Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APNT/xiItmrAXeliZpov2xbrqczSvW_Q.roa
File: xiItmrAXeliZpov2xbrqczSvW_Q.roa (raw, json)
Hash identifier: x2RaDpwJ6lNAH/A651jfJi/ZB83YELEYwX6YZ+nOoKI=
Subject key identifier: C6:22:2D:9A:B0:17:7A:58:99:A6:8B:F6:C5:BA:EA:73:34:AF:5B:F4
Certificate issuer: /CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Certificate serial: 119E
Authority key identifier: C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/xiItmrAXeliZpov2xbrqczSvW_Q.roa
Signing time: Fri 01 Sep 2023 08:04:01 +0000
ROA not before: Fri 01 Sep 2023 08:04:01 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131630
IP address blocks: 103.130.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4510 (0x119e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2528D8C5B676FD9A24DFDA7E9217457B7310263
Validity
Not Before: Sep 1 08:04:01 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C6222D9AB0177A5899A68BF6C5BAEA7334AF5BF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:07:d6:39:c5:d8:35:80:60:57:5d:a9:63:cc:
d4:53:fd:ea:9b:1b:59:a5:4f:73:e8:df:c1:fd:f3:
58:37:aa:b6:ff:c2:9f:fa:8b:1e:f2:92:fb:b4:9f:
ec:88:f2:cf:87:88:85:22:48:6f:8d:00:17:4f:86:
26:bf:15:88:fb:98:a3:50:ca:ef:71:b6:80:ec:30:
2d:6f:6b:b0:44:3a:00:74:4b:51:7f:24:02:52:20:
e9:7f:df:fd:1c:f4:6f:9b:02:6a:45:eb:0d:ca:18:
16:f7:aa:b7:d9:10:5a:e7:eb:ed:83:fd:d0:3d:d9:
7e:e6:2a:28:48:51:f7:95:ed:3b:3b:cd:87:28:8e:
ba:8c:ff:f6:ee:28:3f:d7:88:fb:93:f5:6b:42:ac:
3d:ba:a5:ec:b6:fd:45:7d:8b:7c:e1:b3:16:96:da:
43:4f:2e:d9:a4:b0:b8:36:a6:85:a2:5f:38:f7:08:
c7:30:77:b8:34:a0:0c:e2:bd:b6:14:4a:35:3d:e6:
d7:45:4f:0d:be:e8:e2:9c:2c:b5:d7:db:4e:5a:68:
a1:8e:54:a2:10:bf:3c:15:8d:fd:38:68:38:6e:55:
77:ab:67:22:ae:fb:e5:c3:cd:9b:fb:05:01:e6:86:
9f:ad:6c:4f:72:38:42:20:20:52:70:ec:0e:55:62:
55:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:22:2D:9A:B0:17:7A:58:99:A6:8B:F6:C5:BA:EA:73:34:AF:5B:F4
X509v3 Authority Key Identifier:
keyid:C2:52:8D:8C:5B:67:6F:D9:A2:4D:FD:A7:E9:21:74:57:B7:31:02:63
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/wlKNjFtnb9miTf2n6SF0V7cxAmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wlKNjFtnb9miTf2n6SF0V7cxAmM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APNT/xiItmrAXeliZpov2xbrqczSvW_Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.28.0/22
Signature Algorithm: sha256WithRSAEncryption
17:e3:f1:ed:07:9a:d3:ba:b2:99:cc:93:7e:d5:e0:f6:42:82:
8f:18:21:97:82:db:be:df:e3:c8:ca:fd:5f:49:5a:4e:d0:e7:
0c:c4:84:e9:37:7a:23:f8:db:9a:79:9a:c5:75:75:1f:6e:0a:
e4:2f:af:57:9a:84:cc:1b:7c:eb:22:7c:de:96:89:78:0f:e2:
ed:3c:55:25:f1:9a:fc:f1:ab:8e:1f:a5:fe:b8:7b:a7:b5:ce:
d9:45:79:0d:a3:c1:e5:aa:22:67:dc:8a:6e:8f:8d:3e:a2:56:
d6:4e:96:3a:a1:7b:44:4e:f0:99:83:51:c9:c3:4c:08:d8:db:
7a:2a:d7:26:89:c4:a4:b0:0a:57:52:a8:6f:c6:92:1f:0a:76:
2a:6e:a0:6e:37:6d:1f:b5:ba:0d:c7:f9:b4:47:27:09:e9:88:
8f:66:fd:c2:1d:e1:ed:08:72:87:ea:6e:0f:7b:d6:11:78:c6:
bc:7f:2c:d8:8d:45:94:87:e8:9e:87:1e:4c:3c:c1:eb:2f:a9:
02:b6:83:51:64:0d:96:26:59:ea:0c:e3:72:f8:f3:b8:27:9c:
25:3e:d8:86:4b:1b:00:4d:78:8a:43:20:75:2f:11:05:4f:b8:
e1:9e:6c:cc:12:07:ec:d8:94:3e:36:3b:a0:59:bc:6e:66:eb:
03:a0:63:40
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEZ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzI1
MjhEOEM1QjY3NkZEOUEyNERGREE3RTkyMTc0NTdCNzMxMDI2MzAeFw0yMzA5MDEw
ODA0MDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEM2MjIyRDlBQjAxNzdB
NTg5OUE2OEJGNkM1QkFFQTczMzRBRjVCRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJB9Y5xdg1gGBXXaljzNRT/eqbG1mlT3Po38H981g3qrb/wp/6
ix7ykvu0n+yI8s+HiIUiSG+NABdPhia/FYj7mKNQyu9xtoDsMC1va7BEOgB0S1F/
JAJSIOl/3/0c9G+bAmpF6w3KGBb3qrfZEFrn6+2D/dA92X7mKihIUfeV7Ts7zYco
jrqM//buKD/XiPuT9WtCrD26pey2/UV9i3zhsxaW2kNPLtmksLg2poWiXzj3CMcw
d7g0oAzivbYUSjU95tdFTw2+6OKcLLXX205aaKGOVKIQvzwVjf04aDhuVXerZyKu
++XDzZv7BQHmhp+tbE9yOEIgIFJw7A5VYlVpAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUxiItmrAXeliZpov2xbrqczSvW/QwHwYDVR0jBBgwFoAUwlKNjFtnb9miTf2n
6SF0V7cxAmMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBOVC93
bEtOakZ0bmI5bWlUZjJuNlNGMFY3Y3hBbU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L3dsS05qRnRuYjltaVRmMm42U0YwVjdjeEFtTS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQTlQveGlJdG1yQVhlbGlacG92MnhicnFj
elN2V19RLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmeCHDAN
BgkqhkiG9w0BAQsFAAOCAQEAF+Px7Qea07qymcyTftXg9kKCjxghl4Lbvt/jyMr9
X0laTtDnDMSE6Td6I/jbmnmaxXV1H24K5C+vV5qEzBt86yJ83paJeA/i7TxVJfGa
/PGrjh+l/rh7p7XO2UV5DaPB5aoiZ9yKbo+NPqJW1k6WOqF7RE7wmYNRycNMCNjb
eirXJonEpLAKV1Kob8aSHwp2Km6gbjdtH7W6Dcf5tEcnCemIj2b9wh3h7Qhyh+pu
D3vWEXjGvH8s2I1FlIfonoceTDzB6y+pAraDUWQNliZZ6gzjcvjzuCecJT7Yhksb
AE14ikMgdS8RBU+44Z5szBIH7NiUPjY7oFm8bmbrA6BjQA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:51:16 2025 by rpki-client