Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APNT/TCgBsg-0NdP2XzJhO6wR9tKfBbU.roa
File: TCgBsg-0NdP2XzJhO6wR9tKfBbU.roa (raw, json)
Hash identifier: 8aiBO9jMdq7gfh44PzH7hfvYSc7Xg2Q9QfSBig+fVfE=
Subject key identifier: 4C:28:01:B2:0F:B4:35:D3:F6:5F:32:61:3B:AC:11:F6:D2:9F:05:B5
Certificate issuer: /CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Certificate serial: 113F
Authority key identifier: C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/TCgBsg-0NdP2XzJhO6wR9tKfBbU.roa
Signing time: Wed 10 May 2023 13:18:23 +0000
ROA not before: Wed 10 May 2023 13:18:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131659
IP address blocks: 103.130.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4415 (0x113f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Validity
Not Before: May 10 13:18:23 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4C2801B20FB435D3F65F32613BAC11F6D29F05B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:74:d2:16:ed:d3:69:91:e1:d0:95:d9:d5:ec:
c6:6c:c8:de:f9:76:7c:1d:b9:8a:87:9d:da:e9:42:
9d:0f:63:66:2a:25:5d:62:7d:0a:20:b0:74:40:2e:
69:2f:a9:18:13:be:26:33:ed:81:93:e3:c8:a8:0c:
f0:c2:60:a2:7a:04:34:91:9d:58:c4:c4:38:33:27:
0c:32:f4:a8:bc:ea:91:54:0c:59:34:9e:14:c5:5e:
99:6d:cb:24:76:57:a1:11:23:fa:a5:16:aa:c7:b6:
09:10:5b:f5:de:cb:fa:3c:58:13:ef:33:29:a0:0d:
d3:b1:a1:91:9e:40:fd:a4:17:1a:67:be:48:64:92:
1e:ce:1c:61:a0:6b:6c:91:36:20:05:26:a5:2f:29:
f5:fe:31:d1:6f:49:74:57:84:a5:cf:8c:d0:a5:74:
9a:d2:9d:d0:43:ce:a0:db:d4:43:7c:8d:b7:70:e5:
85:dc:e2:22:f9:05:ab:8c:05:df:0c:34:31:37:c5:
89:66:48:eb:12:dd:15:37:8a:b8:7f:8e:39:50:74:
f3:dd:73:a5:e8:e1:97:dc:00:79:49:58:49:3c:62:
e8:0a:ef:fa:71:a1:56:78:38:72:d4:10:b6:bc:57:
39:af:f6:c4:bf:04:cd:c5:60:1d:38:9e:07:ae:98:
01:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:28:01:B2:0F:B4:35:D3:F6:5F:32:61:3B:AC:11:F6:D2:9F:05:B5
X509v3 Authority Key Identifier:
keyid:C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/TCgBsg-0NdP2XzJhO6wR9tKfBbU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.30.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:ca:00:85:26:a0:84:83:50:4f:44:13:db:f6:17:28:23:13:
57:34:4b:93:4d:26:83:b0:a3:1d:fe:c9:d4:98:06:f5:77:4f:
7f:d3:18:24:25:39:a3:9c:d4:e4:5f:50:5d:e2:58:8e:b9:3f:
26:26:32:34:3e:b6:50:23:72:79:c2:ed:bb:31:2f:95:57:86:
51:2b:34:55:79:bd:d4:f9:75:58:87:f4:1a:6e:a9:ff:8e:e2:
8c:f9:84:89:21:61:28:aa:b9:d6:83:75:02:ad:f5:55:7a:55:
0f:68:d8:10:07:51:e8:8e:56:43:75:20:ed:d2:92:d3:45:95:
02:5a:57:d3:81:03:07:1c:de:6c:08:4d:21:5b:d2:d6:3a:6c:
56:86:14:bd:e3:d6:76:15:71:f0:b8:e7:35:39:5f:6c:ca:f6:
93:06:1a:28:1a:7a:03:4e:20:c3:2e:0b:de:fa:80:72:06:23:
69:2f:01:80:af:c0:e4:b0:44:67:3c:f9:aa:9e:4f:67:56:06:
2d:93:e2:8d:87:41:06:1a:86:ba:e5:b2:d3:03:d1:3e:33:fd:
41:78:7f:e0:22:1f:a7:cb:22:24:3d:0d:ec:87:ce:77:1c:0f:
3c:5a:0b:af:70:6c:7f:48:3a:db:69:4b:19:ed:c4:35:e4:4c:
46:99:73:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:59 2024 by rpki-client on console-ams.rpki-client.org