Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/1UrBkqMlhM0StQKjzliPyHEYZZw.roa
File: 1UrBkqMlhM0StQKjzliPyHEYZZw.roa (raw, json)
Hash identifier: ZB1NPO2aTFCeaeWTyTZg//ExIo5/xxDIbLff5hhCCPw=
Subject key identifier: D5:4A:C1:92:A3:25:84:CD:12:B5:02:A3:CE:58:8F:C8:71:18:65:9C
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DBB
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/1UrBkqMlhM0StQKjzliPyHEYZZw.roa
Signing time: Wed 29 Sep 2021 02:39:30 +0000
ROA not before: Wed 29 Sep 2021 02:39:30 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24154
IP address blocks: 203.79.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3515 (0xdbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:30 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=D54AC192A32584CD12B502A3CE588FC87118659C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:ad:1b:4f:80:2f:c1:c6:60:e3:5a:67:57:
76:5e:62:39:99:24:26:0e:0a:7a:74:31:38:61:a7:
f3:db:a3:23:a9:7a:32:6f:03:ce:0e:86:33:7a:14:
bc:cc:30:57:be:b2:4f:b0:87:7d:d0:70:b2:3e:35:
48:31:29:1d:cf:ab:f3:6e:2f:ca:ec:25:50:5a:bb:
27:ca:53:61:8f:6a:3a:35:ca:ad:4c:12:f4:b9:b3:
83:8b:08:05:06:c4:fe:1f:af:38:f0:12:e9:9c:95:
4f:3e:d7:bf:3c:38:23:48:89:70:70:21:8e:79:af:
53:3b:98:4f:17:b2:52:8f:f1:83:1d:a3:8a:30:35:
fe:32:7b:92:62:8e:95:f9:08:ef:46:e1:23:15:67:
d2:8d:f4:67:d0:f3:2b:3b:f1:07:20:8a:7a:67:d8:
7b:e0:51:a9:f8:35:41:1c:0b:a9:82:04:8b:8e:c1:
84:6a:57:5f:af:51:b6:f6:c8:6d:12:be:3a:09:f2:
d6:9d:e9:d3:35:65:81:69:49:2b:66:92:37:21:d4:
fb:03:c9:16:01:93:5f:ae:02:1c:35:eb:8c:dc:a9:
8a:c0:49:7c:5e:70:24:a6:f3:58:3a:f7:ed:24:4c:
66:3b:a7:6b:91:cf:8c:91:e8:cf:e7:89:49:a6:9d:
1b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4A:C1:92:A3:25:84:CD:12:B5:02:A3:CE:58:8F:C8:71:18:65:9C
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/1UrBkqMlhM0StQKjzliPyHEYZZw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.200.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:49:05:89:3b:1e:aa:fc:fe:37:08:e4:0c:be:3c:41:89:de:
97:77:aa:66:15:0d:57:10:ba:cd:61:2b:af:ed:6d:cd:ea:f5:
38:f8:46:22:c8:90:7a:3a:a9:18:9a:b1:9b:32:99:99:7d:e5:
d4:a4:6c:0a:84:19:77:d0:4b:93:4f:a6:d4:7a:99:b4:29:ed:
bf:75:85:29:26:6c:2c:7a:27:97:eb:31:78:c6:44:c7:c9:51:
8d:11:5c:b4:38:d2:ae:38:1a:86:a3:be:af:8f:3b:90:c1:03:
60:1f:ad:43:e3:fc:97:e4:65:98:d1:5e:5b:eb:28:5c:c3:76:
fe:52:99:78:bb:f8:b4:ac:1d:eb:c1:f5:3b:08:7b:72:18:da:
75:bc:6e:0d:df:34:59:8e:24:40:05:86:9a:67:3f:3e:f8:76:
d8:5c:32:24:b2:80:42:af:70:96:20:ce:3b:41:1e:87:5d:d9:
06:db:2b:e3:dd:4b:89:9a:8e:2d:2b:b2:81:8f:c0:7e:2e:22:
a1:35:51:c1:f5:ab:3b:06:05:3a:26:53:d9:4b:51:84:3c:2c:
28:50:af:da:7a:69:54:a3:e3:02:7a:d1:e7:5a:58:aa:e5:07:
2d:32:db:57:3d:40:d1:41:7a:d8:57:49:6c:5d:25:f1:a6:66:
0e:16:e4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:59 2024 by rpki-client on console-ams.rpki-client.org