Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/67w5E2NFZ2h40st4Ngc01_7OCYQ.roa
File: 67w5E2NFZ2h40st4Ngc01_7OCYQ.roa (raw, json)
Hash identifier: EmDOce7ozIyNets5hwz0wXXZFLTsZ3MY8li76uE5KiU=
Subject key identifier: EB:BC:39:13:63:45:67:68:78:D2:CB:78:36:07:34:D7:FE:CE:09:84
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 10CA
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/67w5E2NFZ2h40st4Ngc01_7OCYQ.roa
Signing time: Tue 16 May 2023 08:36:38 +0000
ROA not before: Tue 16 May 2023 08:36:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 2001:f10::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4298 (0x10ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:38 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EBBC39136345676878D2CB78360734D7FECE0984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b9:11:8b:0e:d5:98:fd:77:2b:41:a2:0d:49:
a2:0a:a5:55:3b:21:57:24:41:f4:38:f5:79:a2:47:
e5:75:cb:08:35:6a:1d:f9:f2:7c:55:fa:cc:10:1c:
06:cb:37:63:a5:30:0f:52:ac:22:01:a6:22:0f:c9:
cc:f6:03:ae:ec:66:3e:cb:a2:89:b1:94:a5:ca:4a:
d5:13:78:19:19:9a:33:9c:8b:07:7a:6d:87:7b:b1:
e3:b3:da:40:de:7a:4c:25:dd:71:28:70:ac:32:f9:
22:51:79:8e:06:b8:a4:16:f6:b6:2c:67:da:fe:65:
7e:32:89:35:09:12:a1:71:6a:2b:55:8d:87:b5:00:
41:a0:cb:60:c4:6c:1b:b5:cf:29:37:79:2c:9a:e6:
4f:d8:d6:7b:aa:24:11:07:9e:f0:1c:21:eb:f2:a8:
e7:aa:a7:76:38:22:9d:65:60:b0:01:16:fb:f9:11:
a8:a1:58:b6:94:75:d7:4e:f2:93:b7:f3:7f:d7:35:
25:72:90:b0:43:c8:9e:83:6f:75:18:62:2c:95:c6:
a8:9f:ac:20:da:99:b0:69:80:2c:88:88:20:7b:0c:
35:b3:42:e1:3d:8d:05:41:56:94:52:f4:f0:cd:8c:
a0:39:dc:2d:c8:30:31:a5:f7:75:ba:5e:54:ae:28:
1c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BC:39:13:63:45:67:68:78:D2:CB:78:36:07:34:D7:FE:CE:09:84
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/67w5E2NFZ2h40st4Ngc01_7OCYQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:f10::/32
Signature Algorithm: sha256WithRSAEncryption
41:74:6c:fd:7c:75:16:c7:86:0d:53:0e:7a:6c:7f:22:fb:30:
3d:ab:52:c0:1e:89:a2:d5:f5:60:c8:53:73:9d:62:aa:b4:79:
7c:10:0f:55:94:a6:3c:e8:03:ca:e2:31:03:38:f0:3f:a8:2a:
ea:49:64:11:4b:23:a9:31:53:3b:96:7e:d7:9a:00:de:89:51:
ec:00:4a:be:2e:f2:d6:2b:0f:08:e2:87:bb:0f:a8:68:28:2c:
e4:04:2e:07:0a:6f:53:4d:6e:fa:2b:29:6e:36:ed:5c:a6:af:
9a:53:6b:84:3f:87:f7:82:8e:83:c3:06:ca:9c:91:21:5e:ae:
95:72:83:7d:7f:03:54:c9:2d:2f:22:01:63:20:09:bd:64:54:
e9:d7:37:26:63:a1:7d:53:71:c5:28:6d:5b:19:af:b7:2b:73:
a1:e0:5d:98:99:d6:47:cf:0a:50:25:2b:ee:47:14:5a:7d:2d:
9d:95:77:ab:8f:7c:d8:41:da:6f:77:c6:35:85:96:6f:14:fa:
5d:4a:52:52:05:63:21:49:e3:7b:12:61:94:f7:4f:c1:28:16:
ca:ae:72:bb:b2:d5:bf:3a:5d:08:fd:fe:33:2f:67:ab:88:33:
21:26:90:22:33:be:c5:80:b1:54:39:69:29:eb:8d:33:3f:99:
7d:6f:6b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:59 2024 by rpki-client on console-ams.rpki-client.org