Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/15vHMGbqp0HOfo5sQ-Wl9vSmen8.roa
File: 15vHMGbqp0HOfo5sQ-Wl9vSmen8.roa (raw, json)
Hash identifier: cvatJB23Cr+lyKPEKM9jWp3ZJbz7i66pNhmWyQSG2fA=
Subject key identifier: D7:9B:C7:30:66:EA:A7:41:CE:7E:8E:6C:43:E5:A5:F6:F4:A6:7A:7F
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0C79
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/15vHMGbqp0HOfo5sQ-Wl9vSmen8.roa
Signing time: Sun 07 Feb 2021 11:39:44 +0000
ROA not before: Sun 07 Feb 2021 11:39:44 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24154
IP address blocks: 210.200.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3193 (0xc79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:39:44 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D79BC73066EAA741CE7E8E6C43E5A5F6F4A67A7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ce:bf:d0:bb:09:56:68:da:b1:ca:cc:79:81:
ab:70:3e:4e:9e:17:09:58:17:8a:2f:b4:ad:e0:f2:
28:1f:b0:73:09:2d:ca:d9:20:fc:a9:26:2f:48:84:
ab:ff:f0:e7:55:8f:2d:2e:29:6c:6e:66:b4:9e:a0:
73:19:97:11:c6:27:6c:d4:b7:b5:e4:c8:84:6b:88:
1a:73:8b:9a:b6:99:7a:98:af:4a:85:af:af:5c:ff:
16:63:39:6a:de:a0:6d:cb:ce:73:89:e0:fc:a6:1c:
38:ec:39:62:17:30:e7:d2:01:51:81:53:5f:39:9c:
e4:ea:c4:f1:50:f5:22:fc:4a:21:79:27:8c:a3:26:
19:22:0c:25:23:d4:8e:c4:76:53:ec:00:b2:b7:2f:
c5:79:77:00:60:b3:b6:e1:ae:ae:98:2c:3b:56:72:
17:87:a5:8a:9f:35:82:1b:c6:c4:0b:2e:0a:28:02:
3e:33:b4:8b:72:64:6d:3d:3d:f9:44:26:25:ff:9e:
66:c8:5e:d4:0b:45:67:7d:28:fd:a9:ec:bb:0a:2f:
ea:29:6a:67:de:81:e6:82:bd:1f:22:82:e5:5d:f6:
86:29:61:33:24:8a:d2:9b:81:35:49:ce:32:30:09:
f9:20:6b:88:62:57:20:14:82:7c:0f:12:06:d5:13:
0c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9B:C7:30:66:EA:A7:41:CE:7E:8E:6C:43:E5:A5:F6:F4:A6:7A:7F
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/15vHMGbqp0HOfo5sQ-Wl9vSmen8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.0.0/19
Signature Algorithm: sha256WithRSAEncryption
79:7d:dc:ca:16:66:19:77:61:53:34:03:9a:46:b7:b4:0c:d8:
33:e1:4e:a4:8e:61:7f:44:4b:b5:9f:a3:41:f8:7d:21:90:7c:
a9:0f:5e:15:e4:95:8a:e8:d6:6c:84:bb:11:4d:55:f9:05:31:
39:cb:86:1a:80:9c:4a:7e:46:b0:11:95:36:04:e0:da:c9:04:
e9:f3:ee:98:4d:64:77:c3:fa:ff:43:a8:98:37:40:b8:a2:c1:
29:1e:2a:fc:9d:7e:db:53:16:b0:d2:5b:76:d6:2f:97:8d:bd:
ad:35:89:3c:d9:3d:0a:9b:57:ba:b2:16:39:c3:94:46:a9:1f:
8a:a3:56:07:e4:82:3c:e4:e4:bc:2d:fe:84:18:3c:84:8d:fb:
c3:e2:2b:4e:f4:b0:2b:9f:c5:95:62:d3:c8:9c:36:5d:ad:69:
43:e7:2e:83:66:d5:af:6d:2c:48:11:c4:9f:05:90:d4:b5:bd:
96:0f:6f:e5:52:38:a4:03:9a:62:a5:d3:e6:7d:3e:d8:dc:59:
41:43:f4:66:3e:c8:03:cf:a7:9c:31:7c:bd:cd:b8:13:d8:2c:
3a:03:c9:81:2a:fb:d7:e5:62:2a:bf:fb:5f:e2:49:3c:d4:d0:
14:9f:83:58:13:dd:40:6a:c1:b9:0a:ea:06:68:90:58:b5:6b:
54:b9:bd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:59 2024 by rpki-client on console-ams.rpki-client.org