Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/2dm1nWKxxFDx-l1L-0M0lnWxg1w.roa
File: 2dm1nWKxxFDx-l1L-0M0lnWxg1w.roa (raw, json)
Hash identifier: n6S3hmRNCSMjVKRi3Se3ko2y4xFec5f2yi0SBFu95Sw=
Subject key identifier: D9:D9:B5:9D:62:B1:C4:50:F1:FA:5D:4B:FB:43:34:96:75:B1:83:5C
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1273
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/2dm1nWKxxFDx-l1L-0M0lnWxg1w.roa
Signing time: Fri 01 Sep 2023 08:04:29 +0000
ROA not before: Fri 01 Sep 2023 08:04:29 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7482
IP address blocks: 210.85.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4723 (0x1273)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:29 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D9D9B59D62B1C450F1FA5D4BFB43349675B1835C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ab:eb:56:d9:31:bb:8b:ef:80:c0:84:15:46:
4a:30:fc:7d:54:68:ab:74:fa:1b:25:5c:05:e0:45:
2f:0d:12:61:50:65:f9:c9:f4:55:97:3f:c8:85:7f:
4e:ac:dd:38:47:e2:73:1f:80:df:6a:f0:4c:f2:5a:
95:5f:b8:67:ce:8e:90:01:bd:16:59:fe:f1:ac:fb:
17:c0:cd:b7:96:ce:07:e9:7e:20:5c:45:b8:77:23:
ad:b6:dc:21:fc:26:74:69:1e:62:f2:26:d2:a1:67:
4b:79:5b:8f:7e:51:9b:66:67:25:e8:f8:0c:03:fb:
d7:ae:00:39:9e:cb:04:c0:a1:15:30:e8:7d:ff:c7:
6a:b1:71:16:29:c1:67:5a:f2:4c:5b:df:1a:d4:20:
d0:08:57:31:f4:c8:ee:5d:41:11:4b:58:70:73:a0:
45:36:88:f7:5e:b5:9a:85:59:28:94:6b:31:cf:44:
4c:44:35:17:88:2c:e6:09:93:78:e2:68:02:57:bc:
8e:1c:08:9a:f8:d4:f2:f9:b8:79:6f:3b:e3:2d:d5:
25:38:fd:cf:3e:e1:4d:11:1f:9d:e0:d5:24:34:60:
4a:76:70:77:fc:72:ab:f7:4a:18:11:3f:98:5c:45:
ff:b6:d4:70:54:3f:c0:a3:ac:2b:f3:fe:bd:1b:9e:
aa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D9:B5:9D:62:B1:C4:50:F1:FA:5D:4B:FB:43:34:96:75:B1:83:5C
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/2dm1nWKxxFDx-l1L-0M0lnWxg1w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
13:49:f7:db:62:62:8b:ea:c7:09:bf:82:ab:c3:75:03:a8:9c:
7d:62:37:0f:45:fc:ba:be:aa:32:00:36:b9:a0:e3:0d:26:a4:
f3:d0:49:0d:e7:a2:b9:b7:5e:8f:33:8e:60:8b:40:05:47:9d:
1c:12:2e:43:f3:51:ea:88:18:1d:e2:cd:a2:2d:63:d8:bc:25:
c9:80:45:cb:d6:e5:56:d5:1e:75:02:b5:cf:7d:9f:75:59:c3:
c5:a1:9e:44:5e:c1:ff:f3:ff:2a:8b:e2:76:ec:38:7d:82:03:
0d:65:27:68:8a:4b:c6:89:28:f5:d6:b0:b0:5d:4e:1e:6f:2e:
85:1f:d1:c0:78:16:3b:ec:07:76:db:ad:78:e2:5a:7c:6a:54:
91:b8:fd:56:f8:9f:9f:2d:c2:61:19:a3:48:a4:39:c9:b4:dc:
96:7b:53:70:89:92:a3:17:80:a7:de:3a:e0:cf:99:37:f4:5b:
4c:32:01:81:8a:70:04:74:d5:b9:c4:51:ea:8a:00:6f:63:03:
b6:13:74:28:67:3e:b8:8a:d8:50:47:b9:07:39:2f:45:92:a2:
44:af:58:9e:f1:ef:a1:1a:49:23:90:05:3a:80:51:d6:2c:cd:
fa:42:42:65:51:4b:3e:69:ae:cb:fb:f2:aa:f1:60:44:f0:d8:
20:9c:a0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 22:54:32 2024 by rpki-client on console-ams.rpki-client.org