Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/0Ra-0yrz7m5KE8XsSbNC20NW4dI.roa
File: 0Ra-0yrz7m5KE8XsSbNC20NW4dI.roa (raw, json)
Hash identifier: LGUe1P0KOobpAMu4xtWhXVvrcufMG5DFz9ItaGvhgLI=
Subject key identifier: D1:16:BE:D3:2A:F3:EE:6E:4A:13:C5:EC:49:B3:42:DB:43:56:E1:D2
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DC4
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/0Ra-0yrz7m5KE8XsSbNC20NW4dI.roa
Signing time: Wed 29 Sep 2021 02:39:32 +0000
ROA not before: Wed 29 Sep 2021 02:39:32 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 7482
IP address blocks: 203.79.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3524 (0xdc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:32 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=D116BED32AF3EE6E4A13C5EC49B342DB4356E1D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:92:f6:ee:7c:87:ef:f4:00:ba:f2:9e:51:08:
fb:18:ac:74:14:71:12:8a:8b:ab:60:1a:10:59:48:
1c:e6:e4:cd:70:de:a4:a6:d3:c6:ed:71:d9:0e:00:
69:6c:69:55:f9:bc:61:01:2a:bf:40:81:03:76:42:
f4:7a:01:16:cf:26:be:35:38:30:59:3a:56:82:11:
25:e6:4d:71:63:b3:af:15:f8:c7:7c:bf:95:33:75:
7f:99:4d:63:17:a4:dc:72:c9:f9:53:ee:dd:f6:0d:
16:41:2c:b3:e3:5c:66:de:b7:b1:de:27:18:ae:26:
e0:07:f4:99:39:ae:df:21:27:87:e9:ad:d7:e4:c2:
80:fd:7b:2f:dc:73:54:03:0e:3a:fb:83:2e:87:09:
e7:43:a7:49:0f:ed:75:e0:4b:08:48:a3:4c:87:77:
1e:91:23:4f:b2:80:44:43:59:1c:bb:c2:87:09:6a:
ac:08:d5:50:77:06:9e:e0:2a:22:d0:77:f8:e4:c9:
82:40:96:ee:ed:89:a5:27:0b:90:23:fd:24:dd:16:
58:b7:79:da:cb:4a:e0:08:83:ef:33:7e:c8:58:06:
23:b8:2c:4c:bc:2c:73:55:ef:c0:ab:06:bd:40:5a:
40:1a:d4:b6:86:1c:67:48:a5:77:9d:34:85:34:79:
7d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:16:BE:D3:2A:F3:EE:6E:4A:13:C5:EC:49:B3:42:DB:43:56:E1:D2
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/0Ra-0yrz7m5KE8XsSbNC20NW4dI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.240.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:89:0a:02:44:48:7e:2a:c1:b7:fd:2e:06:1f:83:ff:04:73:
0f:54:f8:93:db:1f:e7:79:29:88:33:8c:68:7c:bc:79:73:cf:
9f:3e:21:6b:09:97:d7:11:00:69:46:9e:e9:0c:2e:e4:ea:6a:
92:26:67:ec:94:6b:80:56:c6:b2:4d:d8:63:36:c4:d1:06:cd:
92:a9:32:db:80:16:5f:bc:6f:91:d6:ff:ec:b0:67:e5:71:ef:
cf:58:4e:8d:bd:eb:d9:1c:1c:3a:ca:69:3e:f5:70:2f:20:c7:
60:10:8b:7a:90:83:4c:3b:14:1a:1b:04:4a:83:aa:57:55:f0:
70:3e:68:89:ec:c0:50:73:e8:d1:92:75:df:20:a8:ec:be:42:
a6:4c:18:28:d5:04:ce:37:77:9a:5a:a1:a2:e6:e0:c0:b8:a2:
93:87:dc:72:eb:0f:43:82:33:43:92:ff:ad:de:75:80:d1:f7:
a4:a9:95:59:f0:cd:ac:20:d6:69:70:64:35:80:b1:bb:f6:73:
a1:45:ab:c0:bd:41:f8:10:3d:2c:07:f2:80:29:71:b7:ff:73:
7d:53:5b:19:f2:18:65:6a:42:63:07:f2:6e:65:04:9f:9b:3f:
23:27:ae:0f:84:ad:15:11:34:17:60:25:3a:bd:69:57:f4:00:
bf:01:23:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:03:22 2025 by rpki-client