Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APNT/LKKgvcTQHkdT4lK-MDIhuHLUpBg.roa
File: LKKgvcTQHkdT4lK-MDIhuHLUpBg.roa (raw, json)
Hash identifier: Xss2XP6OHk8uNWi4gFbuqNrOtHeBlfke+YaiFekpG/0=
Subject key identifier: 2C:A2:A0:BD:C4:D0:1E:47:53:E2:52:BE:30:32:21:B8:72:D4:A4:18
Certificate issuer: /CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Certificate serial: 0FE9
Authority key identifier: C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/LKKgvcTQHkdT4lK-MDIhuHLUpBg.roa
Signing time: Fri 21 Jan 2022 10:42:21 +0000
ROA not before: Fri 21 Jan 2022 10:42:21 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 55789
IP address blocks: 103.130.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4073 (0xfe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Validity
Not Before: Jan 21 10:42:21 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2CA2A0BDC4D01E4753E252BE303221B872D4A418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:42:0f:18:82:66:9a:48:76:44:45:36:60:46:
fa:bf:b5:50:a4:79:2a:2f:25:af:9a:fb:48:71:79:
60:ea:e4:36:dc:23:d3:28:0d:f1:07:68:60:f9:6e:
71:f1:db:47:1c:eb:c4:13:f4:3d:00:68:34:11:04:
2d:82:2a:8e:e0:19:d8:a6:fd:77:c3:19:8e:9b:5a:
87:3e:26:34:8c:59:ca:a1:d2:52:51:7f:62:62:ee:
71:5b:8f:d4:d5:f5:68:1f:ba:ad:72:67:92:89:bc:
4b:0a:b9:cb:2a:4c:d2:7d:56:ad:f6:2d:2c:3e:3f:
69:7b:a6:d9:2d:1e:62:f1:50:32:f1:10:2b:f5:7f:
10:18:af:2e:ff:b5:fe:4e:ff:ca:a3:99:3e:08:e2:
c4:7c:60:c5:a8:59:c6:85:cb:fb:8d:86:9b:d5:7f:
af:be:96:c4:f9:f8:f7:2d:07:b5:76:62:dd:f3:0d:
65:7b:0c:bc:bc:c4:58:56:dd:af:22:ae:31:08:52:
62:80:c0:93:2d:df:2a:f5:ea:ba:70:96:0f:e6:47:
53:dd:04:11:4e:13:39:8e:4f:66:05:b5:21:8b:30:
4f:b6:c5:3e:ee:c2:77:5b:b1:43:e4:54:c5:00:49:
9e:85:0e:87:f5:e6:69:05:1b:55:dc:b6:4c:67:f2:
34:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A2:A0:BD:C4:D0:1E:47:53:E2:52:BE:30:32:21:B8:72:D4:A4:18
X509v3 Authority Key Identifier:
keyid:C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/LKKgvcTQHkdT4lK-MDIhuHLUpBg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.28.0/24
Signature Algorithm: sha256WithRSAEncryption
68:93:fa:17:7b:a4:fc:c3:16:2c:87:92:57:61:b1:86:9c:e0:
2f:66:6e:bd:ff:71:15:fc:d6:fc:7a:9c:f5:a3:02:48:c8:b4:
3b:10:2d:55:e0:90:72:24:64:26:7c:01:8e:e6:89:06:b4:3d:
0e:ca:5e:58:b8:63:cb:f6:f5:e8:fb:55:fa:ce:a3:80:73:45:
19:47:ce:65:78:bf:91:73:2a:c5:35:14:56:52:ac:46:2e:3a:
c7:19:f0:3c:8e:d1:7a:7c:29:d5:cd:3a:29:04:cd:1f:d3:52:
67:d5:b0:7a:60:cc:5a:91:95:71:6e:d1:22:bb:8b:42:83:8d:
c9:f4:93:4b:53:4b:a7:87:7e:97:44:47:1f:64:90:bd:fd:cc:
83:e9:b3:e9:73:6a:25:e2:77:da:68:b1:bd:81:83:15:49:1f:
8a:0d:8f:7d:28:d7:b3:0a:81:ad:5c:86:45:60:38:e1:b8:c9:
c2:41:17:6e:40:0c:e0:28:b0:96:d1:56:76:59:97:f5:60:1b:
34:40:ee:92:83:61:14:a5:a4:80:5b:6f:b3:c3:ab:ba:9d:a2:
7f:d9:f0:b5:41:d9:b2:c9:3b:5f:bf:34:82:e1:da:2e:5a:f6:
01:b6:57:0e:94:b8:a2:4a:90:24:7c:85:a5:67:4d:16:52:76:
f7:5f:23:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:59 2024 by rpki-client on console-ams.rpki-client.org