Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APNT/uI8-QyUfXHLegNC9-_aJEBrwKrc.roa
File: uI8-QyUfXHLegNC9-_aJEBrwKrc.roa (raw, json)
Hash identifier: qlc3ts/knTV2BEkSEmOpdEWxvWRzH+P/FT5rwqaWB64=
Subject key identifier: B8:8F:3E:43:25:1F:5C:72:DE:80:D0:BD:FB:F6:89:10:1A:F0:2A:B7
Certificate issuer: /CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Certificate serial: 0ED6
Authority key identifier: C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/uI8-QyUfXHLegNC9-_aJEBrwKrc.roa
Signing time: Tue 12 Jan 2021 08:34:07 +0000
ROA not before: Tue 12 Jan 2021 08:34:07 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131659
IP address blocks: 103.130.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3798 (0xed6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Validity
Not Before: Jan 12 08:34:07 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B88F3E43251F5C72DE80D0BDFBF689101AF02AB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:72:9e:b0:64:db:25:eb:42:43:bc:f2:c7:
28:9e:d7:cb:61:d6:ef:8f:d9:ff:7d:ee:54:9c:7e:
c9:c2:30:a6:a3:33:3a:7b:b5:8e:96:ca:25:19:9b:
22:68:84:65:e0:7c:5e:9c:c2:6e:1e:c3:c7:d3:6f:
7e:1d:02:22:7a:bc:c0:14:e2:2e:89:7e:d2:b8:ca:
17:28:95:96:42:28:66:16:3c:da:76:c9:a3:2e:f1:
86:63:2d:32:ea:c4:48:77:be:06:37:38:86:68:34:
7d:86:a6:1d:13:f4:6b:0a:a8:e8:0f:94:ab:da:68:
b2:5a:42:09:8d:1d:0a:1a:c2:18:19:cf:52:cd:cf:
e5:f3:b8:a7:dd:6c:b5:75:16:b0:8a:02:2b:ca:02:
ef:a9:96:a9:b2:69:be:8c:51:b0:3a:f7:20:2a:9d:
be:ad:ac:88:d3:4e:be:48:32:e7:97:f9:71:53:93:
0d:8f:86:14:19:7d:0f:d6:e2:0f:5f:7e:85:68:e1:
be:3c:a7:85:d2:1a:fe:8e:e1:92:56:0f:97:28:f1:
8f:e1:d9:30:cb:d5:c1:20:64:37:79:ec:f9:56:02:
4b:1e:93:4f:b2:fa:3c:c5:ec:d8:08:48:49:2a:5e:
b7:e2:35:ed:78:c3:5f:16:a4:fc:a0:1e:2e:b6:13:
8c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8F:3E:43:25:1F:5C:72:DE:80:D0:BD:FB:F6:89:10:1A:F0:2A:B7
X509v3 Authority Key Identifier:
keyid:C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/uI8-QyUfXHLegNC9-_aJEBrwKrc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.31.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:25:1e:36:e4:22:a6:43:31:bf:19:45:84:c5:0f:61:a7:0e:
26:69:9b:0a:95:69:5c:13:0e:68:da:e9:ae:ae:8b:80:28:cd:
50:a7:60:8c:f0:0b:95:a4:0c:22:c1:de:fc:e0:0c:d8:3e:fe:
7a:e6:cd:d4:f8:bf:c9:af:b2:19:a4:07:84:64:59:0b:cc:fe:
db:9d:70:94:1b:a3:2c:ce:7a:f7:12:da:34:b1:66:81:52:22:
0a:04:af:f4:cf:ab:c6:1a:9c:7d:24:d4:0e:fb:1c:28:21:a7:
ed:19:d5:c1:2b:cb:89:a4:15:26:6e:39:b7:bd:17:d7:17:70:
96:c7:62:e0:86:36:aa:b7:30:f9:95:e4:aa:7b:ec:a4:dd:8a:
29:03:0a:bf:48:d7:43:06:24:70:74:30:bb:f6:26:39:b0:0f:
ea:ee:4e:7c:a6:cf:b4:1f:04:a5:f4:e0:24:d1:a0:a6:c5:7d:
3b:22:ea:e2:35:0c:3e:18:1c:79:f6:eb:a7:5c:1b:a1:db:8e:
9c:43:f8:7c:3d:5b:7a:36:5a:72:ee:bb:f4:ee:19:e7:78:35:
bd:4e:2c:df:5e:85:93:7e:fe:d8:9d:0e:2f:c9:54:9a:be:e3:
c3:53:64:30:ad:85:88:2c:02:82:7a:93:88:8f:4b:7c:02:9b:
72:c6:83:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org