Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/7mTcFiBYS1_A86rheEhW6gfFFbQ.roa
File: 7mTcFiBYS1_A86rheEhW6gfFFbQ.roa (raw, json)
Hash identifier: wK5MwekNP5Pcjk9DCf3hbEqV27Bc6lSBjOa64G70yUo=
Subject key identifier: EE:64:DC:16:20:58:4B:5F:C0:F3:AA:E1:78:48:56:EA:07:C5:15:B4
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 12B5
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/7mTcFiBYS1_A86rheEhW6gfFFbQ.roa
Signing time: Fri 01 Sep 2023 08:04:53 +0000
ROA not before: Fri 01 Sep 2023 08:04:53 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24154
IP address blocks: 210.63.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4789 (0x12b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:53 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=EE64DC1620584B5FC0F3AAE1784856EA07C515B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:49:f3:98:a2:02:fa:89:80:b8:7c:86:dd:3b:
4d:68:47:a5:43:4d:eb:76:73:59:29:1e:cd:cd:0b:
cd:dd:a6:38:b2:9e:39:0c:1c:99:34:bc:34:95:c3:
7a:49:7e:25:07:df:d6:58:e3:9b:fb:c6:53:e7:1d:
5f:82:c8:1d:68:7e:4a:9b:57:82:f6:7b:f9:f8:68:
7f:b1:bd:16:f5:32:4b:97:a1:ac:02:92:90:88:c5:
e3:c0:b7:f4:ab:32:ab:b2:55:3e:77:ca:ff:ff:45:
a2:fd:ef:00:ec:6f:22:d0:ff:24:30:f0:64:16:96:
eb:30:cc:58:40:7a:9a:9d:f9:ba:7e:05:e6:6f:8b:
c1:d0:37:38:5a:5d:de:d6:d7:f0:76:d9:49:d2:b8:
2e:13:79:0f:29:d6:8b:b6:7a:54:2d:fd:a5:9c:42:
52:64:bd:5b:55:6e:40:26:5b:31:49:0a:92:37:06:
95:de:ab:ee:24:28:bd:fb:3f:61:3a:a3:f1:5b:fe:
ac:1d:d5:1e:34:6a:ca:cd:0e:dc:cf:49:21:aa:ce:
db:f3:75:ee:94:8a:68:2a:60:b4:bf:46:1c:54:f2:
13:cb:96:cc:b1:f6:54:72:7f:b2:6b:27:86:cb:54:
b2:4e:e8:75:36:06:25:73:f2:14:4d:a5:36:2d:90:
9b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:64:DC:16:20:58:4B:5F:C0:F3:AA:E1:78:48:56:EA:07:C5:15:B4
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/7mTcFiBYS1_A86rheEhW6gfFFbQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.192.0/19
Signature Algorithm: sha256WithRSAEncryption
46:8e:c8:b3:bf:1b:22:92:7e:bb:e1:e5:ec:20:81:74:ff:67:
74:0c:f5:25:cb:87:5d:16:ff:55:7d:5d:29:ed:8a:37:92:b2:
81:a0:d9:f4:08:7f:ff:ee:3b:2b:ac:ce:b6:32:eb:f0:1f:d1:
e6:ec:13:73:2c:b6:5c:ee:8d:6f:56:05:c4:72:48:01:5c:85:
58:38:cf:ab:41:2f:8d:44:67:c7:db:64:35:62:0b:12:3d:ab:
3d:23:ab:79:68:73:49:fd:1f:89:3d:64:ec:e2:96:f7:43:d2:
e2:59:4c:76:72:b1:0f:5d:79:06:6f:d4:7f:8f:06:06:00:ed:
ca:af:ba:c1:1d:7c:f4:c7:f7:38:73:2b:53:ee:f3:b0:7b:6d:
0f:4f:74:72:db:4a:2a:21:b0:12:5f:a3:91:53:15:2b:d9:ef:
b0:32:50:fa:fe:03:26:1e:f2:3a:71:e5:ba:4d:1e:41:72:9e:
8a:cd:1f:e9:85:e5:f4:61:4b:8b:00:22:b1:60:7a:0d:ad:c8:
64:2a:8e:1d:28:20:48:fd:69:b4:88:b7:22:dc:d1:dc:b0:5c:
ca:30:ee:cc:cc:78:33:e1:fc:08:19:00:c0:70:c6:86:4d:ed:
21:dd:2e:8c:45:a4:0b:6b:43:b5:82:c5:19:95:a3:9d:77:61:
72:9c:8f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org