Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/3zSzRJEyato1UirR3zIcD4AZ7Pc.roa
File: 3zSzRJEyato1UirR3zIcD4AZ7Pc.roa (raw, json)
Hash identifier: 0bWTuEY8WEP1AxRj/ZpBBny3+l4MLWc5sqLqveAJK2s=
Subject key identifier: DF:34:B3:44:91:32:6A:DA:35:52:2A:D1:DF:32:1C:0F:80:19:EC:F7
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 094E
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/3zSzRJEyato1UirR3zIcD4AZ7Pc.roa
Signing time: Tue 29 Sep 2020 10:01:41 +0000
ROA not before: Tue 29 Sep 2020 10:01:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131591
IP address blocks: 223.22.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2382 (0x94e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:41 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DF34B34491326ADA35522AD1DF321C0F8019ECF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:d2:11:cf:fa:48:2e:4f:f8:6b:0e:d0:07:
2d:9c:7d:13:c9:2e:16:a4:49:ba:26:15:a0:01:2b:
4d:05:ab:dd:7e:1f:10:a0:aa:9d:10:82:f4:a6:1e:
a4:76:65:f8:17:9d:21:f8:0a:33:a7:2a:25:b6:fd:
d4:d9:6a:e5:83:1c:14:50:ab:85:6c:3e:eb:2a:2f:
ad:ce:e5:dd:e0:ee:8b:02:6b:6d:49:0b:a9:5f:bc:
b0:43:e5:d4:4e:11:30:80:0a:72:0a:e7:35:eb:dd:
5a:f7:f9:ea:ff:3f:70:94:ee:b8:e7:70:9d:8e:88:
33:de:07:32:5f:de:e3:d2:79:7d:a1:f3:e2:f0:b2:
f3:d1:7a:c5:0f:c8:67:0b:f5:c7:48:98:75:76:65:
b1:83:d8:4d:a0:b3:c3:1b:4b:4f:66:fb:04:d3:58:
9e:8e:4f:ff:69:60:c1:c2:e6:a5:06:a7:e5:5b:b4:
b5:21:bb:6b:f3:57:67:c3:34:be:69:80:cf:be:8f:
52:87:f1:3c:82:ed:4d:a8:dd:38:a7:a2:7e:14:12:
60:77:21:7e:c3:57:d9:de:d8:20:04:cf:b9:e9:e3:
fe:35:3d:e8:c8:74:c8:d2:a5:c0:ac:50:1b:5f:b1:
3c:b4:e0:79:2a:9f:79:e8:a9:ed:d9:07:63:af:c6:
c5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:34:B3:44:91:32:6A:DA:35:52:2A:D1:DF:32:1C:0F:80:19:EC:F7
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/3zSzRJEyato1UirR3zIcD4AZ7Pc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.22.0.0/16
Signature Algorithm: sha256WithRSAEncryption
44:de:a9:69:ec:b0:bb:d0:9b:f6:1c:16:98:e4:66:94:1a:02:
9e:35:79:a8:e7:53:69:b5:06:a9:24:11:de:0b:d2:7a:7d:83:
47:fc:7b:d6:02:d2:49:3c:1e:6e:08:f9:4d:aa:5f:6a:6b:ce:
d9:03:8a:63:1a:a3:db:70:00:5a:ce:3d:05:3d:40:ab:a3:54:
cf:1d:5e:b9:d4:89:99:30:ea:57:46:07:4a:88:a0:cb:3e:15:
a5:b1:83:a6:b5:ee:c1:a3:a9:f0:53:ba:61:50:f6:1a:3e:c8:
00:13:3c:5d:3c:6e:c5:17:c2:1e:d6:fc:a2:ea:34:ad:9c:4f:
c0:c2:71:ee:db:ef:58:d2:21:03:eb:4c:fe:dc:78:cf:1b:70:
08:30:b1:16:16:60:87:39:80:b7:b5:df:34:a4:d4:d1:10:ab:
c3:92:2f:57:43:bc:cf:3a:22:c6:53:21:37:54:ce:cb:a9:6f:
5d:8e:17:74:37:26:8f:a0:b6:b1:43:5e:b2:d2:53:31:29:86:
a3:7f:c9:8c:2d:13:86:9d:fa:c1:96:a0:a5:88:4f:21:3f:98:
95:5c:16:29:3d:c9:a8:1f:50:83:37:18:7b:67:33:38:02:1b:
5d:40:71:4f:e5:b8:5c:36:d3:fd:3c:27:57:b4:b0:09:a8:00:
e2:ce:ec:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org