Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/6Lzwe30N2jCiJkfK3ExLqH5t86g.roa
File: 6Lzwe30N2jCiJkfK3ExLqH5t86g.roa (raw, json)
Hash identifier: ziP3scayhU0USOJ+AR8X72bLQBp+KJM3T3X1eHtfZaE=
Subject key identifier: E8:BC:F0:7B:7D:0D:DA:30:A2:26:47:CA:DC:4C:4B:A8:7E:6D:F3:A8
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0B8D
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/6Lzwe30N2jCiJkfK3ExLqH5t86g.roa
Signing time: Sun 07 Feb 2021 11:33:11 +0000
ROA not before: Sun 07 Feb 2021 11:33:11 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131591
IP address blocks: 101.136.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2957 (0xb8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Feb 7 11:33:11 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E8BCF07B7D0DDA30A22647CADC4C4BA87E6DF3A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:b1:53:82:15:64:11:50:68:81:15:3b:2b:
dc:55:f4:0f:80:43:43:df:f1:18:f6:c7:b0:0e:ee:
1a:b7:22:3d:ae:25:87:83:cf:c1:f6:b3:64:a2:a7:
3c:71:36:a3:ac:68:07:f1:76:75:e7:b7:52:f5:1b:
32:71:84:09:bd:2a:61:01:82:03:3d:36:5b:f9:7d:
c8:d2:13:f4:16:6a:9d:d8:0c:b6:b3:81:6e:04:8b:
5c:9b:6e:98:06:e7:7a:fc:60:af:d5:e1:c1:61:3e:
e8:6e:e4:f2:10:1b:80:4c:ae:de:ea:95:b9:3d:87:
6d:6f:9d:db:76:8d:5d:2a:5e:6f:50:40:1e:db:6b:
f1:de:ab:73:82:15:83:aa:aa:97:e1:de:c6:b6:fa:
70:fb:a1:31:ca:07:f7:f4:ff:62:1c:2b:cc:fc:91:
c2:c4:e2:51:b2:23:28:20:a6:91:d2:34:cd:cf:ec:
2c:20:98:1d:f9:41:a7:54:d0:63:19:23:87:f4:3a:
b3:97:3f:3f:cf:f9:92:3c:75:9c:01:8f:8f:2f:07:
8d:b2:ea:24:ad:ad:58:c6:57:b7:0a:c2:f0:b9:7b:
0f:8c:e1:ed:98:d9:bd:5b:35:74:1d:a8:57:5e:47:
69:0f:e5:f2:9b:d8:56:8b:f4:11:8d:29:ab:94:46:
60:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BC:F0:7B:7D:0D:DA:30:A2:26:47:CA:DC:4C:4B:A8:7E:6D:F3:A8
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/6Lzwe30N2jCiJkfK3ExLqH5t86g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.136.0.0/14
Signature Algorithm: sha256WithRSAEncryption
9e:a2:69:0c:c2:8e:3b:1f:62:ff:bb:7f:41:25:99:bb:f1:b6:
70:c8:c0:52:07:b6:a7:a1:20:60:01:ff:c5:67:e2:af:22:83:
63:c9:12:6a:09:05:23:df:bc:1f:2b:f8:9e:bf:50:00:4b:41:
21:50:58:27:02:33:bf:88:5a:f5:07:83:89:2e:f1:9f:fc:92:
72:ba:1a:55:ea:74:32:04:b0:0e:f5:55:64:5a:ca:2d:44:a1:
1d:ff:aa:78:7b:aa:48:d2:0c:fe:68:61:28:42:f9:79:a5:90:
5c:db:32:7c:bb:e7:00:c8:b7:4d:3c:32:d7:20:c6:69:cd:2d:
e5:2b:7d:04:23:69:ba:24:6f:44:1e:d8:ca:da:2f:5a:9e:d5:
23:18:89:79:b1:82:73:43:a2:f2:a1:94:59:74:dd:df:94:a9:
66:b0:78:d2:ca:93:f8:24:23:db:6d:08:5f:b2:90:cf:12:c4:
1d:a9:07:e8:09:a7:37:30:6f:68:a0:b6:2c:cb:29:a6:c7:07:
e8:fe:ee:98:b6:e7:84:58:3e:c9:c1:ec:f7:21:57:93:dd:ec:
46:25:e2:de:a4:df:9a:ae:82:d8:02:db:04:36:b9:e3:5c:45:
0b:68:48:c0:82:4d:1d:75:0a:6d:ea:03:8d:d6:35:41:ff:99:
36:1d:5b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org