Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SBNET/22Rb3cVNfpuohRGfdbzGPjmL240.roa
File: 22Rb3cVNfpuohRGfdbzGPjmL240.roa (raw, json)
Hash identifier: o2TmbWNwvZSCUrNmdC+8oJ12QJMogbaK2q/BHkPYF30=
Subject key identifier: DB:64:5B:DD:C5:4D:7E:9B:A8:85:11:9F:75:BC:C6:3E:39:8B:DB:8D
Certificate issuer: /CN=601AF0E931CFF7483DFB6E8A33315D79F32BC248
Certificate serial: 11F8
Authority key identifier: 60:1A:F0:E9:31:CF:F7:48:3D:FB:6E:8A:33:31:5D:79:F3:2B:C2:48
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YBrw6THP90g9-26KMzFdefMrwkg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SBNET/22Rb3cVNfpuohRGfdbzGPjmL240.roa
Signing time: Fri 01 Sep 2023 09:40:53 +0000
ROA not before: Fri 01 Sep 2023 09:40:53 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18046
IP address blocks: 103.130.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4600 (0x11f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601AF0E931CFF7483DFB6E8A33315D79F32BC248
Validity
Not Before: Sep 1 09:40:53 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DB645BDDC54D7E9BA885119F75BCC63E398BDB8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a6:da:5d:b2:a6:65:e3:aa:5b:fc:a5:a8:b9:
5b:5a:06:56:b3:61:4b:ec:5f:60:72:d4:fc:45:e3:
80:e1:59:37:40:8c:20:73:8e:56:4e:06:96:3a:57:
54:91:d2:75:82:ae:e1:a6:11:ff:ec:93:d7:d3:38:
a9:12:8e:c2:4d:c9:b1:7e:e2:f7:23:e8:c1:2e:b2:
88:0f:66:e5:12:75:93:30:67:6c:ea:6a:20:c9:b4:
22:8f:7b:ff:ed:1c:39:9b:00:e6:90:85:0d:3d:03:
2c:8e:aa:6e:62:08:bc:57:c1:5b:5a:60:dd:14:85:
10:ea:34:c1:49:5d:0e:39:70:f8:0e:db:4a:79:d2:
1f:8a:52:27:6d:f9:7d:0e:97:4e:72:6c:c3:70:76:
d8:3e:c4:40:48:86:aa:44:b6:1d:09:c5:45:38:0b:
88:52:c5:46:5e:93:6a:50:2a:e9:0d:ed:a9:3f:99:
db:a8:75:cd:b0:74:7b:79:73:29:96:78:f2:5e:ab:
c7:6f:51:99:03:a2:05:bb:e1:ef:50:65:03:93:48:
d7:97:ff:31:23:06:67:17:a6:4b:d1:52:65:f1:23:
47:b0:d5:8b:81:53:f9:ca:20:a0:40:f5:fd:ac:ad:
32:5e:84:f1:52:75:4d:0f:f0:d3:59:ca:60:a1:da:
10:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:64:5B:DD:C5:4D:7E:9B:A8:85:11:9F:75:BC:C6:3E:39:8B:DB:8D
X509v3 Authority Key Identifier:
keyid:60:1A:F0:E9:31:CF:F7:48:3D:FB:6E:8A:33:31:5D:79:F3:2B:C2:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SBNET/YBrw6THP90g9-26KMzFdefMrwkg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YBrw6THP90g9-26KMzFdefMrwkg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SBNET/22Rb3cVNfpuohRGfdbzGPjmL240.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.20.0/22
Signature Algorithm: sha256WithRSAEncryption
67:79:79:4a:79:d3:c9:9f:1c:8e:4b:de:b5:ca:da:67:f2:2b:
44:ea:25:f6:d9:6b:5c:c4:ff:cc:b8:09:67:68:44:46:80:59:
09:97:6e:51:3d:9f:ba:7b:9a:bc:eb:b8:5f:c3:7f:94:89:7c:
3c:f7:a0:6b:1e:9f:de:10:9b:14:e8:1e:4f:93:ca:77:a6:70:
62:39:3b:57:26:2f:ab:1c:86:f4:be:0f:2b:9d:fd:d7:0f:f0:
27:e9:e1:ea:d9:40:08:34:f2:c3:57:3e:ac:bb:fd:08:cc:ed:
4e:84:b5:e0:a5:9d:d4:05:aa:8f:16:27:37:f9:cb:be:80:07:
66:2d:d6:ba:09:71:45:f2:d9:6c:b5:a0:e0:04:f7:ea:b9:ab:
08:8f:6d:55:ed:75:b0:06:35:ec:80:e4:67:bc:f2:b4:5a:fc:
ac:4f:cb:f5:ad:39:22:8e:b1:d8:2d:a8:03:6e:fd:af:0c:70:
d9:ea:c3:93:27:45:af:d0:7c:00:83:e8:c7:ac:65:ae:fd:11:
ed:37:21:47:36:5c:fb:a7:ef:bd:b5:07:38:d4:0b:27:44:c9:
21:fa:fb:fc:81:b0:2a:a1:01:95:de:ef:48:b8:b2:c6:69:12:
6e:74:9a:e8:b1:cf:2c:28:7f:43:5b:8c:4c:3e:84:06:ba:dc:
0c:bd:27:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:27 2025 by rpki-client