Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/2Bf8WvlNobN_1hz1NZWCa6xsuEE.roa
File: 2Bf8WvlNobN_1hz1NZWCa6xsuEE.roa (raw, json)
Hash identifier: HaYBZd1Ujrys6SqcMySjIScNUW5bgOqJ+sigp/+bnCk=
Subject key identifier: D8:17:FC:5A:F9:4D:A1:B3:7F:D6:1C:F5:35:95:82:6B:AC:6C:B8:41
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0C0F
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/2Bf8WvlNobN_1hz1NZWCa6xsuEE.roa
Signing time: Sun 07 Feb 2021 11:34:45 +0000
ROA not before: Sun 07 Feb 2021 11:34:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24154
IP address blocks: 210.202.48.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3087 (0xc0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:34:45 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D817FC5AF94DA1B37FD61CF53595826BAC6CB841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:c2:1f:18:b7:08:e2:c5:48:e2:77:f8:36:
f4:1d:07:bf:a4:8a:e8:bb:a1:60:0e:73:2b:2e:e7:
03:8f:35:a7:3d:25:9d:3c:f9:66:39:e5:a5:80:a6:
bc:f2:4a:19:d6:c4:3a:d3:d2:17:30:83:fe:3a:3d:
a2:79:69:df:95:be:48:f4:3b:1e:dc:f7:26:40:28:
13:c6:d0:51:da:f2:bb:27:90:ea:83:9d:e7:b8:cb:
23:80:92:35:c4:da:f2:e2:38:11:ce:80:a7:26:f0:
45:b1:97:1c:3d:97:e9:55:5c:c6:c8:46:fd:69:1c:
cd:67:4e:80:61:f7:0b:ee:69:f3:14:4e:ca:b5:d9:
30:40:d4:cd:63:53:49:71:15:87:c7:fd:11:53:15:
f8:c5:c5:5e:64:5c:24:b1:4e:07:da:4d:b1:a2:91:
2b:db:94:aa:81:3e:82:ad:97:2a:fa:08:11:bf:6e:
74:20:8a:ad:2e:60:1e:34:8f:96:d6:51:e0:c3:8a:
69:1a:ed:62:47:4c:b3:da:77:a7:87:14:95:91:b1:
b9:41:84:24:4e:98:57:c7:3c:f5:24:ec:0d:69:76:
17:fa:01:11:51:96:a3:af:f3:db:95:4b:18:d5:b9:
92:fb:4c:46:95:b4:08:92:19:76:94:9e:b7:d2:f4:
be:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:17:FC:5A:F9:4D:A1:B3:7F:D6:1C:F5:35:95:82:6B:AC:6C:B8:41
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/2Bf8WvlNobN_1hz1NZWCa6xsuEE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.48.0/21
Signature Algorithm: sha256WithRSAEncryption
8a:b1:0b:aa:a6:99:3d:93:f9:f7:cb:2c:77:fa:56:92:b4:17:
7f:bb:6c:9f:9e:2d:12:e4:e2:36:8a:6e:e7:3e:ca:0b:a3:75:
5e:53:53:36:f1:e6:43:f2:d8:9d:58:43:96:42:8a:06:78:af:
6a:fe:bf:16:88:8f:54:4e:03:f2:c7:4b:36:77:85:24:bc:74:
2a:97:b2:e1:25:bf:19:b6:eb:d2:2d:7d:b9:86:9c:0c:4c:8d:
d0:d9:29:81:e5:72:79:df:4b:06:41:9f:31:8a:f5:d0:12:07:
76:18:de:9f:d7:e8:57:54:ef:93:9d:b6:63:22:52:62:28:d7:
7a:c4:67:9f:aa:e1:c4:3e:5e:ba:23:2c:c3:01:27:b4:90:4c:
74:b2:0a:05:a0:b1:f8:0e:56:7b:bb:87:59:81:ca:cc:35:01:
f2:82:13:f9:2a:3d:a1:e8:83:bb:9f:c9:5c:28:a3:6b:21:72:
82:ba:be:47:65:ce:45:d5:40:ce:f5:a6:1a:03:de:77:f3:cc:
29:46:16:86:31:61:fd:5c:67:3c:c8:8c:b3:45:46:a5:36:01:
b6:2c:7c:17:d1:25:ff:88:72:74:45:a8:05:db:45:72:39:f0:
49:89:f4:ec:f4:61:3d:f4:15:2d:e5:2d:e6:e7:b2:91:d3:bd:
5c:b6:07:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org