Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APNT/bkbbRWOaUcBBQ7BMfK1yJg9jKac.roa
File: bkbbRWOaUcBBQ7BMfK1yJg9jKac.roa (raw, json)
Hash identifier: GDYuSiq/gfV4+1lTIwmkpFWRKGgcJDk3zlsGE/kmC1c=
Subject key identifier: 6E:46:DB:45:63:9A:51:C0:41:43:B0:4C:7C:AD:72:26:0F:63:29:A7
Certificate issuer: /CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Certificate serial: 0FDF
Authority key identifier: C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/bkbbRWOaUcBBQ7BMfK1yJg9jKac.roa
Signing time: Tue 18 Jan 2022 06:10:34 +0000
ROA not before: Tue 18 Jan 2022 06:10:34 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131659
IP address blocks: 103.130.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4063 (0xfdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Validity
Not Before: Jan 18 06:10:34 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6E46DB45639A51C04143B04C7CAD72260F6329A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:00:de:ca:18:bc:08:3c:2a:6c:97:e3:9e:
02:70:f8:2d:57:63:5f:3e:d9:b7:f8:0f:37:ef:9e:
13:86:b8:ab:68:c1:37:c1:7a:b2:05:9d:80:c6:30:
a6:32:e2:69:fa:62:c6:d9:05:4d:f3:93:23:05:b0:
05:d6:da:a6:b5:d9:14:36:b8:5f:3e:ab:28:55:b0:
0d:7f:da:22:3f:07:16:a4:02:17:19:a0:3d:01:f2:
22:68:6e:b3:fe:ce:a1:b1:c7:a7:65:73:dd:30:fe:
b4:ca:cf:c3:77:be:6a:45:96:60:31:d9:91:31:ac:
45:fc:22:f3:9d:23:f3:47:09:85:58:7f:a2:bb:71:
02:b4:38:66:00:d9:b0:02:49:4a:1b:03:04:de:16:
a8:d7:44:ee:50:92:1b:cf:a0:f4:84:03:56:b7:6e:
e8:fc:4c:30:7f:f6:46:1c:19:6a:06:72:f7:b3:5b:
cf:94:1c:80:ad:53:d5:69:65:a1:73:0d:86:1e:de:
64:35:c9:c5:00:a2:b6:be:4f:50:fe:99:12:c8:db:
e2:20:2e:af:46:8d:4f:17:e4:9c:2c:03:af:3c:ee:
cd:63:f0:4e:0b:ba:f9:17:9a:e1:01:68:14:76:0e:
73:31:2c:c7:8c:71:cc:a8:b1:ac:cd:86:c4:39:92:
61:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:46:DB:45:63:9A:51:C0:41:43:B0:4C:7C:AD:72:26:0F:63:29:A7
X509v3 Authority Key Identifier:
keyid:C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/bkbbRWOaUcBBQ7BMfK1yJg9jKac.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.28.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:ad:20:88:7d:61:2f:d2:86:f8:85:b2:90:af:29:62:16:cd:
18:f2:69:b2:31:d2:de:69:15:1f:e1:24:bf:20:b6:39:1b:da:
38:dd:8b:86:19:3b:73:1c:be:97:60:0c:00:a5:10:10:d3:1b:
ef:88:3b:3f:f3:f5:a3:94:0f:3e:5d:88:ff:9e:03:9f:6c:a0:
ec:12:2a:ea:04:3a:6f:5b:1b:0c:c2:f2:de:0b:44:65:a7:ea:
69:23:48:9c:6e:0e:70:ad:9f:48:98:27:8c:2b:cb:12:60:f0:
18:4f:7e:56:aa:26:2d:75:bc:4c:6b:06:25:48:b2:7a:7b:2c:
3a:27:ea:e6:19:e8:af:59:6a:95:dd:aa:ec:16:4e:58:d9:fe:
b4:3a:f3:a5:d9:7a:8c:2e:98:1e:f7:8b:85:90:c1:6e:c5:3b:
40:0a:6c:70:54:1c:2d:6b:29:9b:21:c5:3f:e3:7e:f9:a5:2a:
51:e4:e2:63:d1:60:cc:d6:16:f4:b6:93:f4:cb:36:0f:55:bc:
73:27:09:80:6d:87:09:ec:f3:13:5c:e1:15:5f:1e:b3:73:60:
0a:9c:fb:5e:8e:d6:5c:30:8e:80:1a:27:41:59:78:d7:78:2a:
f8:c7:fa:47:3a:fa:74:b7:23:26:67:a1:c1:ab:6f:7d:9d:1c:
2e:b7:c3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:59 2024 by rpki-client on console-ams.rpki-client.org