Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/20-xE4X2MX0ONB5QVTWGSKboR2I.roa
File: 20-xE4X2MX0ONB5QVTWGSKboR2I.roa (raw, json)
Hash identifier: +zY5zDbA1jEu2oRkaHaENfO1KbuS/lbglFZr3LXXLuc=
Subject key identifier: DB:4F:B1:13:85:F6:31:7D:0E:34:1E:50:55:35:86:48:A6:E8:47:62
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/20-xE4X2MX0ONB5QVTWGSKboR2I.roa
Signing time: Thu 15 Sep 2022 02:40:31 +0000
ROA not before: Thu 15 Sep 2022 02:40:31 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131584
IP address blocks: 210.203.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:31 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DB4FB11385F6317D0E341E5055358648A6E84762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bd:c3:57:91:c4:d3:9f:71:dc:88:ee:e8:b4:
fd:93:26:7c:fc:69:21:54:e3:65:8b:82:01:e4:47:
48:1c:5a:65:88:4b:04:14:51:15:dd:2d:58:8d:a7:
39:88:51:c3:ad:c1:14:1b:77:30:3e:9e:5d:76:c6:
4e:ee:f0:5e:6c:36:42:c9:4b:0f:67:ef:19:58:bf:
67:30:6f:72:c1:e4:7f:3f:33:23:37:16:74:33:85:
61:2a:c2:3b:cc:f6:3f:b1:11:54:8d:12:16:6d:a4:
27:ce:9a:e5:cb:2f:b9:8f:70:13:d3:b2:f8:b8:4a:
be:7b:09:6c:09:19:3a:4e:70:25:97:f6:f2:6c:fb:
60:58:0d:3c:82:8c:c4:d2:a8:b7:06:90:30:bb:54:
90:25:a9:28:fa:b8:7c:2a:90:e0:7b:af:a0:7b:e9:
58:1b:c0:cf:fa:18:7d:e6:58:26:cb:0c:5b:eb:7a:
b6:f2:04:f5:6e:ec:aa:cb:8c:ef:36:99:bb:99:8d:
46:7a:3b:3e:74:a5:bc:96:9d:4a:60:90:d0:c8:c8:
a9:54:83:f9:41:90:91:52:9e:5f:88:a7:fc:60:76:
0d:65:ac:42:c9:ea:6a:7d:c8:bc:4e:4b:ac:6a:91:
55:76:c5:0a:0c:fc:e6:1b:2f:5b:a7:88:58:66:2e:
91:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4F:B1:13:85:F6:31:7D:0E:34:1E:50:55:35:86:48:A6:E8:47:62
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/20-xE4X2MX0ONB5QVTWGSKboR2I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.203.48.0/20
Signature Algorithm: sha256WithRSAEncryption
0f:7f:d8:c6:b8:1f:6d:7f:d7:10:f6:64:02:00:f0:71:30:a9:
85:0a:78:c7:bb:ac:b3:72:ef:2b:fe:b2:66:e2:f7:dd:ad:31:
d6:85:4c:2d:ee:a9:73:9c:5f:95:19:a0:b3:ce:cc:63:7c:5d:
6c:81:93:67:f5:ba:63:a8:15:12:3a:d1:a6:0f:c1:78:e3:cb:
38:04:71:39:0f:8e:10:2c:0b:d7:45:a5:70:b1:fb:99:a1:cf:
4b:2a:e1:18:aa:78:32:e8:78:af:eb:b7:04:5d:6e:0e:11:3a:
58:94:01:98:bd:03:22:38:23:d8:8b:6a:64:ba:9a:9e:79:de:
bc:32:7f:eb:7b:3e:2e:ac:11:19:3d:1b:a3:d5:28:eb:60:aa:
ee:d4:14:45:3a:32:eb:fd:47:9d:07:99:72:41:4b:5a:a5:bf:
1f:17:be:da:fd:ec:2b:47:84:38:3f:a5:fe:b1:a3:28:78:c3:
84:15:26:fe:93:38:ae:64:d8:d4:d6:3c:4d:ca:05:87:9c:da:
99:99:9d:59:e6:79:f6:09:a9:32:f8:17:25:15:00:50:ac:30:
c3:0c:7a:8b:45:26:a5:c3:73:1b:d5:2f:ae:ae:74:53:b1:53:
df:4d:a6:24:76:c6:8e:2b:79:61:f3:9f:8a:7f:0f:f2:28:c8:
94:dc:c0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org