Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APNT/SN9u8NhuFDeEtgd2TfmtvJa5zdo.roa
File: SN9u8NhuFDeEtgd2TfmtvJa5zdo.roa (raw, json)
Hash identifier: LeHxhrgmAVNWt+/lmP9zzwE2U+8fhzJnKpIjcWKvGsk=
Subject key identifier: 48:DF:6E:F0:D8:6E:14:37:84:B6:07:76:4D:F9:AD:BC:96:B9:CD:DA
Certificate issuer: /CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Certificate serial: 1035
Authority key identifier: C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/SN9u8NhuFDeEtgd2TfmtvJa5zdo.roa
Signing time: Sun 01 May 2022 15:33:55 +0000
ROA not before: Sun 01 May 2022 15:33:55 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131659
IP address blocks: 103.130.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4149 (0x1035)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Validity
Not Before: May 1 15:33:55 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=48DF6EF0D86E143784B607764DF9ADBC96B9CDDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9c:cd:41:37:15:57:30:1b:38:e0:51:29:c8:
67:d1:21:fe:a5:80:34:c9:22:69:ab:42:e1:4a:fd:
3c:6c:30:85:c4:1d:c2:74:a8:43:b1:97:18:8a:9c:
df:21:0d:e4:b8:f3:84:17:d0:3e:03:bc:d7:82:28:
f6:ae:b2:7c:75:71:b2:2a:4e:d6:e4:a7:9d:73:54:
19:48:49:b9:6c:fd:b0:75:6e:5c:e1:ef:10:fb:d3:
c7:6d:02:5e:18:00:38:c5:ef:69:18:6c:55:c8:f1:
60:27:38:e8:91:13:b3:db:61:ee:36:72:56:c9:b7:
18:20:17:dd:45:8d:bc:2d:c8:9e:0d:d4:cd:5d:65:
73:33:57:ca:9e:37:92:ab:8a:fa:ce:8a:be:7d:6f:
7c:ee:91:4b:55:3c:96:b6:66:10:a5:46:51:ef:04:
85:19:0d:2d:45:81:1f:05:8b:73:00:b3:4b:38:f2:
1e:a5:26:83:f9:9e:4c:d1:0d:9e:f4:3f:af:16:ac:
cd:23:24:d4:4d:cf:e3:a7:bd:31:cc:c3:0f:c4:95:
4c:d7:b5:4d:24:21:9a:27:8d:a4:01:5d:64:68:20:
09:fe:93:76:ba:e3:e3:07:68:24:e8:34:2a:94:b4:
0c:a0:05:02:0a:d8:3b:7b:d1:ae:67:bd:86:ed:22:
76:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DF:6E:F0:D8:6E:14:37:84:B6:07:76:4D:F9:AD:BC:96:B9:CD:DA
X509v3 Authority Key Identifier:
keyid:C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/SN9u8NhuFDeEtgd2TfmtvJa5zdo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.30.0/24
Signature Algorithm: sha256WithRSAEncryption
53:f6:ff:c0:c9:ed:01:05:88:35:db:01:cc:32:33:e9:c9:52:
95:b1:9c:22:5b:f5:b9:10:43:40:67:13:a8:07:b8:37:cd:45:
26:b8:76:3f:67:c1:6e:d7:cf:13:f3:8f:78:c1:a9:c3:3d:c7:
65:72:bb:6c:b6:48:9a:20:70:5e:2a:a9:af:c8:30:29:e0:88:
ec:a1:be:89:3e:74:f1:73:c0:65:bf:a1:88:af:e6:a2:3f:dd:
e7:a2:88:e9:a0:fc:2f:b9:60:af:e4:0b:42:6a:99:40:75:6c:
11:50:12:44:91:5f:71:ea:f5:33:55:1e:26:29:23:6a:02:fe:
dc:fb:bb:e8:61:b0:ad:34:70:88:65:a4:46:df:9c:7a:99:c7:
22:ca:09:29:c8:b2:f2:ff:0b:b5:68:1d:b5:64:7b:f2:38:40:
1a:a4:32:fc:2c:e4:46:e1:c3:80:56:22:df:bd:57:f9:e2:ff:
16:ea:04:b4:8a:8f:e5:51:b2:09:5c:06:7c:29:cf:47:88:fa:
f9:cb:17:10:ba:1e:60:19:c5:fe:2d:36:ae:b8:01:af:77:ad:
59:1e:ca:d5:fc:96:c4:13:ef:df:ae:42:f4:59:aa:ed:fc:e0:
18:e3:7a:08:0f:f2:3d:7f:55:21:20:35:9b:be:05:f8:b3:c1:
27:53:4a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:59 2024 by rpki-client on console-ams.rpki-client.org