Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NKBNET/6OSMSzbV_JAgklRSsXuFpCNz6xk.roa
File: 6OSMSzbV_JAgklRSsXuFpCNz6xk.roa (raw, json)
Hash identifier: ItlzAefTVIqa0GUlDSP0e3WYufJ7zhc87d4Na6r0Z58=
Subject key identifier: E8:E4:8C:4B:36:D5:FC:90:20:92:54:52:B1:7B:85:A4:23:73:EB:19
Certificate issuer: /CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Certificate serial: 1201
Authority key identifier: 80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/6OSMSzbV_JAgklRSsXuFpCNz6xk.roa
Signing time: Fri 01 Sep 2023 09:26:44 +0000
ROA not before: Fri 01 Sep 2023 09:26:44 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9922
IP address blocks: 103.130.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4609 (0x1201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Validity
Not Before: Sep 1 09:26:44 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E8E48C4B36D5FC9020925452B17B85A42373EB19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:49:a6:21:de:03:cc:6d:1b:5b:f6:00:7b:
fe:b6:1f:12:8c:25:e4:2b:6a:cd:e6:9e:b5:ef:e0:
5c:ef:80:1c:f8:31:23:ab:8d:bc:4f:d8:f9:90:95:
69:dc:25:22:17:62:8d:3d:b4:33:66:2f:ae:77:66:
c3:08:33:20:21:80:63:0e:54:6d:7b:ae:64:22:84:
8c:13:4d:95:3f:64:3f:d9:0f:87:98:a1:a1:24:fd:
68:58:87:a6:11:0a:58:ad:43:9e:59:f3:26:16:a0:
52:15:58:8e:62:5c:0c:21:b7:eb:69:9c:3b:95:bf:
0c:eb:36:e7:f6:f5:3c:3e:50:b6:96:52:3d:b2:a3:
78:81:26:0a:26:f1:71:84:e3:b9:b8:7a:35:26:db:
a9:3c:db:e5:9b:b8:3b:1f:d3:e7:c7:47:61:fc:71:
ca:43:d5:5c:3d:94:12:65:6f:b6:24:cd:63:e1:77:
74:0e:fe:66:53:5c:a3:fb:f1:02:6b:24:27:4f:99:
b6:a1:ee:48:71:20:cb:3f:4c:cf:4a:1d:4f:72:3f:
9a:d8:a8:fd:ae:87:25:ab:49:df:51:46:6c:f7:01:
d6:fb:67:34:b4:fd:13:68:73:24:8a:57:47:b8:4e:
1f:fc:4c:66:10:7d:8d:74:db:67:31:10:a4:c9:df:
3e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E4:8C:4B:36:D5:FC:90:20:92:54:52:B1:7B:85:A4:23:73:EB:19
X509v3 Authority Key Identifier:
keyid:80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/6OSMSzbV_JAgklRSsXuFpCNz6xk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.48.0/22
Signature Algorithm: sha256WithRSAEncryption
97:18:03:c4:3d:7e:55:46:3f:67:68:fb:e5:27:3e:c2:0d:16:
14:0b:ee:25:85:05:2f:7b:15:a1:34:32:22:3e:a7:ba:aa:83:
b6:80:88:f4:10:c4:32:5e:38:97:e6:c0:3b:bd:d5:ea:74:0f:
4f:6d:49:6c:d6:e0:c0:31:e8:fa:ca:28:c6:79:60:19:9c:4c:
48:11:ef:fc:19:03:58:6a:74:50:cc:43:ef:8b:48:79:5e:ec:
d3:a8:1d:72:e7:6e:d2:96:5f:e8:fd:f5:27:2d:31:50:e1:60:
bb:d1:4f:a2:5b:b6:b0:34:b6:e3:65:73:b9:8b:11:f1:5c:50:
82:1e:fc:4f:e1:dd:7f:ae:fe:8b:bc:79:ce:00:46:d9:fe:e5:
4f:b8:99:50:ea:31:8c:04:01:4f:d4:d7:75:a1:71:90:d2:b2:
48:fb:10:d3:73:fe:e9:a1:cd:24:98:b2:09:41:9a:ab:05:06:
ed:ca:10:7e:1a:b2:d3:4f:17:76:01:0e:41:cf:8f:c2:d6:60:
32:c4:87:00:0b:7b:a9:e5:b2:54:22:1a:b6:9a:5e:49:6b:ec:
9f:55:aa:9a:9a:f2:b7:ef:c3:4e:e8:79:36:09:8b:21:13:d1:
61:7b:e1:2b:29:10:8e:01:c6:12:e4:61:4f:bc:3e:fe:3f:82:
df:17:4f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:15 2024 by rpki-client on console-ams.rpki-client.org