Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APNT/Mw1rseJG_rutvzFXXixqrTJZGfA.roa
File: Mw1rseJG_rutvzFXXixqrTJZGfA.roa (raw, json)
Hash identifier: Vh6KAE8hFKuJGsWUPk7XZKk2zxBoMVjUdnHv8/64pHw=
Subject key identifier: 33:0D:6B:B1:E2:46:FE:BB:AD:BF:31:57:5E:2C:6A:AD:32:59:19:F0
Certificate issuer: /CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Certificate serial: 1098
Authority key identifier: C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/Mw1rseJG_rutvzFXXixqrTJZGfA.roa
Signing time: Thu 15 Sep 2022 02:44:06 +0000
ROA not before: Thu 15 Sep 2022 02:44:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131659
IP address blocks: 103.130.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4248 (0x1098)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Validity
Not Before: Sep 15 02:44:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=330D6BB1E246FEBBADBF31575E2C6AAD325919F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:38:1c:9d:df:42:ea:68:63:88:44:a3:d5:
1d:79:26:0d:8f:f6:63:58:ea:04:03:c8:31:b7:ad:
09:4d:84:d2:af:96:8b:04:20:b0:45:72:51:53:50:
0e:5b:d1:fa:b6:07:40:d7:23:9a:d5:93:6a:a6:0a:
f1:c5:37:fa:55:9f:3e:10:1f:0c:01:8b:44:d3:e8:
6b:b5:d3:16:b4:39:33:43:6e:6e:87:a6:1e:6c:5f:
42:cc:1b:e0:08:fd:9b:fa:dc:dc:1e:79:75:1a:49:
cc:02:d1:d6:a0:f1:2c:2a:d8:ed:1d:57:68:31:d3:
e7:8f:dd:f1:8d:8a:66:19:18:57:da:6e:40:88:0f:
09:5b:6d:16:df:8e:cf:23:f4:65:79:b4:42:15:38:
47:2f:f1:31:0b:b7:1d:03:b1:1a:ec:b5:0c:55:a0:
bb:84:7b:a2:e3:f9:aa:fd:a1:db:4d:67:e8:ce:93:
8e:f6:f0:4b:6e:f0:5e:30:f4:20:e5:f9:2b:f8:07:
fc:38:78:cd:10:52:31:38:75:a7:2f:bd:df:8f:19:
7f:46:f1:68:40:85:c4:fb:ec:1d:0d:21:b2:53:ab:
0a:2b:c4:11:40:42:a6:8b:61:88:02:23:69:87:3b:
61:e3:68:a2:08:c8:a9:d8:4d:72:62:cb:ed:e5:53:
83:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0D:6B:B1:E2:46:FE:BB:AD:BF:31:57:5E:2C:6A:AD:32:59:19:F0
X509v3 Authority Key Identifier:
keyid:C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/Mw1rseJG_rutvzFXXixqrTJZGfA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.28.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:95:4d:53:7e:8a:1b:17:f4:06:d2:47:dd:82:71:ff:cd:50:
52:5e:8b:4e:72:b8:41:08:1a:bd:9d:34:64:a6:e7:dd:75:82:
89:fc:2b:77:ec:3c:f1:a0:d2:d9:a7:6a:12:09:49:88:23:c7:
48:a4:fa:54:c2:3c:30:74:1b:1d:14:0c:2c:01:11:3d:9e:aa:
fb:ad:a0:a8:06:9f:6c:d0:39:9c:c3:15:60:b0:14:40:d3:c5:
87:95:7e:b6:23:9f:16:5c:93:f5:73:74:e0:50:79:07:e4:5b:
aa:87:ba:ca:e6:9b:44:75:01:6a:6e:16:06:b1:b3:fd:11:2a:
99:e2:8f:91:1e:73:60:9b:3b:e4:f8:f1:5f:90:5b:b5:e8:66:
5a:1b:bd:6b:da:53:d6:7a:a5:77:38:e7:a9:12:7b:32:83:b2:
28:86:5a:a8:87:47:69:76:20:34:c9:9d:b0:55:31:3d:5a:f4:
93:b9:90:9c:7c:03:4b:52:51:28:64:76:4c:59:ac:13:12:6a:
98:4b:e3:6a:bf:2b:85:31:f3:84:45:82:4f:dd:80:0d:17:24:
27:d2:5c:ab:ec:6e:6c:20:13:46:64:e8:e4:eb:2f:da:dd:ad:
94:be:64:ff:e9:cf:63:f4:1c:a4:e3:b9:a9:b0:e2:70:cd:c9:
5f:52:53:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org