Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/-06k8fdgUzYJ8wSY79pefdWbVpg.roa
File: -06k8fdgUzYJ8wSY79pefdWbVpg.roa (raw, json)
Hash identifier: eOPFp/K65j2Sma9cfRNfWXFkXsie2gAmaRpSBChnvv8=
Subject key identifier: FB:4E:A4:F1:F7:60:53:36:09:F3:04:98:EF:DA:5E:7D:D5:9B:56:98
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0C3B
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-06k8fdgUzYJ8wSY79pefdWbVpg.roa
Signing time: Sun 07 Feb 2021 11:35:21 +0000
ROA not before: Sun 07 Feb 2021 11:35:21 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9311
IP address blocks: 210.63.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3131 (0xc3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:35:21 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FB4EA4F1F760533609F30498EFDA5E7DD59B5698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:72:97:b9:4e:bf:9c:11:ec:c6:7d:5d:a8:
a6:2a:fd:64:83:08:ea:40:83:48:56:30:49:ca:20:
c3:c0:59:b6:77:9c:76:f6:49:98:c5:8f:97:a8:c5:
50:7c:0d:fe:e9:f4:3e:02:06:ff:c5:df:79:8e:a6:
c7:a0:a0:d3:f9:7f:21:b5:ad:2a:bf:27:ac:d8:e0:
31:b8:78:e9:a9:c5:6a:ab:ec:3b:99:60:3d:05:54:
18:30:9b:d6:db:6f:37:bd:6c:d6:23:a9:dd:a8:63:
6f:55:48:c4:d9:a3:9d:e3:3e:a2:d0:32:b9:7f:37:
6c:5f:08:7f:5e:71:77:32:71:3d:69:15:14:86:4f:
a0:99:a9:b1:90:6a:c4:18:71:cd:d1:a9:65:67:e8:
07:e3:9b:05:8c:8a:94:41:57:11:c9:57:6e:29:58:
0a:96:ad:76:bc:7c:80:f4:91:94:17:dd:a5:2d:c9:
b6:60:1d:1b:07:6d:02:25:84:57:fd:79:c2:8e:16:
05:49:d8:21:ab:5e:31:dd:16:ca:96:af:0c:e3:56:
a1:49:3c:23:7d:52:30:a9:0d:b0:73:d3:34:3d:ff:
d8:ad:12:8a:c8:8a:bb:36:f7:1c:cf:90:f9:7c:38:
60:88:7a:f6:8a:5b:9a:44:8e:b3:64:e8:29:ac:40:
93:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4E:A4:F1:F7:60:53:36:09:F3:04:98:EF:DA:5E:7D:D5:9B:56:98
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-06k8fdgUzYJ8wSY79pefdWbVpg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.253.0/24
Signature Algorithm: sha256WithRSAEncryption
37:2a:74:a0:fb:c6:02:f5:f2:98:e2:f3:76:74:59:41:c5:d8:
c7:62:e3:56:36:e4:07:2d:42:7f:30:f7:dd:79:27:38:e3:52:
29:26:91:8b:27:d0:b4:a9:d5:69:0f:10:98:30:5b:da:1c:84:
75:4c:27:dc:4f:b7:79:76:17:03:cb:27:22:5e:b5:75:b0:e6:
93:9c:9c:54:d3:0e:95:51:4f:04:ea:92:24:af:7f:9a:a5:26:
39:ad:44:1d:77:a5:8f:e1:36:92:04:35:77:b2:dd:4e:d2:c9:
f8:92:f8:11:f7:ac:98:df:2c:13:04:87:8d:a7:24:9b:db:30:
fa:e7:3a:8e:49:91:79:2a:29:a8:62:58:c3:83:d7:0a:fa:d2:
b6:0a:02:8b:c5:2a:d0:b1:7c:ca:5b:4a:8e:be:fe:f6:13:58:
2c:71:83:5a:c5:60:86:df:4f:a0:d4:0b:2c:8e:d5:c5:af:f1:
22:07:85:ca:a3:f4:52:a8:b0:61:0f:85:67:c0:8e:b9:31:91:
a2:35:cb:9d:38:aa:70:fa:d8:0c:4d:9e:34:1a:8d:95:d4:c3:
68:d5:56:89:83:e8:d0:c6:0f:a5:03:8e:84:be:73:c1:a2:a2:
c4:d1:94:48:e9:2c:1b:ec:12:b7:35:b9:a5:6f:98:0f:d6:ba:
f7:5d:0a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org