Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/-8bf16XhVV5VvGjrF41AzT-YorE.roa
File: -8bf16XhVV5VvGjrF41AzT-YorE.roa (raw, json)
Hash identifier: ZXZIEvc7p0TAYEzEhHurSjA0KC0KqBL1APOesGsLA5I=
Subject key identifier: FB:C6:DF:D7:A5:E1:55:5E:55:BC:68:EB:17:8D:40:CD:3F:98:A2:B1
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0BF5
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-8bf16XhVV5VvGjrF41AzT-YorE.roa
Signing time: Sun 07 Feb 2021 11:34:24 +0000
ROA not before: Sun 07 Feb 2021 11:34:24 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9311
IP address blocks: 210.201.60.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3061 (0xbf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:34:24 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FBC6DFD7A5E1555E55BC68EB178D40CD3F98A2B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8e:3a:14:9b:5c:2c:d8:a1:e6:d1:17:34:88:
f0:1b:6b:4b:a0:b8:21:9d:79:c4:ab:d6:c3:ab:6b:
55:ec:19:22:5f:1f:30:cd:03:c8:04:66:b5:2f:65:
6e:ef:58:a1:71:4b:81:0f:ed:6d:aa:b9:2f:bf:c3:
fc:4c:e3:cb:d5:3f:7c:0d:d3:9f:f9:f1:10:f8:68:
43:06:3e:03:b6:a9:ac:20:8d:41:c4:88:26:46:c2:
01:ad:80:c4:9f:56:f9:26:e8:d6:cd:88:19:8b:52:
78:64:6e:54:27:42:54:f1:c1:d6:2d:89:eb:77:5a:
82:98:5b:d5:5b:70:4d:c9:c5:d4:fa:2b:39:19:76:
32:b5:da:6a:ee:39:97:dc:fa:27:5c:2d:3e:34:35:
fa:2e:06:f2:0f:fc:f7:d9:cb:47:c5:35:87:ea:de:
c8:6a:5a:30:a3:0e:d7:d5:e2:61:7d:5f:ca:13:a8:
f4:20:a2:34:96:e0:d6:55:13:fe:a1:66:b7:c9:51:
7f:80:0d:05:0c:81:58:9c:f6:3e:98:80:e5:20:40:
61:ae:2f:42:3c:6c:01:4a:c3:fa:95:c7:b8:af:14:
6e:f5:38:54:16:2f:0b:bc:b2:17:5c:16:43:a6:c8:
29:16:e4:ca:7f:d4:78:ca:b7:59:ff:ed:03:61:49:
a1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C6:DF:D7:A5:E1:55:5E:55:BC:68:EB:17:8D:40:CD:3F:98:A2:B1
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-8bf16XhVV5VvGjrF41AzT-YorE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.60.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:73:1b:bd:82:bc:7e:1d:95:de:98:19:a4:99:ba:a1:4f:37:
b5:3a:22:e0:51:3d:7e:7f:e9:28:35:08:63:02:b7:e9:8c:66:
6c:5e:a1:d2:c7:a6:28:a8:70:55:bc:2c:3d:c5:21:c4:9d:4b:
82:da:01:34:86:13:e0:13:5c:61:9a:07:55:ea:d9:25:c9:5e:
35:6c:53:44:ef:25:ed:82:7b:bd:36:76:a5:af:24:2a:61:32:
a8:90:47:61:0d:81:f6:61:73:ec:1e:0e:8b:95:ad:ef:29:f3:
ab:2e:1c:6d:4c:9e:8e:85:2b:ca:a8:84:94:6c:58:6e:a5:27:
69:7b:f3:a7:7d:7b:08:c2:0b:67:b1:e8:ef:93:49:5e:d2:c9:
b5:0d:a8:eb:b0:54:93:c7:df:e6:42:a4:d7:05:95:70:d7:a6:
93:f0:62:6b:4d:58:a2:4e:d4:11:7f:e2:98:4b:82:93:7e:b5:
a3:e7:0c:c5:18:9c:8f:62:0f:a8:e2:e1:bc:e3:13:1c:b0:82:
53:3e:92:24:e6:04:e7:5a:e7:e1:b2:8c:c7:73:6c:24:08:11:
dd:b7:72:66:b0:7e:61:29:05:43:6c:df:89:5d:db:ea:4d:0b:
4c:92:1e:9f:d4:a5:48:46:54:6a:5a:25:21:de:c1:7c:12:a9:
5e:e9:13:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org