Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/7dveh30p1Mgec2eM9keqo7WlfOg.roa
File: 7dveh30p1Mgec2eM9keqo7WlfOg.roa (raw, json)
Hash identifier: Bb3OMiXaQ966X27BbnJjRR4Rm2KnXBz89HKgkJ9xHbo=
Subject key identifier: ED:DB:DE:87:7D:29:D4:C8:1E:73:67:8C:F6:47:AA:A3:B5:A5:7C:E8
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/7dveh30p1Mgec2eM9keqo7WlfOg.roa
Signing time: Thu 15 Sep 2022 02:39:56 +0000
ROA not before: Thu 15 Sep 2022 02:39:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9311
IP address blocks: 210.63.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:39:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EDDBDE877D29D4C81E73678CF647AAA3B5A57CE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:12:eb:0e:57:41:ba:88:b6:63:3c:bf:fb:b5:
7f:2b:f1:26:84:4c:0e:71:2e:f8:fb:db:9f:69:15:
0c:c5:6b:c1:ee:bb:7e:0c:3c:2c:8e:cd:c2:65:f0:
7a:87:d1:ea:fd:55:bb:71:e6:c8:b4:4a:e1:3c:01:
23:28:cd:58:50:6d:e5:0c:c3:8f:33:2f:d9:26:fa:
be:28:ee:99:29:85:51:17:8e:19:46:b8:6a:41:25:
5e:c6:d5:24:7f:78:92:07:00:89:93:ff:32:0c:be:
ce:c5:de:ba:c3:fe:46:d6:0f:ac:01:2c:4a:82:1e:
26:68:39:9e:dd:75:6a:1f:14:2a:dd:a5:bd:55:af:
e7:22:fd:96:d2:97:f7:e7:7a:f3:a0:5b:34:c0:f5:
50:b8:3a:9b:67:51:f1:63:92:8f:30:f0:cc:6e:e6:
f1:9f:3c:f2:15:14:d4:e7:e1:51:68:e3:e2:00:17:
c7:d7:1d:c1:0d:c7:79:04:1f:3b:e4:76:36:4b:f5:
ce:be:0f:32:6e:d3:f6:80:4c:56:0a:04:c8:b6:23:
b1:58:15:e8:3c:5b:09:54:c0:29:bd:24:b9:84:cd:
a6:da:6f:b5:c1:ed:7f:16:94:d0:c8:e3:8f:e9:93:
1d:ff:66:97:18:45:89:bd:79:c7:b3:d6:55:1d:93:
8e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DB:DE:87:7D:29:D4:C8:1E:73:67:8C:F6:47:AA:A3:B5:A5:7C:E8
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/7dveh30p1Mgec2eM9keqo7WlfOg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.239.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:be:ad:57:80:b5:67:46:e7:f2:52:8e:2b:d2:58:ca:2e:38:
ee:7f:c9:c5:d3:11:82:0a:2f:6c:bb:27:39:ae:ef:d7:68:84:
9c:f3:2c:c3:7a:53:c5:ea:64:0b:7d:2d:5f:d0:2c:52:a5:01:
c1:af:10:df:1b:41:9b:e7:0f:ca:6f:1d:4a:c9:3b:74:18:80:
52:46:7d:38:9c:1a:f7:c5:02:42:05:e8:eb:1b:f4:5b:43:3b:
ff:51:12:5b:92:d7:78:b7:b9:bb:d1:cf:fb:5b:7e:b2:2d:2d:
11:51:f0:78:65:41:44:aa:86:57:40:76:5e:01:85:01:3c:ca:
a8:27:4a:0e:7a:83:95:17:d6:6b:b6:ca:3b:f0:1f:45:fb:aa:
65:c7:4d:7e:0f:29:77:66:c1:68:c5:d4:48:e1:68:91:6e:73:
66:77:5f:13:1d:35:bc:2f:92:fa:81:e7:5f:e2:b2:2d:09:ff:
ad:72:49:ce:67:85:ce:2a:7a:e1:01:c0:f1:0d:0b:12:c2:08:
fc:06:f8:36:81:92:77:de:cd:bc:63:3c:0a:23:df:c9:f3:11:
85:10:18:f1:9b:a1:d4:db:4a:17:44:d7:e4:41:8a:50:1e:ee:
c3:1a:5b:2d:88:d0:c9:6e:5c:ab:dc:8e:87:b9:22:9c:da:02:
be:93:4b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org