Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NKBNET/7Tx9bCymvI271kpFgVQRp-ku844.roa
File: 7Tx9bCymvI271kpFgVQRp-ku844.roa (raw, json)
Hash identifier: hMi5YV0fCRcYq2oXuXctOLJsj3/Najh+shsh5GVtH64=
Subject key identifier: ED:3C:7D:6C:2C:A6:BC:8D:BB:D6:4A:45:81:54:11:A7:E9:2E:F3:8E
Certificate issuer: /CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Certificate serial: 11FF
Authority key identifier: 80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/7Tx9bCymvI271kpFgVQRp-ku844.roa
Signing time: Fri 01 Sep 2023 09:26:44 +0000
ROA not before: Fri 01 Sep 2023 09:26:44 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7482
IP address blocks: 103.130.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4607 (0x11ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Validity
Not Before: Sep 1 09:26:44 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=ED3C7D6C2CA6BC8DBBD64A45815411A7E92EF38E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c9:36:b6:71:11:8d:1e:a2:fd:de:78:ad:95:
39:bc:ec:62:a0:62:0d:8d:b3:59:10:c6:e3:16:61:
c7:55:1e:cc:45:ea:a4:cf:aa:df:04:d8:56:23:96:
9e:2c:4a:ec:af:19:9f:50:d6:33:58:70:96:23:db:
36:e7:bd:bf:e3:6d:3d:82:0a:05:11:9d:66:a5:92:
3b:a8:20:24:11:3a:d5:af:96:98:80:ad:32:37:f6:
5e:2a:3f:ee:5c:f0:ce:08:96:52:d6:86:1e:b4:93:
c1:e6:0e:9c:db:b3:d0:e5:40:d5:7e:2a:dc:49:db:
43:48:93:bc:ac:4d:0e:0d:ec:56:75:a3:93:94:90:
2c:4e:57:e6:23:64:9e:f0:75:96:d7:07:84:95:1c:
24:3e:a6:8c:b1:73:e0:a6:8f:a5:1f:ff:47:94:58:
9d:39:28:bf:4e:ae:d6:24:36:8e:f7:86:5f:6d:a9:
2d:d3:29:5c:c4:0d:36:b3:5f:81:75:4b:39:e7:74:
79:8e:a1:37:ca:58:a0:61:d9:5f:2b:b7:ff:b6:ca:
a1:6a:1d:db:d9:7c:55:d2:c7:b4:32:a6:62:55:67:
e2:db:5f:0e:ac:be:7c:ad:a4:8b:83:8d:04:a8:f5:
87:7f:57:78:5a:92:a9:fb:d0:cf:5b:b1:dd:c3:4a:
e3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3C:7D:6C:2C:A6:BC:8D:BB:D6:4A:45:81:54:11:A7:E9:2E:F3:8E
X509v3 Authority Key Identifier:
keyid:80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/7Tx9bCymvI271kpFgVQRp-ku844.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.48.0/22
Signature Algorithm: sha256WithRSAEncryption
57:78:a9:97:64:c0:21:d1:57:ba:b8:cf:4b:90:15:59:b8:a1:
85:f8:ee:cb:5e:da:ed:d9:d2:f7:ca:62:af:41:ba:7f:cd:af:
46:8a:fb:ff:47:9a:91:c2:01:1c:1a:87:09:3e:69:13:1a:a9:
8e:08:10:67:55:78:e3:90:7f:74:f3:77:83:a9:e3:88:a8:c2:
7b:92:6a:16:7a:13:78:a9:60:40:88:38:2e:99:d9:06:f9:41:
93:45:65:ca:d9:cd:87:d0:2f:c9:f7:67:82:2a:26:dd:76:b8:
34:6f:20:f5:54:97:e1:82:88:81:6e:10:4f:03:ff:d2:d1:f8:
77:a5:b8:77:bc:83:51:44:d9:45:0f:5b:69:3a:1c:5d:44:47:
5d:25:69:c8:cd:97:07:92:63:26:68:f6:18:02:61:28:36:6c:
0e:81:1b:ab:43:45:d1:11:c6:e6:b5:dc:47:71:3e:30:f2:cb:
fa:1e:22:f1:15:23:7d:88:96:7e:2c:ce:06:31:c2:15:52:fa:
c1:0a:69:7d:3c:fb:89:b8:82:69:08:1f:e9:ec:c9:e3:97:bf:
ea:8d:2e:53:5f:74:29:24:2c:65:2e:01:a0:f0:2f:fd:cb:39:
30:61:2b:38:f3:6d:e6:e9:3c:07:25:bb:de:7f:c3:5b:ad:08:
97:36:cf:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:22 2024 by rpki-client on console-fra.rpki-client.org