Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APNT/T_22YpuVqYcaRAKZItruecsw7Lk.roa
File: T_22YpuVqYcaRAKZItruecsw7Lk.roa (raw, json)
Hash identifier: KwVpKJ3yXdYFRMmCw1lBgNYBZ3MlKgf6NICa8zGGGzI=
Subject key identifier: 4F:FD:B6:62:9B:95:A9:87:1A:44:02:99:22:DA:EE:79:CB:30:EC:B9
Certificate issuer: /CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Certificate serial: 1140
Authority key identifier: C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/T_22YpuVqYcaRAKZItruecsw7Lk.roa
Signing time: Wed 10 May 2023 13:18:23 +0000
ROA not before: Wed 10 May 2023 13:18:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131659
IP address blocks: 103.130.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4416 (0x1140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Validity
Not Before: May 10 13:18:23 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4FFDB6629B95A9871A44029922DAEE79CB30ECB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:35:e2:72:32:6e:b2:f7:5b:1c:23:f7:a0:6e:
ef:ff:72:65:c9:c7:ed:87:71:3e:4f:d3:dd:b3:20:
c1:a1:2c:da:a6:30:91:53:97:76:42:5e:08:8a:47:
f6:f0:9d:ce:02:e7:4e:9d:52:bb:0b:7e:6e:74:46:
78:79:e8:ab:c5:d2:14:33:3e:c8:7b:c1:97:7a:af:
ca:df:64:5f:c7:e7:39:6f:b6:ea:a2:9b:c9:ab:ca:
e5:38:16:82:23:18:10:ba:31:fc:44:23:66:05:0b:
0f:47:d1:b7:38:40:34:25:6c:4c:21:70:2d:47:dd:
21:e2:3c:60:72:9b:2f:4a:11:34:ed:77:7e:1e:3e:
a5:88:f6:31:ef:83:d7:5b:f9:fd:42:cf:70:22:8a:
50:19:79:33:7f:58:5e:55:24:18:39:28:71:ca:8b:
a9:df:5b:01:18:90:94:f3:ae:07:9f:5a:30:58:81:
40:6c:90:7f:08:5b:63:8b:f0:b1:79:c3:09:37:d5:
f2:1e:12:8d:44:23:04:58:68:ed:c5:52:67:6a:72:
d3:e8:f8:32:97:f7:44:0d:1d:8c:7d:c5:1f:a8:db:
41:1d:52:e6:ae:12:e3:9b:f8:65:6c:13:aa:a1:48:
e4:f2:ae:66:30:4c:a3:47:1a:30:d9:d1:db:7a:fc:
02:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FD:B6:62:9B:95:A9:87:1A:44:02:99:22:DA:EE:79:CB:30:EC:B9
X509v3 Authority Key Identifier:
keyid:C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/T_22YpuVqYcaRAKZItruecsw7Lk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.28.0/24
Signature Algorithm: sha256WithRSAEncryption
af:8f:7c:0e:5a:4f:c0:15:30:15:a4:b8:7b:96:41:d9:50:95:
bc:ff:ba:fc:b2:50:f6:bf:e3:7e:cc:cf:13:0e:6a:f3:e3:16:
8d:27:c6:23:e1:62:25:c3:fc:98:08:63:49:45:e4:c2:95:11:
79:52:a2:60:2f:fd:aa:ba:1c:21:79:e8:a1:2b:65:97:d2:3f:
78:99:9f:42:8a:37:c2:f5:19:b7:8e:f1:fe:e2:c2:07:a7:b4:
1f:7e:3a:8d:e6:3b:76:bb:fc:e8:da:12:3e:20:44:ad:2a:f9:
bc:26:b5:17:8f:8d:28:57:5b:c6:60:7f:5c:f7:52:02:f4:d7:
9e:79:ae:40:1c:ae:17:92:ad:0b:94:e3:51:b8:07:55:32:ba:
a9:52:38:ac:06:c1:31:37:79:fa:3a:b8:e5:ba:bb:30:6b:19:
ef:87:81:6f:c7:15:a4:ed:08:3d:3a:25:e9:12:68:93:31:de:
33:4c:5c:f0:cf:a7:6f:38:39:f0:c1:c9:32:a3:18:84:cd:11:
73:af:6b:9d:2f:ab:02:fd:97:12:01:26:72:df:54:2a:8f:17:
d7:f8:fb:7d:e9:a3:1d:25:3a:a8:fa:0d:25:f8:43:21:a5:27:
e9:8c:5d:53:d7:c1:79:2c:1c:c9:de:06:7a:64:6c:1e:53:bd:
ee:d1:7f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:59 2024 by rpki-client on console-ams.rpki-client.org