Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/4JVEqYNQMoZh67SI9rJ8VojsUA4.roa
File: 4JVEqYNQMoZh67SI9rJ8VojsUA4.roa (raw, json)
Hash identifier: E/+P1Wjt+yOzg7D/GR/F11BkXjkTSnqoWeaOl9MiHpA=
Subject key identifier: E0:95:44:A9:83:50:32:86:61:EB:B4:88:F6:B2:7C:56:88:EC:50:0E
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 106A
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/4JVEqYNQMoZh67SI9rJ8VojsUA4.roa
Signing time: Tue 16 May 2023 08:36:10 +0000
ROA not before: Tue 16 May 2023 08:36:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9415
IP address blocks: 2404:0:3000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4202 (0x106a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:10 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E09544A98350328661EBB488F6B27C5688EC500E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:af:0e:df:5a:d7:74:ba:9f:c5:12:58:42:ac:
76:65:fc:1c:e6:a2:9c:1f:fe:29:0b:f9:64:35:d8:
8f:e5:30:1e:8f:9a:52:d1:6d:df:53:ae:cb:1f:08:
c4:51:e3:9a:08:2a:f4:41:06:ab:c7:f6:48:1f:97:
c4:d9:a5:d5:46:6c:3b:aa:04:47:d2:d2:9b:b1:59:
2a:6b:ee:ad:0f:9d:a1:c8:0f:cd:6f:eb:5b:2f:05:
f5:b1:0c:01:be:1e:8f:92:77:18:22:67:63:4c:97:
64:fb:92:99:8e:fa:df:48:91:91:cc:79:6a:37:fc:
b2:26:df:ba:d7:8c:ed:f3:9e:9e:c1:be:a4:a4:63:
9b:19:08:66:eb:47:13:fd:0b:16:17:56:bb:af:73:
4a:a3:bf:30:42:23:2f:9e:55:bd:30:97:34:c0:4b:
4a:2a:8c:53:42:ae:41:04:fe:eb:18:26:fb:64:5c:
c0:45:6a:bf:46:1f:37:97:65:62:ee:d3:50:9d:cf:
9e:08:7c:7a:3b:a4:a8:85:32:8a:e0:4c:21:6f:9e:
9a:1a:55:d6:af:6f:5c:af:9f:76:a6:16:b8:8a:27:
bd:4a:c9:7a:3b:b0:b1:23:0e:16:69:40:b5:4a:c4:
b0:52:89:a9:46:77:e8:87:72:14:ce:3a:80:75:98:
56:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:95:44:A9:83:50:32:86:61:EB:B4:88:F6:B2:7C:56:88:EC:50:0E
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/4JVEqYNQMoZh67SI9rJ8VojsUA4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:0:3000::/36
Signature Algorithm: sha256WithRSAEncryption
24:ff:d1:7e:19:ad:57:80:5f:9f:71:61:c6:79:04:b4:5d:91:
be:51:88:f5:82:5f:10:0a:39:5a:ca:81:fc:47:7f:74:60:2c:
81:74:89:66:92:ad:5c:ef:3a:41:74:38:6f:2b:96:5c:1e:2f:
25:9d:c3:64:43:1d:c5:08:de:cd:5a:3d:34:ee:22:5d:a7:dd:
14:e3:40:b9:6f:90:17:d1:59:84:b9:a1:17:f2:92:02:dd:5e:
15:39:af:1f:ee:88:fb:9f:8c:e9:fc:d6:47:b6:59:81:a9:75:
60:cf:f8:74:12:e6:80:93:31:f8:2c:f6:e5:19:d0:c1:f6:d9:
6a:d1:5d:e5:3c:63:08:d9:61:43:20:bc:0e:10:ce:9e:46:aa:
ff:01:64:7f:5a:f5:b8:bd:cd:32:95:5c:37:c5:00:c8:fc:d8:
2f:1f:e8:65:a2:90:b3:2a:ae:b8:83:d2:be:5c:87:d5:ed:14:
9f:15:a0:8a:20:b9:d7:c0:de:65:df:ba:ba:b1:60:05:f9:16:
bb:5f:61:ed:d3:9c:7b:bf:03:9a:48:bc:95:88:18:53:31:89:
15:82:6f:dd:47:1e:46:92:fc:3d:60:56:24:8c:17:9c:aa:7a:
07:ea:e7:90:79:3b:e1:da:3f:4a:cf:1e:68:59:93:a9:6b:95:
c3:98:e6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:59 2024 by rpki-client on console-ams.rpki-client.org