Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/4lYHBD7D29dFrSWNVB0NyHY44Nk.roa
File: 4lYHBD7D29dFrSWNVB0NyHY44Nk.roa (raw, json)
Hash identifier: o+V8XQyqiOcAd3gy5QBrJouwb779dTU6Jc6GiZAAcmY=
Subject key identifier: E2:56:07:04:3E:C3:DB:D7:45:AD:25:8D:54:1D:0D:C8:76:38:E0:D9
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DCD
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/4lYHBD7D29dFrSWNVB0NyHY44Nk.roa
Signing time: Wed 29 Sep 2021 02:39:34 +0000
ROA not before: Wed 29 Sep 2021 02:39:34 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 7482
IP address blocks: 210.200.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3533 (0xdcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:34 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E25607043EC3DBD745AD258D541D0DC87638E0D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:67:80:20:03:5a:7b:ca:46:df:11:c8:11:
c2:68:30:e9:f8:cc:ea:fc:72:87:e3:92:bf:1c:73:
93:b6:b9:58:26:04:d0:54:7b:f2:f8:2d:69:44:9f:
5c:3b:81:a2:b5:15:8a:5c:d4:34:5f:5f:11:37:bb:
8f:61:9e:88:52:7b:2c:19:1e:72:e9:5a:55:35:1c:
bb:22:ae:65:2f:b4:6b:2f:17:94:29:6b:9d:d3:9d:
6a:d2:e6:6a:1d:43:32:31:13:46:62:4c:24:cc:b4:
99:66:00:79:c8:e0:ed:c5:da:aa:3f:e5:fa:bb:0a:
5e:07:2e:a7:9e:d6:d4:61:0e:b9:7b:b8:46:cd:fd:
4a:11:db:67:ff:c0:98:13:1e:cf:67:64:5f:e3:44:
2d:ff:34:52:d8:0b:21:8a:f1:a2:11:fe:cb:ab:3c:
e2:97:81:2a:82:23:e2:68:87:9e:90:ba:bd:71:45:
a9:e4:cb:db:17:e7:ef:65:f7:5e:a1:60:4d:c1:e4:
6e:02:da:79:25:69:81:59:5e:3c:7a:87:17:c5:44:
d0:5f:a7:ef:6e:a2:70:d5:0b:52:05:d8:cf:4b:70:
e6:37:a7:3d:6d:00:fc:46:66:c4:e7:33:f6:6a:fa:
bc:f5:30:31:33:89:25:d7:f2:dd:c7:e2:44:94:19:
26:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:56:07:04:3E:C3:DB:D7:45:AD:25:8D:54:1D:0D:C8:76:38:E0:D9
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/4lYHBD7D29dFrSWNVB0NyHY44Nk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.64.0/18
Signature Algorithm: sha256WithRSAEncryption
68:96:13:cd:e1:f9:0f:a2:34:bc:14:a7:4b:ff:07:fb:83:47:
57:54:58:aa:b4:27:5a:e2:5c:bf:31:e4:a6:dc:a8:02:6b:84:
1b:63:3c:61:2d:59:d4:46:30:df:0c:b2:2d:4e:4c:ea:2e:62:
e7:68:8e:28:9f:db:8a:a3:38:a6:a5:56:f5:dc:80:c1:2c:ab:
37:a4:64:82:3a:ec:d8:0d:3f:3b:f5:e4:92:02:f0:12:e5:4e:
aa:d8:4f:e1:d9:4c:e3:af:62:cb:38:6f:9c:2c:48:c6:c5:33:
85:84:46:d2:3e:3d:af:2d:89:16:fd:ed:1d:66:bc:1a:d0:8e:
d3:00:de:ed:39:b9:2b:8b:9e:44:0e:2a:7f:7c:80:e5:ce:4a:
e8:96:65:85:54:14:75:4b:27:25:a9:3a:91:3e:49:64:95:e4:
59:ce:8d:de:33:64:de:83:78:9a:10:ad:7e:f6:66:a4:6a:36:
56:d5:d9:d1:94:63:ee:00:45:e0:24:bb:00:59:e8:0b:2f:2e:
87:76:ae:96:ab:f0:7e:e2:e7:c2:6a:28:47:5c:cd:ec:c1:3d:
03:f9:06:4c:b0:39:78:cb:66:ab:90:7d:3b:5c:c6:7f:32:ee:
72:d1:9a:e0:85:97:d3:1e:9b:28:c1:e6:cb:c8:7a:e6:3f:51:
63:07:ec:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org