Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/ApRey3P7bennjaSyYpza5krTo1E.roa
File: ApRey3P7bennjaSyYpza5krTo1E.roa (raw, json)
Hash identifier: JMLJsJQBsqtR2aEkE9bbKTFhnKc/hpVmm4YAV+Bzsjw=
Subject key identifier: 02:94:5E:CB:73:FB:6D:E9:E7:8D:A4:B2:62:9C:DA:E6:4A:D3:A3:51
Certificate issuer: /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Certificate serial: 0B4B
Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/ApRey3P7bennjaSyYpza5krTo1E.roa
Signing time: Fri 01 Sep 2023 09:11:16 +0000
ROA not before: Fri 01 Sep 2023 09:11:16 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131619
IP address blocks: 103.116.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2891 (0xb4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Validity
Not Before: Sep 1 09:11:16 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=02945ECB73FB6DE9E78DA4B2629CDAE64AD3A351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ec:7f:22:81:a8:d5:b3:08:0e:81:c7:64:77:
36:7f:0d:4f:6e:aa:df:cf:6b:44:11:7d:63:c8:af:
87:9e:31:be:9d:47:88:64:2d:41:8f:91:ae:1a:3b:
45:23:72:c6:e5:32:8b:d1:78:71:1b:0a:d7:e3:55:
06:70:74:48:f5:b8:98:53:d3:55:10:9a:9a:18:d0:
dd:1f:9d:6e:32:0b:9c:a3:b4:79:9e:97:68:32:19:
b9:73:b0:f5:e7:c3:67:ec:70:06:54:eb:66:4c:d9:
81:9e:b5:dc:d0:85:f6:8a:d3:60:d9:99:ec:c3:5a:
b3:a0:ac:5e:97:fe:87:65:57:72:dc:d9:1b:11:1e:
c9:0b:bd:79:fd:66:7f:92:fe:ec:5c:c0:b1:0f:bb:
1a:00:23:eb:a3:32:fd:3e:d1:d2:ca:50:92:73:47:
a8:42:61:32:80:ce:63:2a:e4:5c:02:79:9a:41:7a:
7d:b3:e1:a6:2c:91:cd:25:7c:bc:51:bf:4e:70:ca:
71:25:11:8e:49:d2:d5:df:b3:b0:16:80:6f:ae:a8:
5b:a3:a4:f1:c7:1e:70:c9:ee:5e:9d:0a:5d:0c:11:
bb:b1:4d:36:95:01:93:a3:1f:18:33:05:de:33:5b:
a4:f0:b7:56:b3:a5:46:11:29:55:b1:7f:ae:5a:ec:
9a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:94:5E:CB:73:FB:6D:E9:E7:8D:A4:B2:62:9C:DA:E6:4A:D3:A3:51
X509v3 Authority Key Identifier:
keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/ApRey3P7bennjaSyYpza5krTo1E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.97.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:7b:61:09:61:b5:93:28:38:91:3d:d6:2a:f5:48:5f:04:94:
9c:2a:82:1f:0d:2c:5d:84:23:3a:aa:aa:3a:93:2d:28:31:b4:
e1:d9:cf:01:07:d4:76:26:e7:33:a7:fe:b4:5e:04:4d:dd:28:
23:71:13:40:f4:ce:14:de:54:02:84:bb:14:97:bb:2c:62:76:
8e:07:24:a7:a5:b5:bf:a4:86:d2:1d:2c:4b:ee:d5:75:9f:23:
1c:56:e5:1c:db:ee:cd:9d:a6:3b:42:0c:2e:05:4f:03:4a:88:
81:56:e1:e6:9e:82:68:a0:15:75:89:22:f3:72:93:4c:43:ca:
6b:2a:26:b8:68:7f:ec:36:9e:21:3d:2d:51:aa:3b:01:fe:20:
05:83:3a:21:14:ae:7d:a8:91:8c:f2:b3:fe:e8:29:db:f6:4f:
97:a0:27:2e:3f:c3:54:a9:6b:7c:10:10:9d:f1:fe:ce:7f:2e:
b2:6c:f8:94:77:6c:73:fe:ec:c3:b1:50:89:25:0f:19:13:98:
1e:6f:be:87:38:10:1f:a5:65:55:a1:d0:22:3d:8c:5e:2b:ae:
37:09:cb:bd:82:d5:82:2f:da:b3:bc:a8:cd:91:89:45:91:52:
d0:60:15:6f:07:87:af:e1:a8:a9:fe:70:8f:ba:ee:c2:c9:4a:
d8:24:2b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org