Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/2qg_agBle82MCApJGvdrA0VsxJc.roa
File: 2qg_agBle82MCApJGvdrA0VsxJc.roa (raw, json)
Hash identifier: dsXY4N3BfgjxLRO7B9iJx1IbkcELBq3wN3MERgglr9g=
Subject key identifier: DA:A8:3F:6A:00:65:7B:CD:8C:08:0A:49:1A:F7:6B:03:45:6C:C4:97
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0E17
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/2qg_agBle82MCApJGvdrA0VsxJc.roa
Signing time: Wed 29 Sep 2021 02:39:57 +0000
ROA not before: Wed 29 Sep 2021 02:39:57 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 7482
IP address blocks: 210.58.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3607 (0xe17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:57 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=DAA83F6A00657BCD8C080A491AF76B03456CC497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:81:77:a6:73:d0:51:ef:e9:45:8e:75:52:a3:
36:75:d7:3b:91:be:04:47:8c:5d:60:1b:de:18:1a:
e0:6e:cc:3c:8a:c9:5a:6a:60:1c:62:69:02:6b:10:
8a:6e:af:9b:36:e3:00:03:38:64:0b:5b:a7:c1:ff:
2b:fc:63:ee:75:a7:48:f5:3f:2a:86:3d:7c:a3:2e:
db:58:e9:0d:52:d7:22:73:0f:3c:cd:10:68:4b:d4:
1c:f0:c0:9d:3a:49:c1:cf:c0:2f:9b:e1:d8:95:66:
db:38:07:8a:9a:bc:0e:5c:6c:4b:70:79:09:af:11:
39:8e:05:fd:4f:87:2d:2d:cd:ef:59:17:66:da:22:
8d:d7:09:8a:ed:9f:b4:74:cf:43:46:c1:0b:ab:a2:
4c:42:67:59:54:89:16:d6:bc:b1:31:6f:a8:22:4c:
d2:cd:7b:3b:88:e3:0f:bf:3b:b0:31:35:c6:ad:9f:
fd:7b:18:3f:1a:9e:45:d6:d0:16:fb:44:c9:e1:02:
73:96:54:b3:4d:c2:5a:d1:03:71:f9:eb:b1:f6:9d:
47:ea:c9:ce:73:45:f1:60:e9:c7:2a:92:ea:e4:f8:
42:76:76:3f:57:37:34:d6:a9:37:5c:11:5a:36:14:
44:7b:6d:06:90:76:b9:91:e2:ab:a3:e9:09:03:ff:
63:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A8:3F:6A:00:65:7B:CD:8C:08:0A:49:1A:F7:6B:03:45:6C:C4:97
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/2qg_agBle82MCApJGvdrA0VsxJc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.58.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:0a:d0:89:f0:2f:88:fe:36:b5:42:c4:04:3e:98:f2:a1:b8:
42:ee:94:e5:35:cd:e0:f6:a2:15:4f:4f:ef:6d:a7:a8:c4:c6:
8c:60:eb:ad:df:04:a2:8a:15:f3:e5:55:4e:26:c3:c3:dd:7f:
f8:ae:f1:d7:65:08:b2:22:c4:ab:9f:b5:c4:c2:9b:f3:7a:31:
a4:ce:97:ec:51:3a:8f:06:a8:6e:9e:d6:20:e4:64:d1:5b:a5:
10:98:07:41:91:43:fb:b4:f2:89:fc:7a:eb:2b:6f:56:2f:3f:
c7:74:34:c1:c5:60:9e:c6:65:a8:4a:56:d8:5f:67:12:cc:4a:
63:be:71:21:97:9b:e5:32:6d:ec:f8:e6:41:37:2a:cf:90:75:
68:7a:eb:2b:95:95:7f:2d:5d:f7:eb:5f:c9:99:a2:d7:8f:87:
49:a3:69:96:ab:62:0b:dd:5b:ff:8e:fb:3e:ab:23:f1:f7:0b:
ed:3f:22:49:46:e0:61:a0:e4:f7:6c:ec:f2:93:c3:b2:39:7a:
a8:d9:6f:68:84:44:dd:32:0b:44:0a:7d:3e:b8:e5:57:51:1c:
d4:d7:a8:c0:00:5f:92:7c:93:d2:de:ae:44:57:c0:ae:f2:30:
5b:cf:dd:72:6d:80:48:87:6e:3a:51:25:48:e3:c4:49:db:1a:
67:ff:56:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org