Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/-GDTgHCbocUM4lf3FRP_hw-1abI.roa
File: -GDTgHCbocUM4lf3FRP_hw-1abI.roa (raw, json)
Hash identifier: Mf1XpCjHDS/q+pe7RnCjNReeGTkzMyAOcmNucbsewWM=
Subject key identifier: F8:60:D3:80:70:9B:A1:C5:0C:E2:57:F7:15:13:FF:87:0F:B5:69:B2
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 08F6
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-GDTgHCbocUM4lf3FRP_hw-1abI.roa
Signing time: Tue 29 Sep 2020 10:01:17 +0000
ROA not before: Tue 29 Sep 2020 10:01:17 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 43.240.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2294 (0x8f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:17 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F860D380709BA1C50CE257F71513FF870FB569B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e6:39:8e:9d:56:dc:29:0a:86:e1:a9:0c:dd:
dc:ae:9c:b9:15:2e:3e:da:a3:39:f2:63:e9:9f:bc:
68:b9:35:61:57:e1:22:15:28:ec:13:21:33:8f:12:
65:3a:ce:3f:08:e0:15:02:d2:3f:67:ce:a3:2d:7f:
6e:58:08:50:d8:ae:48:2b:df:96:06:d0:b2:9c:fc:
9e:1d:84:c6:8b:49:69:6d:75:35:0e:8d:55:68:f6:
e9:ff:a7:a7:07:6f:6f:de:da:4a:4f:56:82:18:68:
90:5a:88:99:11:84:2f:e4:72:32:b4:8c:6c:61:87:
fa:82:b8:ac:1b:da:a7:4f:61:c6:47:4d:02:7d:be:
4d:18:b0:46:9f:3a:ca:30:2d:02:4e:c0:86:29:11:
3a:e3:38:a1:e2:b8:ad:46:df:8c:f2:a1:d7:db:77:
1e:f7:e9:8f:4e:13:fb:2e:93:a3:34:5c:46:fd:fe:
f4:0c:34:ae:ef:8c:ab:06:28:58:d0:b1:13:d9:54:
1d:fd:77:b0:68:6f:7a:78:96:9f:10:1f:b8:5a:5a:
00:2a:4b:98:9c:08:79:b9:f5:db:22:f1:7f:00:76:
8c:57:23:00:c9:dc:8e:e6:da:8b:40:ab:62:e1:ee:
ec:bb:25:2f:d5:4b:ff:3e:4a:18:b3:da:af:1b:97:
66:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:60:D3:80:70:9B:A1:C5:0C:E2:57:F7:15:13:FF:87:0F:B5:69:B2
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-GDTgHCbocUM4lf3FRP_hw-1abI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.240.104.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:33:8b:09:36:ce:2c:e1:ab:38:c9:65:09:e7:df:a2:8e:27:
49:8d:68:b8:e2:13:65:f3:a3:cc:d5:df:3e:bb:9f:7c:e3:cf:
97:36:ae:8e:1d:d1:1d:e5:5e:f8:cb:f2:e7:4f:d1:e0:f2:cd:
35:f1:a3:e6:09:24:bc:2b:ae:a2:c4:06:42:5e:0d:b5:c5:6c:
e8:1c:4a:dd:d4:d1:5f:37:0a:bd:a7:56:70:2a:ef:7c:24:6f:
02:0a:86:83:57:c2:d1:38:a6:4f:0b:39:c6:e7:3f:eb:1a:7c:
6e:26:97:71:8f:82:29:f7:28:67:88:85:02:e5:3b:55:4f:fa:
a1:30:d8:f1:68:57:b4:67:b8:4c:e5:f8:14:dd:c2:d3:ec:0d:
e8:83:5b:4c:8c:0e:f3:f5:f6:b7:b2:a1:96:e5:36:0b:cc:9a:
8c:c7:e3:0a:d5:24:ef:17:e1:4e:17:9f:bd:c7:75:b3:e1:38:
86:5e:1a:30:b0:18:3f:49:4c:e9:e7:80:52:26:63:91:cb:52:
5f:4a:57:48:ce:da:27:9e:3a:35:46:55:7d:33:37:73:d9:b9:
e8:6e:ba:46:b2:5b:16:7c:d2:74:21:e3:3c:4b:bd:6d:d2:d4:
8d:12:82:83:6c:78:f5:8d:8f:23:df:56:b1:ff:3b:7d:e3:06:
55:a9:e9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:39:19 2025 by rpki-client