Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APNT/LLJXqnmOfUObXJ5N32wdsSXqsDM.roa
File: LLJXqnmOfUObXJ5N32wdsSXqsDM.roa (raw, json)
Hash identifier: NcfoT45rWwJUf/pln51/Ar57eFRjEez1oUsyvkmmR8c=
Subject key identifier: 2C:B2:57:AA:79:8E:7D:43:9B:5C:9E:4D:DF:6C:1D:B1:25:EA:B0:33
Certificate issuer: /CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Certificate serial: 113C
Authority key identifier: C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/LLJXqnmOfUObXJ5N32wdsSXqsDM.roa
Signing time: Wed 10 May 2023 13:18:22 +0000
ROA not before: Wed 10 May 2023 13:18:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131659
IP address blocks: 103.130.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4412 (0x113c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Validity
Not Before: May 10 13:18:22 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2CB257AA798E7D439B5C9E4DDF6C1DB125EAB033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f8:f8:71:5d:e9:92:de:26:f6:41:c2:79:3f:
c1:8c:90:25:26:41:dd:87:2f:2c:cc:9e:49:5d:c9:
69:73:ec:ed:cd:2d:c6:0b:9a:63:0a:fd:e0:68:d7:
a7:88:6b:e5:ca:59:27:db:be:98:b8:7d:d8:5d:a9:
5e:10:38:5a:90:d7:b0:59:82:78:f1:85:b0:ae:b5:
94:fe:af:c3:9f:1e:7d:aa:d7:0a:38:83:74:ab:6b:
55:18:9a:49:c6:58:44:4d:bc:f5:4a:d6:06:90:cc:
68:61:4e:e3:72:ff:e9:3f:0c:7c:4f:21:79:a0:fd:
31:50:2b:1b:9e:3e:13:ad:3c:56:3b:9a:b4:2c:de:
b6:11:1d:da:76:aa:f4:81:c9:7a:dd:ba:3c:9e:e3:
da:f8:da:f0:08:2f:96:a7:d9:8d:29:77:91:ba:1c:
55:db:2b:c6:50:2d:29:b0:85:1f:78:33:13:63:44:
fe:92:3b:2b:30:de:97:0f:24:f4:7d:9d:63:10:f2:
a4:e7:fb:3b:09:f3:a5:4e:a1:7d:1a:c7:b2:6a:95:
c4:21:a5:6c:f9:c4:35:06:c4:57:7e:f1:b5:67:95:
9b:59:3e:6b:d7:e5:38:1c:2d:ab:35:01:5a:6e:0b:
88:f4:0e:7f:18:82:54:2b:c1:70:a5:aa:b8:04:d5:
79:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B2:57:AA:79:8E:7D:43:9B:5C:9E:4D:DF:6C:1D:B1:25:EA:B0:33
X509v3 Authority Key Identifier:
keyid:C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/LLJXqnmOfUObXJ5N32wdsSXqsDM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.31.0/24
Signature Algorithm: sha256WithRSAEncryption
68:b7:34:c5:3a:29:e2:a6:f5:02:05:a3:07:81:c4:83:92:12:
57:d9:05:7e:90:76:a5:23:79:6d:82:ad:7d:92:2d:f2:f6:31:
d8:2d:c2:8f:6f:64:e0:67:9a:09:1e:ad:f3:40:9b:ee:83:bf:
2e:28:af:f5:49:ef:a8:d4:13:3f:0e:fd:bc:ae:44:03:5f:55:
c9:66:a8:95:51:3d:6e:40:2f:3e:cb:76:ae:c3:d2:40:ab:2e:
ff:08:a3:b2:64:f1:55:74:33:3e:8c:dd:94:30:6e:1b:fb:fe:
ac:d5:7b:bd:55:1c:94:e1:a1:6f:1b:98:f3:8c:97:7b:f5:be:
0a:03:e9:18:93:46:28:22:f1:ea:0f:da:4c:98:91:cc:0d:1c:
3c:7e:a3:53:dd:5a:ee:dd:13:47:36:ae:11:b7:2d:e8:6e:c6:
9e:33:04:e5:cc:c0:83:b2:3d:b8:28:f8:2f:dd:08:d3:8f:e1:
54:75:21:9e:af:2e:64:3e:7e:25:e2:c0:c5:59:26:c6:68:9b:
79:83:69:c2:51:3b:a7:4d:3d:12:6a:7a:ff:85:63:1e:05:25:
71:df:7f:ba:7d:54:86:4c:53:c8:d7:72:09:c6:a3:89:a6:d1:
97:83:8f:31:1d:ca:63:12:cc:97:09:61:de:ee:0a:ef:65:a8:
6c:c3:c3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:59 2024 by rpki-client on console-ams.rpki-client.org