Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APNT/Wdr4j1L351-Y1y1NlAHc1h6ra1M.roa
File: Wdr4j1L351-Y1y1NlAHc1h6ra1M.roa (raw, json)
Hash identifier: WJ7u+VANctqfmKOgUCJnMABAR86WJekmid6wthp2/88=
Subject key identifier: 59:DA:F8:8F:52:F7:E7:5F:98:D7:2D:4D:94:01:DC:D6:1E:AB:6B:53
Certificate issuer: /CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Certificate serial: 0ECC
Authority key identifier: C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/Wdr4j1L351-Y1y1NlAHc1h6ra1M.roa
Signing time: Thu 31 Dec 2020 07:56:46 +0000
ROA not before: Thu 31 Dec 2020 07:56:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 55789
IP address blocks: 103.130.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3788 (0xecc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Validity
Not Before: Dec 31 07:56:46 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=59DAF88F52F7E75F98D72D4D9401DCD61EAB6B53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:b7:e6:e4:19:b3:d8:7e:3b:79:02:90:2b:
fa:ae:75:ea:87:d7:4a:b5:9f:3c:86:48:22:17:d8:
b1:02:71:b8:9a:58:f1:1f:2b:05:71:45:90:b9:99:
1f:40:27:4d:a6:8a:32:00:97:45:ff:32:52:50:3b:
bb:20:40:09:16:29:5e:b4:6e:77:46:b5:be:df:9a:
39:5d:0b:9a:84:08:21:d0:31:7f:38:32:02:33:84:
b6:07:d0:6e:f7:ba:20:11:9d:e7:7a:78:ca:ba:e8:
ee:8d:b6:bc:ba:fa:b3:d8:f1:03:55:93:71:19:30:
34:5e:34:2f:ef:ad:22:eb:a3:9f:88:26:85:65:5e:
eb:d9:db:ad:1d:dc:da:d0:9b:68:06:11:84:1d:b6:
e5:21:10:db:d5:44:75:96:8d:ea:6b:5d:db:65:05:
34:da:9a:5d:cd:15:d0:c1:67:f7:89:3d:68:91:52:
53:ba:32:cd:4a:86:57:5f:c6:bf:12:33:1e:ba:58:
58:c0:59:8b:83:97:6e:20:d8:8e:42:a0:15:49:c0:
14:63:0c:af:64:74:b1:29:fd:ee:d5:fd:bb:5d:02:
15:95:fc:68:f2:f9:27:a9:b4:6c:20:41:17:e6:e4:
cd:d9:c0:f0:f9:99:8f:61:36:e9:f6:97:90:7a:17:
74:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DA:F8:8F:52:F7:E7:5F:98:D7:2D:4D:94:01:DC:D6:1E:AB:6B:53
X509v3 Authority Key Identifier:
keyid:C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/Wdr4j1L351-Y1y1NlAHc1h6ra1M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.31.0/24
Signature Algorithm: sha256WithRSAEncryption
03:e1:f6:31:f1:e0:5c:d4:03:90:3e:da:e8:39:28:de:fc:43:
1f:f2:25:df:d7:2b:56:b1:79:c3:cb:3b:39:d0:d6:a0:c0:c8:
a2:4b:6c:01:27:dd:26:34:2b:64:dd:7a:b3:46:12:4e:7b:75:
85:06:3a:ad:91:06:88:dd:87:1e:4e:ff:66:1f:f1:92:ca:e8:
68:13:79:5b:61:bd:6b:90:2f:76:3d:75:68:0b:00:5a:03:f0:
f7:e5:5c:25:41:0e:8a:7a:bb:d0:9f:1a:7a:4e:21:3e:73:cb:
99:a5:ab:e6:a4:72:53:b2:0b:9b:16:56:66:70:c1:f3:21:50:
f2:68:f0:0a:39:72:3d:84:3d:00:e0:44:21:f2:87:b1:73:ce:
cb:d0:4a:10:fd:e3:0a:ae:df:28:5f:fe:98:25:59:37:86:38:
70:35:d5:a8:3e:28:ec:9f:0f:16:28:d9:56:f8:a6:33:0b:95:
6f:d4:ba:e7:44:45:fb:61:f1:37:f3:71:ae:30:0f:5b:d6:29:
c1:26:54:94:ec:cc:74:b7:ad:b5:cb:0d:e1:04:49:29:6d:12:
f2:89:cc:c4:c9:da:72:5b:54:0c:92:fe:73:83:0b:91:12:76:
26:2c:f8:4a:8a:89:6f:c4:05:34:8f:ec:90:c1:19:b2:0b:a7:
62:e2:f9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:59 2024 by rpki-client on console-ams.rpki-client.org