Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/4nwL0JFvG2LnJiAoQrYrxL7_bY4.roa
File: 4nwL0JFvG2LnJiAoQrYrxL7_bY4.roa (raw, json)
Hash identifier: aFJOTtQG4GbgR1+BFDzGuFGXBFTIzQJN1nC9v8xbbCE=
Subject key identifier: E2:7C:0B:D0:91:6F:1B:62:E7:26:20:28:42:B6:2B:C4:BE:FF:6D:8E
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0E5A
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/4nwL0JFvG2LnJiAoQrYrxL7_bY4.roa
Signing time: Wed 29 Sep 2021 02:40:16 +0000
ROA not before: Wed 29 Sep 2021 02:40:16 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17709
IP address blocks: 210.63.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3674 (0xe5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:40:16 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E27C0BD0916F1B62E726202842B62BC4BEFF6D8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:9f:93:7e:37:88:a1:c9:65:08:6a:63:af:
c7:cc:f2:26:af:71:11:2d:27:64:ee:d6:d9:54:9b:
34:6a:45:ad:99:1d:d2:37:43:d8:8d:09:fb:1c:e4:
e3:7f:21:ee:bc:ff:6c:0a:bd:08:0d:34:97:27:30:
26:4e:81:d8:57:e9:3b:81:17:82:d9:cf:df:df:fe:
be:bb:56:b0:72:6a:83:86:59:65:3f:b5:19:06:93:
7c:ec:49:ec:30:11:aa:94:f6:e7:5b:96:e0:e4:41:
90:66:31:fc:d5:9a:b6:e3:78:7e:38:6b:a6:f2:5b:
93:8e:05:75:7d:b1:99:90:c6:ef:b2:33:cf:30:f9:
70:96:be:31:45:81:54:1c:ec:bb:f9:99:41:79:75:
db:a5:97:b4:eb:7e:84:28:18:b3:95:de:b8:d7:4e:
33:4c:3b:86:fb:1c:12:70:2b:d9:88:97:58:d3:7c:
67:ad:23:da:80:f3:da:78:ea:6f:de:ac:f0:f4:8c:
a5:45:89:02:3b:a8:12:d5:c9:02:1c:cf:a2:92:f7:
e5:39:5f:3d:50:ad:80:fb:ea:0b:9c:43:9a:b2:dd:
6d:31:b1:47:3c:b3:77:d7:06:13:f8:da:aa:79:b6:
1c:40:f8:fd:4d:77:fd:e0:09:62:14:ee:2a:df:db:
6c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7C:0B:D0:91:6F:1B:62:E7:26:20:28:42:B6:2B:C4:BE:FF:6D:8E
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/4nwL0JFvG2LnJiAoQrYrxL7_bY4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.253.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:fc:d8:99:64:7b:aa:41:a9:9a:09:8e:4b:b3:46:35:0a:74:
c5:9f:ec:cb:cc:45:76:97:67:82:7b:30:33:9f:aa:e6:53:ed:
5d:05:2d:31:24:10:9d:5a:9b:59:79:c4:0b:d7:ba:3a:c8:27:
6a:08:db:de:44:9c:5e:85:2b:f3:4e:65:d4:9d:0b:a1:0d:f0:
32:dd:8c:93:13:86:77:72:ea:11:9f:3c:98:93:f5:75:50:e9:
a4:0c:98:75:b6:a6:18:81:c7:7e:aa:fa:01:d1:16:32:c1:30:
e4:43:c7:0f:2d:37:ce:4d:98:59:7b:89:e8:3c:44:91:09:44:
3a:77:f9:a7:e5:4c:9c:ca:50:b5:c0:f5:a6:a8:1b:38:69:f8:
6f:55:83:9e:8a:31:e7:2f:e6:29:e2:4e:8b:67:fe:a0:0e:40:
67:af:37:db:6c:d0:cc:62:04:34:36:d5:49:10:2f:a6:44:0c:
b0:f0:81:77:7f:01:4e:54:dd:3d:7c:0f:02:eb:d2:aa:61:dc:
99:8e:36:89:08:c6:71:1d:1d:15:9a:ac:d5:66:45:e6:50:d5:
92:71:7a:df:ec:12:7b:a1:e2:7f:7d:7b:a3:e8:24:d1:30:ec:
d0:1e:75:a7:0e:98:b5:1f:2b:25:0b:68:e0:42:3c:b2:c5:6f:
d3:21:a5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org