Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/5BGMhTJudQPkkzV1ml7_tE4FkUo.roa
File: 5BGMhTJudQPkkzV1ml7_tE4FkUo.roa (raw, json)
Hash identifier: GTWl8+lxBhlhRhPLTWgiYCSGD73KsAktjsJ9zRM/+kM=
Subject key identifier: E4:11:8C:85:32:6E:75:03:E4:93:35:75:9A:5E:FF:B4:4E:05:91:4A
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0C9B
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/5BGMhTJudQPkkzV1ml7_tE4FkUo.roa
Signing time: Sun 07 Feb 2021 11:47:06 +0000
ROA not before: Sun 07 Feb 2021 11:47:06 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 203.79.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3227 (0xc9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:47:06 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E4118C85326E7503E49335759A5EFFB44E05914A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e6:1e:84:dc:d3:ba:c9:7b:50:3f:84:ef:30:
97:b5:f6:3e:53:01:f8:d9:51:03:93:49:36:d5:68:
09:42:b9:4c:8b:86:92:98:f6:7a:53:38:f4:20:05:
9f:99:61:a6:6a:20:81:4f:07:b3:74:4a:73:ba:f7:
7f:15:49:de:79:d5:63:9f:ab:b5:6b:49:0d:bf:78:
87:a8:2f:e5:47:75:5d:41:b0:dc:51:89:6c:23:d2:
99:ff:47:84:0d:c9:9a:ea:c5:65:07:7c:d1:31:ca:
a0:b2:91:4c:41:3e:c3:3b:40:b3:42:50:ee:84:e1:
d0:b3:ba:36:2e:9e:37:d9:5d:b8:e9:09:86:e6:52:
91:2a:19:4c:36:b0:f0:db:b1:bb:79:cf:4b:65:32:
20:51:99:2a:c5:01:24:d1:94:df:41:90:84:65:2b:
e0:cb:37:46:38:2d:ca:da:d9:5b:37:82:d7:da:37:
5e:a8:26:2a:0f:33:2f:24:87:d3:f2:5e:93:a9:9e:
39:7b:59:bd:37:b8:91:9d:d7:aa:5f:07:9c:60:5a:
48:9b:af:96:e2:ae:58:f4:58:77:9a:62:ce:52:91:
e2:14:a6:ff:ee:bb:d1:51:dc:32:0b:65:45:2a:57:
52:a1:da:47:ad:7c:ff:a8:9d:38:3a:34:0b:ef:21:
b5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:11:8C:85:32:6E:75:03:E4:93:35:75:9A:5E:FF:B4:4E:05:91:4A
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/5BGMhTJudQPkkzV1ml7_tE4FkUo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.251.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a1:26:e1:ec:ec:54:05:7c:18:02:02:67:f6:a3:f4:8e:bf:
27:38:5f:e1:19:e8:54:8f:3a:07:c8:27:64:55:15:3a:c3:af:
b1:86:8a:34:83:b4:34:b9:97:a0:b6:e3:32:cd:ac:91:1d:58:
43:13:cc:6d:b6:d0:08:ff:62:3e:96:58:a4:d4:fb:7f:40:8e:
3c:5a:06:9c:b1:33:08:23:e5:4a:92:62:e3:7c:b4:f8:67:64:
cc:50:e3:8e:cb:bb:c5:25:19:bf:f5:d9:2a:e6:5f:2b:ef:f5:
01:c8:f6:3a:04:d6:b4:9f:11:31:ff:98:c7:1e:6b:31:02:43:
de:fe:d5:d5:b4:29:8f:be:7d:12:c6:eb:d5:fe:ad:d1:ec:71:
cf:14:64:81:69:9c:68:41:a9:41:56:e7:9d:f8:26:b9:0e:f9:
44:bc:ef:8c:c6:5b:96:65:4e:2c:65:67:4e:39:d6:c5:82:c0:
c2:eb:d5:5c:6e:55:37:1b:e4:f6:59:f9:b8:f2:2b:0e:aa:95:
82:d8:ab:f1:b0:5d:a9:25:50:c7:8d:60:bb:47:e4:13:d1:50:
6f:b1:ef:96:47:7e:4e:d3:d2:5f:46:34:e1:cc:4c:ac:e8:9c:
36:b8:b3:a5:d6:1b:56:6c:6c:85:db:5d:1a:fb:6c:a7:58:c6:
7e:29:a7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:59 2024 by rpki-client on console-ams.rpki-client.org