Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/mxrO6hR1KycE9DOL3SkXD8hKCAM.roa
File: mxrO6hR1KycE9DOL3SkXD8hKCAM.roa (raw, json)
Hash identifier: 7vta074bwnqYNKGEI9HeD5SXmNSOTy2+IdhUXMNCEnA=
Subject key identifier: 9B:1A:CE:EA:14:75:2B:27:04:F4:33:8B:DD:29:17:0F:C8:4A:08:03
Certificate issuer: /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Certificate serial: 11A2
Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/mxrO6hR1KycE9DOL3SkXD8hKCAM.roa
Signing time: Fri 01 Sep 2023 10:20:08 +0000
ROA not before: Fri 01 Sep 2023 10:20:08 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131636
IP address blocks: 103.130.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4514 (0x11a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Validity
Not Before: Sep 1 10:20:08 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9B1ACEEA14752B2704F4338BDD29170FC84A0803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d1:8d:ed:25:a9:2b:31:7a:86:1a:f8:57:7e:
1d:5f:35:b6:f3:fe:7a:87:26:51:ef:29:68:80:e2:
3e:ef:96:bd:e1:5a:3d:ed:4c:bc:d0:52:a1:9a:8d:
cf:4a:bb:5a:7a:1f:23:3f:5b:e0:01:94:8c:eb:85:
7b:9c:96:1c:39:e2:87:78:89:03:75:69:30:8c:8e:
2a:c1:52:38:cd:59:e1:42:7b:8d:ea:cd:de:5d:02:
51:cf:05:12:17:2a:f5:54:89:b3:2c:88:39:13:69:
ad:3c:7d:ae:9c:38:d9:42:ac:e0:46:a7:ef:15:ac:
c4:82:06:89:45:b1:a5:00:f7:da:53:5f:4a:c6:90:
42:d4:e5:d1:ef:2d:b6:72:9f:ee:b9:4e:41:b9:d9:
e5:45:95:52:25:0d:fb:67:a7:8b:18:08:5a:fd:68:
e4:81:25:0a:e4:ab:44:ff:07:a1:21:b5:fb:bf:67:
a3:02:26:61:9d:a4:d3:f4:29:8b:f0:fa:29:da:b8:
9d:16:a6:e7:6a:f3:a2:36:d0:63:1b:21:09:1c:3c:
9f:84:a0:87:1c:f9:81:15:7b:d6:8b:f9:a3:c0:a8:
5b:dd:38:57:de:7d:11:60:5e:a3:ed:63:13:95:52:
52:cd:94:ef:50:bf:68:76:39:fe:81:22:fc:d9:c7:
58:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1A:CE:EA:14:75:2B:27:04:F4:33:8B:DD:29:17:0F:C8:4A:08:03
X509v3 Authority Key Identifier:
keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/mxrO6hR1KycE9DOL3SkXD8hKCAM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.126.0/24
Signature Algorithm: sha256WithRSAEncryption
53:17:53:ae:d4:ec:4b:3a:62:7e:98:f0:e0:a4:22:1e:b5:c6:
5b:78:45:5a:c9:ae:e0:cf:6e:26:c5:c5:7e:b9:7b:98:c6:a5:
a4:df:6e:eb:50:91:de:4f:61:3e:2a:e6:7b:fc:f2:e3:76:85:
fa:10:7a:f5:14:f2:78:60:fc:eb:09:82:34:9f:6d:9e:20:2b:
10:ee:e1:04:eb:d4:9c:08:e8:a9:46:41:dc:81:67:c4:de:18:
d3:ea:41:04:46:67:d5:a2:50:c5:0d:07:29:0f:1c:60:d9:ec:
79:b7:b6:b6:b3:8e:89:72:b9:03:8b:a5:31:ea:c8:47:00:9e:
b9:1d:1f:0b:39:90:84:93:e9:c0:fc:e1:5e:72:22:2a:09:1e:
58:8f:2e:63:fb:78:52:37:8b:37:da:f5:10:1c:94:b1:15:e3:
e4:df:27:00:21:dc:15:f5:8f:79:89:b8:23:a9:a8:77:ed:0d:
9e:33:e7:63:1e:e3:03:e6:33:1a:e6:02:c0:12:27:2c:ce:77:
55:09:d2:7d:c1:21:a6:50:65:34:57:a1:ad:51:69:19:ba:37:
a5:ee:b1:f4:47:2f:cd:bb:10:71:16:65:23:96:56:84:61:4d:
f5:9c:f2:d0:3a:ca:51:6b:f0:f8:73:e0:7d:72:bd:28:7c:77:
fd:27:98:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:28 2024 by rpki-client on console-fra.rpki-client.org