Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/5Ssliq1hsB5V8a-pkMDivKtxtHE.roa
File: 5Ssliq1hsB5V8a-pkMDivKtxtHE.roa (raw, json)
Hash identifier: /AM+8QII9oTAVTDCLRjoyusqzzR6Zsq7IJj6s+oafdU=
Subject key identifier: E5:2B:25:8A:AD:61:B0:1E:55:F1:AF:A9:90:C0:E2:BC:AB:71:B4:71
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0969
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/5Ssliq1hsB5V8a-pkMDivKtxtHE.roa
Signing time: Tue 29 Sep 2020 10:01:48 +0000
ROA not before: Tue 29 Sep 2020 10:01:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 60.244.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2409 (0x969)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:48 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E52B258AAD61B01E55F1AFA990C0E2BCAB71B471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ae:66:cd:8e:fb:4a:45:6f:f1:53:9a:93:66:
19:b0:1e:79:c8:df:9e:cc:bf:03:a0:99:b2:a2:11:
27:b2:2d:ca:8c:c4:66:ad:21:65:7a:fd:a7:a0:91:
a4:f4:49:9d:de:c0:bb:8d:6f:4f:bf:f5:e0:f5:54:
17:b6:af:4b:68:32:42:85:f6:53:36:2a:f0:4f:28:
c5:5c:de:ee:71:82:17:b7:12:ed:98:25:10:d1:a2:
5c:6a:88:21:34:a5:7e:44:09:84:aa:fa:16:fb:a5:
db:85:e8:e0:7a:bd:06:b3:3f:7a:56:6f:01:5f:43:
f8:ad:09:5f:00:ee:ac:a5:1a:a9:1c:2a:6e:1b:1e:
88:33:1f:3a:2d:9c:10:75:22:fd:5d:5c:5e:8d:cf:
50:a6:3d:b2:be:12:8e:2d:2a:6f:bf:21:c1:2c:5f:
26:c0:f4:22:5b:bd:a5:f2:a8:0b:e6:92:4b:c4:ca:
70:3f:c7:ef:d5:88:16:b1:3c:59:19:b1:47:f4:e2:
5d:ce:f5:fe:d6:8c:2f:1d:cc:60:3f:84:b0:cd:bd:
42:2f:9e:19:28:ad:58:68:ee:6c:4c:5b:2a:ce:f0:
1e:5c:d9:8d:3b:a9:d6:b9:3d:cd:91:9c:04:f0:ed:
57:1e:7e:4d:80:d0:34:91:4b:b7:96:41:4f:81:3d:
de:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2B:25:8A:AD:61:B0:1E:55:F1:AF:A9:90:C0:E2:BC:AB:71:B4:71
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/5Ssliq1hsB5V8a-pkMDivKtxtHE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.244.0.0/17
Signature Algorithm: sha256WithRSAEncryption
74:37:10:99:ed:00:43:22:cb:76:9a:ff:b0:e9:d3:14:08:e5:
9a:c8:d6:77:24:b2:b5:af:95:ad:e6:ac:66:01:c4:9f:3c:a1:
83:7c:71:61:08:26:e4:11:cc:c5:d6:ea:07:d3:e1:6e:aa:a8:
8d:b1:9d:86:f6:41:7f:78:87:81:aa:48:93:28:0b:1d:fd:b5:
01:d6:2b:9a:73:0e:cd:1d:40:ad:ad:2d:a9:1f:33:e0:78:6a:
fc:93:a0:91:a9:4f:cb:d4:1b:22:73:12:0f:fa:7d:5b:34:59:
71:da:78:a9:0e:fe:34:88:47:6e:cf:46:26:f3:c7:a4:0d:d9:
2b:54:8c:92:71:33:b4:f9:5b:bd:91:5e:bc:47:83:ae:58:8d:
64:8c:f0:90:3b:9d:93:d8:65:4f:d7:59:be:54:47:09:de:e3:
96:92:06:89:11:43:32:11:7d:4f:54:0a:e0:c4:96:19:1c:c7:
cc:3d:82:19:cd:c1:f8:77:8d:41:0d:8a:49:1f:3d:61:93:57:
90:60:36:c3:cc:36:61:67:b4:8e:d4:67:51:07:aa:78:4d:c4:
52:ff:f4:9c:92:b9:90:36:ee:ca:b4:1d:32:e4:71:36:0c:3d:
60:a9:70:c1:18:47:4c:78:a2:31:64:9a:02:10:64:52:a2:55:
be:9c:3b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org