Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APNT/vUb2aAo-3p76FUE9EXlQsSgUh6c.roa
File: vUb2aAo-3p76FUE9EXlQsSgUh6c.roa (raw, json)
Hash identifier: eS8ZR/EdVhSF1GXfnDVniuMNLb+8iAaWC2LbP4AujcQ=
Subject key identifier: BD:46:F6:68:0A:3E:DE:9E:FA:15:41:3D:11:79:50:B1:28:14:87:A7
Certificate issuer: /CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Certificate serial: 1098
Authority key identifier: C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/vUb2aAo-3p76FUE9EXlQsSgUh6c.roa
Signing time: Thu 15 Sep 2022 02:44:07 +0000
ROA not before: Thu 15 Sep 2022 02:44:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131659
IP address blocks: 103.130.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4248 (0x1098)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Validity
Not Before: Sep 15 02:44:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BD46F6680A3EDE9EFA15413D117950B1281487A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:56:82:a4:99:b4:80:3b:df:2c:97:1a:49:4b:
3c:b0:a3:7c:62:52:25:5a:2c:28:19:b1:2f:7b:1e:
38:83:c1:e9:16:93:66:10:5a:90:66:f2:2d:29:e2:
ce:cd:d8:6b:93:9c:f9:ee:8d:b4:3e:0a:39:77:5b:
38:73:25:5a:fa:d6:af:d8:82:95:18:18:16:9f:80:
be:50:eb:c4:33:7a:53:7d:0d:e9:3a:95:9a:93:28:
ee:0f:20:40:b7:ae:07:c2:7d:ac:e5:2a:fd:c0:b2:
28:3c:fa:13:36:75:2f:58:69:8f:fa:1c:8f:fd:84:
72:af:c3:b5:8d:f1:11:13:c2:00:c7:db:fa:9f:5b:
d2:c0:a5:3c:c8:cd:a4:09:e1:0d:d5:79:b5:c2:4b:
1a:da:68:3f:4a:77:bf:a8:b6:2f:43:70:0f:3a:42:
1b:1f:24:37:17:be:24:31:e7:d1:23:6b:e8:7e:3b:
c9:7e:aa:b5:bf:43:b3:18:0d:40:b7:b1:f8:ab:97:
5b:e1:42:f5:28:10:b2:c7:aa:ec:00:b8:ce:24:a0:
ef:c8:2d:f6:be:06:75:b1:18:c6:78:4b:f5:96:65:
bc:0a:54:9b:91:14:78:5e:fe:a0:29:ee:2b:10:a0:
3b:57:29:c6:6c:62:9e:e4:8a:17:88:c8:02:a8:f2:
ee:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:46:F6:68:0A:3E:DE:9E:FA:15:41:3D:11:79:50:B1:28:14:87:A7
X509v3 Authority Key Identifier:
keyid:C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/vUb2aAo-3p76FUE9EXlQsSgUh6c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.28.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:53:74:94:44:0b:6a:32:6d:a3:6d:98:3d:65:e9:16:83:e3:
05:d7:5c:eb:02:70:13:26:8e:73:1a:43:b6:f6:ed:39:0d:15:
ff:16:b6:5a:07:9f:dd:82:d1:cb:18:9f:56:2e:13:7b:b8:01:
83:b8:a6:ec:7c:5a:62:f3:ca:4c:07:d6:03:73:25:29:02:67:
97:20:00:b0:60:72:f7:5f:ea:84:40:b9:cb:c7:10:1e:39:54:
e4:16:de:77:15:9e:79:83:af:4f:9c:ff:a8:6c:8a:67:c4:f7:
9e:5f:c0:68:92:95:01:cb:07:9f:45:9f:36:91:26:6c:aa:7a:
ac:69:f0:49:de:fd:f1:a5:3c:85:c7:84:a9:59:62:7d:c5:40:
6f:cc:63:79:a7:4a:9c:8f:42:60:6c:6c:c7:8d:00:cd:96:39:
d4:0e:13:c6:70:19:ff:6d:21:e3:44:28:e5:c5:8a:49:56:aa:
54:1b:4a:fa:eb:17:ce:12:3f:cd:60:c4:5f:e7:53:49:73:b8:
d8:be:78:f6:c2:01:e7:26:b3:b7:e4:c1:20:4b:be:93:89:9e:
02:bf:4d:9a:fa:4e:c0:71:af:f6:ed:71:3b:d4:62:40:3c:f9:
ef:59:b0:e6:0b:e4:82:f6:26:55:ac:af:62:e5:00:62:b2:0c:
d1:6c:a0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:59 2024 by rpki-client on console-ams.rpki-client.org