Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APNT/aqI07Is7mx0EPjwVm8Q6Ahat0PY.roa
File: aqI07Is7mx0EPjwVm8Q6Ahat0PY.roa (raw, json)
Hash identifier: germLBho3sWRHUDrikCBu8kgphhl3eFd/dUMEPM9ps4=
Subject key identifier: 6A:A2:34:EC:8B:3B:9B:1D:04:3E:3C:15:9B:C4:3A:02:16:AD:D0:F6
Certificate issuer: /CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Certificate serial: 0FEB
Authority key identifier: C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/aqI07Is7mx0EPjwVm8Q6Ahat0PY.roa
Signing time: Fri 21 Jan 2022 10:42:46 +0000
ROA not before: Fri 21 Jan 2022 10:42:46 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131659
IP address blocks: 103.130.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4075 (0xfeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Validity
Not Before: Jan 21 10:42:46 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6AA234EC8B3B9B1D043E3C159BC43A0216ADD0F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a8:3f:75:48:95:59:cf:2f:5a:41:a0:cb:28:
89:ed:1a:b3:6e:67:45:50:33:e5:76:45:0a:57:cc:
fc:75:d7:7c:04:bc:bc:fa:15:a9:03:27:87:59:38:
e9:81:d2:3b:84:57:f4:51:f4:c8:92:b1:12:27:1a:
4f:ff:37:1d:29:48:37:e3:83:dd:65:24:af:ad:32:
9a:51:37:2e:94:7b:c3:99:50:f5:80:98:81:e2:2d:
ad:e5:5d:a7:5c:32:04:b9:71:f5:31:c9:55:35:cd:
f6:12:c4:e7:cd:c1:8b:08:aa:a5:a5:c4:46:1e:59:
95:cd:d0:2a:73:3f:65:e5:38:7d:d3:19:c4:ff:28:
27:85:9c:2e:ab:2f:ce:6c:b3:76:47:40:dd:ca:07:
47:04:dd:62:16:0d:d8:6f:34:63:5d:e8:3e:6f:d5:
cb:24:0a:73:42:4e:1e:49:5e:4b:99:fe:3c:57:93:
cb:ee:25:8d:d9:bd:03:e2:8a:30:43:ae:3f:05:94:
b0:cb:c6:bc:b5:92:ad:cb:de:c4:85:eb:a3:f2:ac:
b3:21:d2:3e:06:1f:a0:09:8d:4a:49:4e:9d:06:c2:
00:9b:1c:95:4d:8c:2c:d7:7d:0d:5c:73:77:e2:2f:
68:1e:4e:68:78:dd:35:54:42:24:bf:00:de:bf:6c:
8e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A2:34:EC:8B:3B:9B:1D:04:3E:3C:15:9B:C4:3A:02:16:AD:D0:F6
X509v3 Authority Key Identifier:
keyid:C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/aqI07Is7mx0EPjwVm8Q6Ahat0PY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.30.0/24
Signature Algorithm: sha256WithRSAEncryption
13:1b:82:c3:e7:5d:96:96:11:7c:01:f7:2a:34:be:1a:f0:2f:
c3:f8:09:86:9c:ff:21:12:16:25:c7:c3:f6:30:8d:01:96:ca:
f0:bb:9b:84:42:2c:03:4d:7f:5d:4b:d0:8c:7b:f9:d8:54:72:
ba:9b:15:d3:e5:e2:0c:22:8a:97:dd:43:1c:ee:a8:bd:10:e2:
80:0e:8b:72:47:5f:6e:ca:05:ca:ee:99:24:ff:90:33:88:46:
36:4d:28:93:98:cb:b7:cb:9b:8b:03:f1:25:16:4b:82:95:4f:
b9:1c:b1:59:8a:24:d1:b4:95:ed:37:6b:01:dc:da:08:ab:5f:
70:ca:dd:e6:d7:8a:e5:8a:0d:05:3b:6a:e2:c9:d0:ad:c9:f7:
0e:8c:96:06:2c:36:3c:51:45:5c:ea:05:bf:53:0d:ee:1b:ce:
1e:dc:a6:5a:10:8b:6b:58:cc:6d:62:51:96:cf:16:a0:b9:83:
9c:a5:19:18:50:35:39:96:c1:51:8d:e3:2a:0b:72:ee:a5:78:
84:d7:56:7a:70:7e:ac:22:0d:c9:3c:7e:90:92:2e:6b:0d:76:
d3:3f:d9:40:14:61:b1:fa:99:c2:bd:6d:a2:a0:04:2c:5b:c2:
b5:25:71:35:17:0b:8e:93:40:cc:73:24:35:1e:05:9c:ef:6e:
3f:ea:f3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:59 2024 by rpki-client on console-ams.rpki-client.org