Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/7GbQYDZ5IJbZWD89L56mUdx0U9E.roa
File: 7GbQYDZ5IJbZWD89L56mUdx0U9E.roa (raw, json)
Hash identifier: d4r73TzuLnxdEWz6KKEhdo5H79QGBQHuCTEMVlJLRnM=
Subject key identifier: EC:66:D0:60:36:79:20:96:D9:58:3F:3D:2F:9E:A6:51:DC:74:53:D1
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0978
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/7GbQYDZ5IJbZWD89L56mUdx0U9E.roa
Signing time: Tue 29 Sep 2020 10:01:52 +0000
ROA not before: Tue 29 Sep 2020 10:01:52 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 223.22.0.0/15 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2424 (0x978)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:52 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=EC66D06036792096D9583F3D2F9EA651DC7453D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:79:f7:21:57:c7:3b:eb:bc:55:d2:0c:1a:d7:
53:f3:4d:e0:fd:75:98:e8:12:8e:d6:66:8b:15:9b:
36:3b:e6:13:7d:fc:45:d8:cd:6d:8e:32:2c:ea:bc:
26:48:55:57:b6:2b:9e:a8:a4:b6:94:01:9b:d7:78:
35:70:39:76:0e:31:a5:14:cd:bb:ac:92:3d:16:43:
8d:66:f4:e4:8f:47:17:75:1e:01:c1:37:45:96:6b:
76:74:ff:83:95:e9:7b:22:82:b9:92:ab:c3:4d:54:
b6:bd:67:45:84:6d:7e:15:c2:d0:55:3d:19:64:9d:
d4:d7:e7:65:5b:6b:bb:13:7d:70:3f:ef:5d:a5:f7:
51:ec:25:53:7e:cd:27:c3:e7:3e:18:5e:c2:d8:5b:
5f:9e:23:12:66:54:b3:be:53:72:32:e3:56:5d:98:
c3:b4:b8:7d:48:69:9b:d5:53:34:e4:63:0f:1c:11:
ed:d3:74:65:7d:1b:ef:24:3c:9f:83:e9:d6:8a:61:
76:b6:94:80:5c:3a:17:33:c6:a8:f7:e5:77:1d:30:
8b:75:51:a4:5d:2e:c2:a0:7e:e0:50:4c:f8:27:43:
b8:62:02:22:77:50:c9:19:f0:c5:79:a2:b0:28:ca:
e3:62:fa:c8:3d:ed:66:f4:39:41:06:43:cb:b1:b5:
e6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:66:D0:60:36:79:20:96:D9:58:3F:3D:2F:9E:A6:51:DC:74:53:D1
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/7GbQYDZ5IJbZWD89L56mUdx0U9E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.22.0.0/15
Signature Algorithm: sha256WithRSAEncryption
53:32:ab:ab:4f:48:ba:73:04:23:d1:71:5c:3d:7f:08:4c:64:
11:f6:93:9d:34:15:bb:c4:9e:8a:fb:15:47:62:a0:15:e3:bb:
34:db:79:94:3e:7a:ad:94:ee:64:4d:11:81:3f:06:b4:a6:17:
b5:68:72:0b:ef:8e:d1:c1:7d:04:28:79:04:78:cf:32:fd:32:
3a:e9:ce:6a:d9:c4:62:3e:c3:65:a2:9a:52:d5:34:49:aa:a2:
37:8d:1d:7b:9b:eb:af:52:02:50:45:93:be:52:0c:23:9d:24:
1e:3a:64:72:48:90:e6:86:5e:3b:38:3e:07:0b:c1:de:cd:ba:
4b:3b:56:6f:6b:cb:3a:b2:61:bd:d2:1e:e4:8c:9c:a9:03:b5:
1d:f9:c8:e4:e1:99:3c:3b:9c:c5:e2:6f:4b:a5:a4:b0:94:44:
1a:e8:c3:b3:35:d6:14:1d:7c:c7:2c:42:32:32:b3:96:ab:f8:
cd:a4:09:be:14:21:5c:30:ee:f5:52:11:ec:d8:c3:47:bb:ee:
9b:4e:0d:44:24:58:58:49:e9:2b:0c:d9:b2:cd:b2:d7:1a:c5:
bb:bd:8b:39:7a:bf:d3:96:93:e9:97:09:65:99:91:05:1a:4f:
d0:5c:90:53:d8:29:1b:b1:df:aa:62:f9:7b:80:b6:6e:6f:4b:
8e:9f:1d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org