e7:a3:
57:85:64:70:30:0f:89:f6:0c:14:86:fd:e8:4e:1c:44:88:a7:
a6:ff:c7:ac:a3:b1:1a:b2:78:4b:82:d4:07:97:8f:a1:bc:59:
af:dd:fc:bc:63:07:e8:97:16:59:08:02:77:28:6f:23:33:41:
21:fa:e5:74
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEaEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzI1
MjhEOEM1QjY3NkZEOUEyNERGREE3RTkyMTc0NTdCNzMxMDI2MzAeFw0yMzA5MDEw
ODA0MDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDJCOTVDMjA1Qjk1NTY3
RUZGOTg4NDQwMDFBQ0I2QkEzQjhBMzVFNkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7TnnJjG3IWCWczcs3fp3xLA2Y5Z9uEDDAI9fUyTDyyJCIQY33
ohshAU/bPSRv1YdLlryECzO++5hPCjpfVc2jOw3GDT0UOsAt54/1dQl6H7TS0wK/
oRQH5fCFrESB6NB6Ggl4Gsjucdw+0vvacq5MVi/O7znDR91u4vWCPwJzUhy3omK0
AxMCROJU4X3geJH/kiY5NGdfBSroA1tC+CD/plauf7JmS52O0HWD8ZTSKD/dUL9o
t56WNBmxI3AaMqqlpff4sHgMfwsvM7xYQCN5KnU5cWDFPkxG2Gbw/FLMpdTY2wls
HQwsUxsyBsO13rn30LniuZjnWBFXPqC8lXXtAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUK5XCBblVZ+/5iEQAGstro7ijXm4wHwYDVR0jBBgwFoAUwlKNjFtnb9miTf2n
6SF0V7cxAmMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBOVC93
bEtOakZ0bmI5bWlUZjJuNlNGMFY3Y3hBbU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L3dsS05qRnRuYjltaVRmMm42U0YwVjdjeEFtTS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQTlQvSzVYQ0JibFZaLV81aUVRQUdzdHJv
N2lqWG00LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeCHDAN
BgkqhkiG9w0BAQsFAAOCAQEAEv3kkT22OF2OaEDUxiPXruw5fpyUutSWp54vXw4z
bziLvQC3KfHp9RFf+SeVNjLw/CmyGjNRskJ4nlM1U8dqk5eLDyAHmEl3zLgCogo2
NBKdIA4kZ6BOvytYusqvCs+dJtnBwXKCX+LuvnAFwbfSbBWYlTF1nAyomx2WkXls
yUyKPHZN1sCLS7HTtH2HUqmgrCDEfzUcvB8Wu1LJBw0vmA9PsOLE6rDxzXP3U/LT
eJ0RUfp7PzJ5XsYoloauPF+Uwaf+s+ejV4VkcDAPifYMFIb96E4cRIinpv/HrKOx
GrJ4S4LUB5ePobxZr938vGMH6JcWWQgCdyhvIzNBIfrldA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:59:18 2025 by rpki-client