Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SBNET/oWgRyaLfp_RZrA12q7WxMNkcP5E.roa
File: oWgRyaLfp_RZrA12q7WxMNkcP5E.roa (raw, json)
Hash identifier: uO1d5EB2kdXrEn6NU6Rs/NfV0H2t6pHKzgTebwzyR+o=
Subject key identifier: A1:68:11:C9:A2:DF:A7:F4:59:AC:0D:76:AB:B5:B1:30:D9:1C:3F:91
Certificate issuer: /CN=601AF0E931CFF7483DFB6E8A33315D79F32BC248
Certificate serial: 1020
Authority key identifier: 60:1A:F0:E9:31:CF:F7:48:3D:FB:6E:8A:33:31:5D:79:F3:2B:C2:48
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YBrw6THP90g9-26KMzFdefMrwkg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SBNET/oWgRyaLfp_RZrA12q7WxMNkcP5E.roa
Signing time: Wed 29 Sep 2021 02:37:40 +0000
ROA not before: Wed 29 Sep 2021 02:37:40 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18046
IP address blocks: 103.130.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4128 (0x1020)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601AF0E931CFF7483DFB6E8A33315D79F32BC248
Validity
Not Before: Sep 29 02:37:40 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A16811C9A2DFA7F459AC0D76ABB5B130D91C3F91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4a:91:36:96:ff:27:39:96:77:26:ab:e5:3b:
30:36:0d:e4:41:04:62:ab:75:91:14:2e:c9:ca:8e:
ab:ab:1e:e2:05:8d:7a:69:71:ef:28:79:90:1b:d2:
fd:b8:df:f9:88:00:db:cc:13:4f:63:ac:19:24:8d:
63:02:84:98:ad:db:fd:29:b3:aa:6a:b4:39:23:9e:
fa:73:ae:48:da:fd:b8:49:c6:28:9f:0b:47:64:5f:
06:95:ee:92:0a:be:32:e0:7c:6e:79:e3:93:57:31:
61:d4:d2:07:49:8c:5e:a4:19:26:2c:dd:47:c5:61:
27:8e:1e:81:a4:7b:0b:d0:53:49:8f:8a:4e:23:b0:
6a:99:de:d6:86:dc:d7:a7:2b:6b:c4:24:28:eb:ae:
8d:36:2f:4c:57:85:96:cd:84:df:f9:e4:5b:3f:4c:
87:29:2b:66:ed:23:a5:70:87:a3:b3:87:98:d8:db:
10:df:90:0d:48:a4:2d:56:8e:37:d7:82:dc:16:b0:
0a:ec:9a:22:db:fc:8a:8c:f8:51:16:22:be:58:9f:
1b:82:88:6b:e3:bd:aa:84:02:b5:ea:a4:42:05:75:
fb:6b:3b:43:1f:6a:34:1a:bb:7a:52:a5:6a:53:e2:
6e:1e:a7:06:e8:57:26:aa:70:37:87:b6:ba:c4:87:
14:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:68:11:C9:A2:DF:A7:F4:59:AC:0D:76:AB:B5:B1:30:D9:1C:3F:91
X509v3 Authority Key Identifier:
keyid:60:1A:F0:E9:31:CF:F7:48:3D:FB:6E:8A:33:31:5D:79:F3:2B:C2:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SBNET/YBrw6THP90g9-26KMzFdefMrwkg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YBrw6THP90g9-26KMzFdefMrwkg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SBNET/oWgRyaLfp_RZrA12q7WxMNkcP5E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.20.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:3f:2a:3c:dc:4a:83:06:89:71:d7:35:99:d2:7e:b1:21:53:
f2:ad:d4:76:74:1d:ec:32:f1:cf:fa:4a:9b:cd:80:bf:12:c4:
ab:38:c6:33:fb:c3:0e:f0:dc:fd:bc:f8:1e:5d:ce:1b:b9:15:
48:c7:46:24:fc:ed:26:c3:b5:ff:c3:64:0f:84:0f:80:9b:fd:
c3:61:cf:d7:3e:db:f5:da:e7:d8:ac:f5:d1:94:57:f2:09:37:
0c:ae:c0:1a:c0:49:08:9c:aa:23:77:64:b8:25:33:c8:72:f5:
28:b4:80:84:c8:fa:01:8b:5d:61:f9:be:3e:df:1e:70:7d:cb:
3c:d6:34:6b:62:e9:9d:7e:6c:b9:c7:8d:9e:81:c1:f7:22:0d:
cf:7b:cb:d3:da:1a:ec:d2:8c:2d:c5:56:fe:68:b7:47:1d:57:
00:b8:08:cc:c0:3b:c8:0a:6c:27:1b:d5:0b:ca:e3:51:82:32:
73:52:7b:72:ac:2a:43:bc:e5:f0:c7:f9:f6:86:50:a8:b9:44:
5f:e2:d5:e0:38:8b:1b:4c:ef:8b:f3:bd:13:81:b5:cc:d0:32:
07:31:4d:73:8c:a1:de:40:a9:d6:dd:37:d0:70:26:dd:3c:32:
ca:76:43:9d:49:a0:9a:de:4e:3a:32:01:35:87:dd:88:fa:16:
34:7b:ef:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org