Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/4GkjQnAQwPNojBZfuTZMH19SFPw.roa
File: 4GkjQnAQwPNojBZfuTZMH19SFPw.roa (raw, json)
Hash identifier: ohhAtLWMPZIlP0QFIRE5MHqPzYNhtOaJN0yJPfzfEvA=
Subject key identifier: E0:69:23:42:70:10:C0:F3:68:8C:16:5F:B9:36:4C:1F:5F:52:14:FC
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/4GkjQnAQwPNojBZfuTZMH19SFPw.roa
Signing time: Thu 15 Sep 2022 02:39:42 +0000
ROA not before: Thu 15 Sep 2022 02:39:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 210.200.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:39:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E06923427010C0F3688C165FB9364C1F5F5214FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:18:f5:67:37:4c:54:f3:f0:e5:bd:61:f7:b6:
82:2d:6d:e3:a1:80:94:c3:95:36:87:1a:a5:b9:ac:
4f:18:5b:5c:27:c6:db:2f:87:32:68:79:c7:19:59:
6a:f2:1b:e3:58:a3:d7:4e:c4:fc:03:a2:c4:6b:8a:
b4:f4:02:06:64:9e:ea:c4:60:5d:04:f0:75:4e:7f:
ea:94:93:ec:dc:5f:af:5d:29:03:7e:7e:3d:e0:d3:
a0:db:19:65:1d:30:20:e7:0e:74:bb:44:3a:dc:8b:
f8:79:b2:6f:63:a4:8b:bc:7b:b0:a4:b9:24:83:43:
1f:2c:14:7a:31:68:0b:c2:b4:91:f8:8c:3d:a9:84:
e2:3e:1c:6b:e9:3d:14:db:67:d3:d0:bf:13:7b:13:
d8:f6:5e:39:7b:ac:2f:cf:3b:de:cc:76:b8:eb:8b:
9e:cf:42:cf:47:7b:f2:e5:2c:ed:81:96:40:74:6e:
84:ca:fa:13:43:d1:f9:31:5c:bd:04:cd:14:ce:dc:
aa:30:27:b5:20:f4:47:7d:0d:52:33:40:60:5c:f4:
c8:6d:fe:fa:ae:61:b3:ad:66:30:d9:8c:d4:18:91:
d9:ac:b8:e1:a1:63:fa:0b:b1:d9:50:bb:5b:e1:d3:
53:10:60:2a:b0:9a:32:83:b5:90:64:05:c5:32:87:
38:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:69:23:42:70:10:C0:F3:68:8C:16:5F:B9:36:4C:1F:5F:52:14:FC
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/4GkjQnAQwPNojBZfuTZMH19SFPw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.83.0/24
Signature Algorithm: sha256WithRSAEncryption
82:28:b2:20:93:7e:6f:94:5e:7a:31:eb:61:a6:18:5e:6c:b5:
67:8e:ba:14:2b:32:15:ee:d0:fb:4d:78:64:3b:37:0f:02:de:
97:5a:7d:19:04:d6:41:87:a5:f5:33:75:94:b3:7c:98:d8:c6:
70:49:fe:06:79:55:0e:2d:58:35:a3:21:cd:15:a2:8a:13:4e:
f6:82:35:1b:4d:e7:02:61:5f:6e:62:60:be:5a:27:48:76:cb:
e9:83:4c:3d:29:2a:0d:cf:b4:3b:e5:be:5f:ae:99:62:a0:e2:
fc:a8:20:90:e0:10:74:1f:a9:62:01:4d:7c:3f:46:10:eb:c1:
cb:f4:14:a9:61:6a:97:0c:65:14:6e:c7:d0:44:49:4c:8d:3f:
75:14:fe:44:93:87:34:3c:e4:27:9d:7e:9c:ac:d9:24:2a:aa:
9e:62:66:54:d1:88:22:4f:e2:4d:ad:6f:b8:0e:71:9a:d0:86:
e8:f6:3a:d5:2c:c3:db:96:05:e1:ea:85:71:29:52:5b:b7:2d:
f3:60:de:25:d6:61:71:a7:44:6d:b0:84:8c:71:9b:3f:93:c1:
5f:db:13:50:88:98:a7:e5:0f:5c:e0:f8:f2:42:62:1b:5d:61:
1b:97:ee:8b:95:5d:6e:8d:98:94:c1:5a:13:e7:35:22:be:08:
6b:d1:62:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org