Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/-nGitc3jVNmM00OJGXbdyBn0RUA.roa
File: -nGitc3jVNmM00OJGXbdyBn0RUA.roa (raw, json)
Hash identifier: FM0K+4q2zG0zVEYHkXdbgE36hP0XIDLP2CRlffYrAfg=
Subject key identifier: FA:71:A2:B5:CD:E3:54:D9:8C:D3:43:89:19:76:DD:C8:19:F4:45:40
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 10E5
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-nGitc3jVNmM00OJGXbdyBn0RUA.roa
Signing time: Tue 16 May 2023 08:36:47 +0000
ROA not before: Tue 16 May 2023 08:36:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 2404:0:1000::/40 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4325 (0x10e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:47 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FA71A2B5CDE354D98CD343891976DDC819F44540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:a8:36:55:45:b8:63:be:1a:e2:c4:fa:49:
e5:e3:a2:13:4d:7b:75:d4:36:bc:59:a0:5a:df:18:
0d:fe:9f:de:4a:52:e0:4e:6a:eb:97:4b:6c:02:2f:
b2:b5:6d:10:11:e2:ef:c6:07:cc:31:15:02:43:03:
f5:fe:8f:ac:1d:64:6d:4e:9a:b0:50:4f:54:b6:10:
9e:4a:82:5f:18:31:7c:77:ed:82:f2:39:fe:0f:b4:
45:20:de:b8:fe:a1:37:ba:ce:da:9b:dc:a0:1e:c8:
c9:92:b4:be:6c:85:56:99:40:2b:11:bd:19:dc:19:
83:f8:d2:4c:5e:e9:5c:e8:02:38:d7:1d:61:e6:fa:
42:51:fc:20:58:15:e4:64:b7:d8:ab:bc:fc:d4:b0:
f4:84:01:fb:c0:9c:c3:dd:7f:60:7b:13:9d:95:11:
4e:f4:0b:b5:37:f3:7f:5e:06:18:1e:49:06:f0:9c:
b2:44:19:00:52:b3:2d:9b:fb:2b:20:54:16:a2:f3:
1c:e2:29:a7:b7:71:ac:b8:7c:3c:03:2f:7f:87:b5:
04:1f:c2:5f:63:3d:8e:73:93:a7:43:4a:09:51:de:
78:6e:1a:a3:99:7f:92:4f:52:5d:4d:70:8a:5e:b4:
82:6e:f3:3e:23:46:46:5a:70:fe:d2:20:2c:80:fd:
e5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:71:A2:B5:CD:E3:54:D9:8C:D3:43:89:19:76:DD:C8:19:F4:45:40
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-nGitc3jVNmM00OJGXbdyBn0RUA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:0:1000::/40
Signature Algorithm: sha256WithRSAEncryption
74:38:44:fd:61:24:8d:d1:ad:e2:f5:4e:68:9f:81:47:1b:24:
07:69:70:01:53:00:c9:53:5d:a9:ea:fa:19:39:60:34:93:d0:
cc:7a:d9:6a:6c:a0:2f:df:1e:27:9f:f6:18:33:1f:74:7b:6b:
90:48:a1:4b:ff:03:f6:63:5e:9d:85:c2:ae:66:46:be:c0:f4:
4c:b1:97:62:5b:fb:6e:97:16:ab:4a:4a:1c:79:a8:c1:e0:c9:
6c:fa:49:37:a1:3a:28:3a:51:8b:6a:4f:49:10:4a:10:55:18:
d8:af:d7:f9:cb:d9:40:72:69:ac:98:8d:81:cc:41:6c:f1:05:
ea:9a:d1:e8:43:1a:af:3f:01:7d:00:6b:07:c4:e4:81:2b:b0:
64:c5:86:9b:a5:90:9c:10:bc:b3:9d:6b:0c:a8:6b:47:da:21:
b1:a6:55:c0:fa:a6:f2:a9:88:a0:60:b4:2a:cc:76:7c:45:17:
52:2f:87:98:99:ec:f3:40:ec:4d:1f:63:e2:2c:03:68:cb:aa:
4c:4b:49:3d:ec:5c:a4:5b:29:02:a9:26:c3:dc:2b:ac:b7:78:
8c:66:10:ed:72:87:d9:c1:4a:f1:a5:05:b5:c9:35:0e:fb:68:
ed:e7:13:b1:c5:c1:62:cf:30:cc:56:6f:ed:b6:af:44:5f:4b:
2d:13:68:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org