Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KSTV/WQnuAbBLm0e9WQze_qtcmDxFYVg.roa
File: WQnuAbBLm0e9WQze_qtcmDxFYVg.roa (raw, json)
Hash identifier: O+rPEtCgJl6hrMB1mVnvFP3qC2W+3DkgisBiuzlhh6w=
Subject key identifier: 59:09:EE:01:B0:4B:9B:47:BD:59:0C:DE:FE:AB:5C:98:3C:45:61:58
Certificate issuer: /CN=9EEBB531831504906C0086DB42969683D64BBAC8
Certificate serial: 0E49
Authority key identifier: 9E:EB:B5:31:83:15:04:90:6C:00:86:DB:42:96:96:83:D6:4B:BA:C8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/nuu1MYMVBJBsAIbbQpaWg9ZLusg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KSTV/WQnuAbBLm0e9WQze_qtcmDxFYVg.roa
Signing time: Tue 29 Sep 2020 10:04:49 +0000
ROA not before: Tue 29 Sep 2020 10:04:49 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18046
IP address blocks: 103.130.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3657 (0xe49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9EEBB531831504906C0086DB42969683D64BBAC8
Validity
Not Before: Sep 29 10:04:49 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5909EE01B04B9B47BD590CDEFEAB5C983C456158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:03:28:d4:60:e6:99:42:8e:ac:1b:c9:a8:6e:
41:1f:db:f1:85:d3:c5:99:a6:0e:64:2f:11:58:16:
fd:d3:4b:cb:93:4e:82:b9:26:04:0a:66:15:a0:22:
7e:1f:a1:0a:64:c0:04:d4:f7:54:8c:83:af:d7:a5:
c3:4a:10:74:3e:ff:17:02:b1:fa:05:d9:37:6a:ba:
f4:d4:e0:f7:54:78:55:50:11:ca:1b:23:6c:78:f9:
f6:7c:c3:14:73:ec:3b:80:46:c7:6d:5d:35:da:cc:
b6:9e:3a:40:26:8b:c6:1f:ce:f2:15:7a:d1:d3:b2:
48:b1:04:a4:d1:37:27:45:27:90:82:bc:97:10:55:
d4:d4:c7:94:8d:b0:15:b8:2f:69:56:52:ed:f1:04:
ea:c4:2f:f7:c5:e5:61:b8:a7:f1:14:fb:cc:51:90:
71:6d:6d:81:0a:aa:54:44:88:17:cc:f0:72:b5:8d:
b7:da:80:b9:9c:0c:e9:7f:b7:b7:bd:94:8e:99:bd:
80:a9:01:74:9f:67:25:c5:d0:9a:ad:e0:80:b8:92:
8e:9e:2c:1e:97:5d:56:36:e6:ce:b1:1e:5b:91:8c:
65:cd:7b:b3:2f:c7:9e:2c:29:40:97:26:7d:5a:dc:
2b:91:7c:29:7b:2a:68:bb:62:1f:9e:a6:60:6e:83:
dd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:09:EE:01:B0:4B:9B:47:BD:59:0C:DE:FE:AB:5C:98:3C:45:61:58
X509v3 Authority Key Identifier:
keyid:9E:EB:B5:31:83:15:04:90:6C:00:86:DB:42:96:96:83:D6:4B:BA:C8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KSTV/nuu1MYMVBJBsAIbbQpaWg9ZLusg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nuu1MYMVBJBsAIbbQpaWg9ZLusg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KSTV/WQnuAbBLm0e9WQze_qtcmDxFYVg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.24.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:98:85:ed:59:f2:48:8d:28:ce:af:d2:ba:dd:be:6e:70:82:
fb:b8:9e:60:5e:2f:b1:a9:a3:0e:51:e6:24:c7:41:b5:0c:8c:
01:8b:bb:d1:6f:9b:14:61:cb:f5:61:aa:e4:61:c3:4d:27:44:
31:a7:2e:64:5e:55:b9:62:7a:e4:f6:da:d4:7d:a6:20:f3:88:
fa:83:14:4e:26:e0:5e:38:b2:69:fe:9b:73:0b:f4:56:9a:d7:
30:9c:5a:16:81:82:91:8b:43:cc:76:1e:26:a5:7c:31:b2:f9:
6c:4a:0a:f2:0c:ca:c3:42:9a:87:48:46:0a:a3:16:1b:4d:a4:
1e:df:f2:6f:ff:d3:16:2e:a7:20:24:f2:c9:1a:8b:ac:6e:c5:
84:41:46:2c:fe:bf:e1:9b:cd:b3:5b:23:eb:49:b8:d1:86:0f:
f5:e4:fa:ff:20:04:83:ef:27:df:84:86:a3:da:23:33:3a:ec:
ca:bc:89:0c:a5:a1:e5:34:3f:73:70:94:54:c6:24:01:d5:de:
10:37:6c:a4:88:97:ce:35:07:3a:19:66:f2:ff:5a:d6:4f:9c:
37:5f:a7:d3:06:b4:c4:6a:31:b9:e6:fa:4c:f5:e6:fc:74:6d:
5c:17:45:20:b9:b9:72:3d:eb:70:bd:bb:51:95:6d:fd:fd:24:
62:83:d5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org