Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/en010qInKUrBsZfoP4lBiQ2MMH8.roa
File: en010qInKUrBsZfoP4lBiQ2MMH8.roa (raw, json)
Hash identifier: 5aQJ3wYL9pXSnvRSuHmb0mtiPB3Sbjn6nMMmaHLhKvk=
Subject key identifier: 7A:7D:35:D2:A2:27:29:4A:C1:B1:97:E8:3F:89:41:89:0D:8C:30:7F
Certificate issuer: /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Certificate serial: 12A3
Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/en010qInKUrBsZfoP4lBiQ2MMH8.roa
Signing time: Mon 26 Aug 2024 05:34:53 +0000
ROA not before: Mon 26 Aug 2024 05:34:53 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131636
IP address blocks: 103.130.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4771 (0x12a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Validity
Not Before: Aug 26 05:34:53 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7A7D35D2A227294AC1B197E83F8941890D8C307F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b0:7f:ba:19:1d:1e:6e:e0:61:8b:d7:d5:73:
34:69:6b:d5:cf:41:d1:e0:0f:4f:ea:99:65:90:b3:
e7:3b:9f:1d:58:e7:e1:e9:fc:5b:a4:78:8a:3f:fa:
e9:d7:71:a6:25:59:9e:fa:11:9e:8b:49:27:04:b8:
38:f3:b4:9f:94:3b:01:5c:b2:17:f1:e1:09:3e:87:
76:72:32:8e:0e:a9:d1:31:c3:5b:2a:4e:5d:c2:6f:
c9:80:4e:f7:ff:14:57:a4:f2:04:06:60:ea:b4:e9:
f2:18:54:5f:3d:0d:00:d1:76:37:42:0f:c8:14:7f:
70:e4:7f:6f:b0:b9:99:03:6f:86:be:ea:e9:a9:b8:
17:5f:57:1b:5f:d0:38:50:3f:d1:48:86:33:57:2d:
c3:fa:c9:55:02:33:b6:5c:ef:79:06:be:9c:2a:57:
bd:f1:58:19:06:b6:e8:e0:72:cf:90:1a:ac:4d:21:
73:05:ab:f1:63:73:b0:2e:53:e7:0f:35:c9:9b:f2:
07:65:4f:ed:05:39:55:5f:64:ab:06:86:1e:96:45:
42:27:24:0c:6a:ea:bc:75:45:bb:c0:e3:8a:f3:6d:
8a:9c:83:03:a1:8f:8b:e5:31:d4:ed:f1:6c:5e:41:
37:7f:e3:40:b2:b3:52:5e:e8:d2:3a:19:3f:32:6e:
9f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7D:35:D2:A2:27:29:4A:C1:B1:97:E8:3F:89:41:89:0D:8C:30:7F
X509v3 Authority Key Identifier:
keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/en010qInKUrBsZfoP4lBiQ2MMH8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.124.0/22
Signature Algorithm: sha256WithRSAEncryption
82:d8:3b:c8:15:3d:2f:46:b6:81:dd:57:f7:b2:48:71:da:a9:
7b:cf:1d:20:c6:b6:1d:e8:c5:cf:e6:32:03:7d:74:79:03:e5:
78:82:ad:44:ad:28:d8:ad:24:a1:54:ac:7d:a2:db:83:1e:b3:
af:eb:cb:55:31:3b:19:c4:66:71:2c:c5:b8:32:81:27:92:72:
50:e1:5c:c7:b0:f2:bd:fc:36:d4:a4:0f:df:b6:cd:1b:44:06:
b1:19:5f:d7:de:a3:38:a3:0d:2c:01:46:96:a1:b9:ac:f4:fc:
f0:52:f5:24:8f:1f:b4:56:5f:aa:63:46:0b:52:d8:83:62:00:
22:21:ee:b7:1a:af:25:2d:63:53:1e:24:d2:a7:86:49:ad:de:
bc:53:d8:5e:f4:26:e7:df:5c:65:10:48:0c:4f:49:83:1b:cf:
82:3f:d8:5a:fe:82:7a:60:c4:49:d5:31:53:0a:45:40:8d:53:
7d:61:eb:8e:fe:6c:88:a0:47:e5:ac:e0:b8:2a:f1:50:c2:48:
cf:df:18:38:9f:cf:96:ee:fd:a2:9a:d9:88:b7:10:17:37:76:
88:e8:cd:3c:ef:af:6e:d6:db:08:a9:56:31:01:ee:1a:ab:53:
54:67:a3:4d:fb:1c:91:88:ac:d3:b8:3c:aa:7b:ec:8d:a1:25:
2a:e0:ed:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:05:16 2025 by rpki-client