Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APNT/Y4QZ7G6kUuiN2Xh1kP4Xv69uiI4.roa
File: Y4QZ7G6kUuiN2Xh1kP4Xv69uiI4.roa (raw, json)
Hash identifier: w6MaDp69SBfdsCMTKMqlDuBQNRSTFNFKEnMM9I851MU=
Subject key identifier: 63:84:19:EC:6E:A4:52:E8:8D:D9:78:75:90:FE:17:BF:AF:6E:88:8E
Certificate issuer: /CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Certificate serial: 119C
Authority key identifier: C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/Y4QZ7G6kUuiN2Xh1kP4Xv69uiI4.roa
Signing time: Fri 01 Sep 2023 08:04:00 +0000
ROA not before: Fri 01 Sep 2023 08:04:00 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131659
IP address blocks: 103.130.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4508 (0x119c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Validity
Not Before: Sep 1 08:04:00 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=638419EC6EA452E88DD9787590FE17BFAF6E888E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3b:28:1a:da:ec:74:fc:6d:77:0d:0a:18:5f:
98:ed:66:fe:a0:20:89:10:7b:ba:52:b9:12:25:af:
60:cb:f2:b9:31:91:c1:ea:81:08:7d:14:50:89:32:
f1:fc:6e:0e:6d:be:19:02:f9:b5:0b:1f:97:4b:c2:
15:e9:24:d5:fb:70:4c:dc:17:28:5d:92:03:cd:b3:
f8:06:a8:dc:fd:3e:e8:15:c1:af:f9:e4:07:9d:17:
f8:ee:a0:af:df:39:cc:7f:12:2b:09:03:9e:65:f8:
27:c5:93:eb:dd:f2:be:0d:33:14:bc:29:23:10:e0:
62:32:93:f7:83:a4:92:03:e0:34:a2:f4:53:46:a4:
3a:4f:c4:c2:ab:73:9a:28:32:4e:ac:74:32:41:74:
46:c1:83:e1:b1:3d:4c:7e:1a:9e:3b:e2:76:2c:82:
e2:1c:5a:36:3a:cb:a3:13:fb:84:c0:37:0d:c1:8b:
cb:56:0b:07:95:cc:37:5f:5a:6b:2f:d5:9d:10:b2:
d9:79:95:72:b7:98:12:16:a5:d7:30:60:05:14:0a:
14:47:aa:83:1b:90:07:02:8e:45:1d:8f:d4:9a:14:
b9:89:15:27:ed:6d:fd:51:3f:d5:d5:48:63:09:21:
b4:88:da:0a:4b:ac:f5:65:1b:02:41:62:9e:ab:6b:
59:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:84:19:EC:6E:A4:52:E8:8D:D9:78:75:90:FE:17:BF:AF:6E:88:8E
X509v3 Authority Key Identifier:
keyid:C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/Y4QZ7G6kUuiN2Xh1kP4Xv69uiI4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.31.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:68:94:34:38:80:64:07:88:d7:ed:77:1b:98:fb:60:6f:8e:
95:b5:89:39:71:68:de:5e:c9:62:50:35:37:4a:b2:58:db:f2:
08:2d:cb:62:be:b8:5b:fd:e2:20:7e:88:7b:4f:3e:5d:fe:67:
11:fd:f8:43:b5:88:2b:24:4a:86:21:51:57:09:32:78:14:b7:
a1:93:8b:cf:b2:e1:a9:69:ab:f5:c5:b1:55:33:50:1a:32:e3:
51:16:ca:d6:22:97:34:5b:4d:47:ef:0f:ac:5f:12:7d:77:28:
b4:a7:66:1e:f8:42:0d:4e:17:8a:3a:ce:b5:5e:ca:b0:ce:3f:
ef:35:5d:e5:ba:50:39:40:88:07:24:00:b1:cf:11:29:2b:28:
d1:cc:45:4d:cf:18:b2:0f:4b:4a:a4:55:64:3c:1b:51:a9:1a:
8f:c8:c9:87:ed:5f:e5:b8:1b:e9:bd:31:11:52:aa:e5:ab:4c:
b9:67:6b:27:af:88:fc:f2:73:9b:7c:1c:43:c3:da:50:49:ad:
5a:fa:75:19:96:22:f4:fd:75:60:0a:dc:e7:68:b4:70:64:d5:
05:37:e9:39:69:a9:64:c0:f2:df:45:18:67:18:39:8b:65:2c:
df:f2:72:75:f5:83:44:12:b1:ba:39:a6:b8:5d:b4:f9:15:ac:
5d:20:84:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org