Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/1bMLwsDBNP3GnVOAGX1_3n9iqqM.roa
File: 1bMLwsDBNP3GnVOAGX1_3n9iqqM.roa (raw, json)
Hash identifier: qGC8IX/Nlqsb6FsfOBjAuXmF0YMufRQWo+O+mPfDYHs=
Subject key identifier: D5:B3:0B:C2:C0:C1:34:FD:C6:9D:53:80:19:7D:7F:DE:7F:62:AA:A3
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DB6
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/1bMLwsDBNP3GnVOAGX1_3n9iqqM.roa
Signing time: Wed 29 Sep 2021 02:39:28 +0000
ROA not before: Wed 29 Sep 2021 02:39:28 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17709
IP address blocks: 203.79.128.0/17 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3510 (0xdb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:28 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=D5B30BC2C0C134FDC69D5380197D7FDE7F62AAA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:08:dc:54:38:cb:44:06:d9:65:c1:57:c8:32:
6a:af:36:b7:34:e0:3d:fd:8b:51:3e:cd:7c:85:7d:
64:0d:19:6c:f8:73:84:b2:42:9d:89:16:e8:db:3e:
ba:ae:12:67:7b:a3:e7:ef:3c:17:11:2f:c7:96:9a:
b1:d4:4e:ca:73:b8:1c:f4:a6:ed:2a:c8:66:dd:de:
4b:ca:8d:d2:f3:0d:69:90:3f:b5:64:05:c6:bd:6c:
96:76:91:f1:f4:b9:3c:00:de:47:fd:77:49:ea:a4:
c7:a2:e0:b7:28:34:d1:bb:a8:9e:53:22:85:47:be:
fb:a0:70:8f:09:cf:16:65:09:8e:9b:41:b9:79:c2:
39:07:18:46:b6:ae:ee:05:01:a2:57:7c:98:8b:54:
89:0a:ba:6f:6c:e5:f6:10:10:7c:7d:b7:61:f3:12:
8f:60:b0:58:a8:51:9f:76:19:e9:27:46:d4:7e:a3:
20:05:6a:9d:29:7e:cb:b7:a5:63:e6:9e:e6:51:b7:
93:f9:d7:2b:b5:24:38:f7:44:15:ee:55:9a:ee:e5:
4f:be:3e:27:e9:91:27:12:c5:16:6e:52:f0:4e:71:
99:2b:12:12:cb:69:4f:d4:bf:0c:b8:8a:44:90:90:
8f:16:34:bb:8c:1f:1c:0e:02:93:f5:47:f6:8d:20:
4a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B3:0B:C2:C0:C1:34:FD:C6:9D:53:80:19:7D:7F:DE:7F:62:AA:A3
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/1bMLwsDBNP3GnVOAGX1_3n9iqqM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.128.0/17
Signature Algorithm: sha256WithRSAEncryption
53:62:4a:56:38:18:6e:87:91:74:35:bb:8d:51:b8:11:77:f4:
b9:b1:ba:5c:17:6f:d4:59:2c:3a:c3:31:0a:7d:54:8d:d7:a0:
25:74:20:38:a3:ab:12:5e:05:88:e9:8b:5c:fe:89:34:0f:83:
76:d5:4d:56:ae:58:61:97:04:7d:33:91:35:1e:e3:62:92:15:
33:43:2b:63:9d:f6:af:80:26:c3:60:54:39:1e:47:8a:cf:1b:
ee:e3:00:6b:2c:09:71:ff:82:03:2a:23:bd:a1:f1:1b:ce:52:
51:ec:56:d2:05:df:89:33:10:48:6b:77:d6:ea:62:9d:43:3b:
c3:0b:a1:c1:e8:11:7a:c6:27:61:1b:54:1b:5b:4d:c1:ec:f3:
0d:24:c0:be:fa:34:bc:f6:0c:d3:6a:5f:14:97:78:dc:29:60:
4c:bc:16:d6:c2:f1:f9:a3:08:ef:55:83:fe:5d:36:bd:aa:b9:
16:19:14:35:46:89:0c:75:bc:91:5a:e6:95:88:a1:42:0a:74:
40:52:d8:e3:ae:87:53:ac:b9:f6:ea:17:a7:49:2d:b9:3e:33:
74:f9:94:da:aa:9f:43:86:73:d1:9a:45:ba:47:69:50:8f:7d:
64:74:e1:b8:18:73:b3:32:bd:49:06:35:96:ed:7f:d4:07:de:
72:c9:40:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:39:04 2025 by rpki-client