Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/6NjncMkkiXQji3iXtqZYJC8_C8U.roa
File: 6NjncMkkiXQji3iXtqZYJC8_C8U.roa (raw, json)
Hash identifier: XXL10p6rlKQfz7avH2E2Pk7+yxg7pYidziTLKhrxY3I=
Subject key identifier: E8:D8:E7:70:C9:24:89:74:23:8B:78:97:B6:A6:58:24:2F:3F:0B:C5
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1302
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/6NjncMkkiXQji3iXtqZYJC8_C8U.roa
Signing time: Fri 01 Sep 2023 08:05:16 +0000
ROA not before: Fri 01 Sep 2023 08:05:16 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 210.202.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4866 (0x1302)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:05:16 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E8D8E770C9248974238B7897B6A658242F3F0BC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:4b:7b:68:de:8c:6f:c6:83:8d:f6:27:e1:
57:61:d8:33:e1:4b:e0:27:00:c9:f4:d5:03:94:89:
a9:c8:1d:6d:ab:64:ba:e9:c0:e9:86:cb:77:ba:dc:
b9:3d:5e:13:1b:76:9c:bf:27:bc:3e:e7:1f:db:fa:
be:90:16:fd:de:25:eb:29:0e:05:27:59:08:81:7e:
14:04:bf:24:ca:f0:97:d1:04:35:31:5e:b1:22:3a:
1f:ea:72:ae:ef:36:a6:7b:28:be:64:c4:45:b9:fd:
d8:a0:4c:0b:a1:cf:6c:00:04:8a:7e:ce:2b:8b:ff:
a6:53:41:62:ba:de:f2:4c:31:81:f8:56:39:6e:f6:
6e:15:53:05:7b:09:24:a2:a8:e5:c0:12:a1:ea:a4:
d8:86:ea:8a:61:27:ff:b1:c2:05:d5:55:03:00:a9:
af:21:31:f6:ce:b7:a0:35:97:03:28:ae:17:7a:9a:
91:87:51:e3:a6:35:e5:fe:4e:24:c8:77:cf:cd:36:
63:d3:29:d1:1b:f6:05:6f:c8:9a:88:7b:91:f5:6d:
5d:9e:0b:bc:f8:21:e8:2c:db:4b:5e:d7:e8:d6:98:
fa:d5:b3:c1:2f:25:e3:a3:f2:fa:72:21:85:1b:ad:
50:28:55:ad:f1:18:c0:4a:fb:da:46:fc:9a:81:4d:
45:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D8:E7:70:C9:24:89:74:23:8B:78:97:B6:A6:58:24:2F:3F:0B:C5
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/6NjncMkkiXQji3iXtqZYJC8_C8U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.128.0/18
Signature Algorithm: sha256WithRSAEncryption
a3:86:52:86:3f:ad:78:70:b6:d0:1a:f1:ff:ac:7d:7b:54:4f:
38:02:16:1e:f1:da:52:31:13:3c:a7:b8:d7:b1:36:90:4c:35:
08:a2:8c:99:0f:38:51:b6:e1:6f:42:f5:e6:25:c1:56:5c:41:
fb:45:8d:e1:9c:c6:8d:6c:0c:32:21:58:55:cb:d0:f5:f3:c7:
e6:ab:42:88:9e:b8:4a:e3:3c:03:9f:b3:f8:f4:1f:c6:8f:31:
5c:ce:0c:d3:88:62:df:d2:29:c1:1e:d0:d3:24:2f:89:9b:54:
c6:93:83:be:90:cc:dc:e6:65:5b:04:4d:41:8a:a9:4f:ea:e5:
a2:15:08:5f:94:41:84:e8:0c:97:41:e2:69:32:84:39:73:94:
6c:14:ef:12:73:f9:ff:0a:9f:a5:c6:16:89:1f:3e:42:2b:00:
f0:59:68:37:7c:5f:39:4d:da:ac:29:0f:97:b2:37:f7:d9:13:
cf:19:92:71:3c:98:86:ab:08:ec:e6:85:1b:82:be:3d:7b:db:
98:4b:14:b4:95:d8:e1:5a:30:8e:54:f3:05:41:b8:da:ba:1f:
4a:39:e7:a3:d0:e0:1b:ae:43:33:8c:28:06:43:93:82:1a:88:
6b:3b:22:1a:e1:cc:f7:1e:13:75:0a:3d:87:33:ca:40:0c:82:
94:0c:f7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:59 2024 by rpki-client on console-ams.rpki-client.org