Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/7rABDnPcKNkZIpKV2ea00U1L3Po.roa
File: 7rABDnPcKNkZIpKV2ea00U1L3Po.roa (raw, json)
Hash identifier: BBrsYeQtyX6S9swS6UWot2FqkRaI2x9QMkEfSPFP5cQ=
Subject key identifier: EE:B0:01:0E:73:DC:28:D9:19:22:92:95:D9:E6:B4:D1:4D:4B:DC:FA
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 08F4
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/7rABDnPcKNkZIpKV2ea00U1L3Po.roa
Signing time: Tue 29 Sep 2020 10:01:17 +0000
ROA not before: Tue 29 Sep 2020 10:01:17 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 7482
IP address blocks: 210.58.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2292 (0x8f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:17 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=EEB0010E73DC28D919229295D9E6B4D14D4BDCFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a1:ef:98:6f:2d:0d:ec:2a:b6:97:2c:5a:0c:
06:a4:e8:a6:cf:d6:69:4b:de:fb:f3:f0:f0:8f:f2:
4f:07:85:ef:40:f4:56:2f:e5:11:d1:fc:21:56:a4:
f4:e3:eb:b5:6b:fb:05:a3:55:cd:8c:9c:97:16:42:
2b:26:df:37:57:d2:97:69:27:ba:e2:67:dc:45:28:
af:1e:58:99:2c:72:11:6f:00:f1:01:ca:99:8c:aa:
a1:4f:f6:b3:78:8b:5f:31:cc:a4:bc:fb:91:17:bf:
74:29:ae:bd:04:10:b1:d8:c6:7b:94:d2:08:8d:44:
ff:9b:81:00:a0:b9:4f:13:da:3f:2e:85:e4:0e:09:
8b:aa:9b:33:1d:2c:32:3a:49:b5:d2:34:0b:99:0b:
cc:6d:9b:34:ae:4c:b8:cf:ca:db:18:06:a4:a1:b7:
4c:74:f6:7a:ef:c6:ee:8c:7a:d9:eb:11:fc:68:8b:
d6:ad:31:8f:5b:b5:c1:ce:6d:45:23:98:bc:70:b9:
f7:24:9d:38:75:3e:1e:1f:af:7a:7d:dd:e3:00:e2:
31:dd:a9:c6:d2:91:2e:de:18:db:3f:f1:de:a2:46:
6d:79:fe:75:92:15:3f:ea:74:53:9a:19:c9:d0:c5:
ab:51:ca:37:d4:b7:b9:d0:bb:6a:b5:92:c5:9d:e7:
e9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B0:01:0E:73:DC:28:D9:19:22:92:95:D9:E6:B4:D1:4D:4B:DC:FA
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/7rABDnPcKNkZIpKV2ea00U1L3Po.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.58.0.0/16
Signature Algorithm: sha256WithRSAEncryption
02:0d:4a:b8:00:7d:a0:71:f2:08:c5:f7:9b:34:ca:9a:91:6f:
c3:4f:b9:7e:6a:e1:ac:27:f2:a9:4a:75:44:5f:8b:b1:b7:8d:
db:7d:ef:71:12:b7:66:61:56:ac:65:89:07:d8:2e:ef:e6:e8:
5a:fb:32:b8:b0:23:f5:a4:2f:88:a4:48:70:d4:92:83:17:4d:
9f:24:63:a9:b3:76:3b:25:03:73:85:23:85:e0:bf:0f:cd:1e:
c1:0a:8a:cd:86:4c:70:15:e0:1f:62:e2:1d:66:57:67:bc:c9:
be:b7:91:7c:6a:d3:83:0b:04:60:ad:28:95:d6:2e:7d:83:82:
e8:ed:2b:1e:57:7c:f5:43:80:9c:ae:7f:53:34:17:2b:f0:2d:
81:a6:8b:4a:5f:d8:69:37:38:72:5d:f5:34:ee:32:79:b1:cd:
25:c8:ad:33:08:2d:0f:15:42:78:60:ba:36:ac:11:a0:b8:3d:
9a:8b:a4:80:dc:33:9c:6a:08:af:07:0f:0f:57:d0:30:61:91:
4a:27:a6:97:72:86:31:ce:c4:4f:0c:78:80:02:d0:7c:25:ad:
da:14:9e:32:33:73:41:04:11:7f:69:54:a2:ae:fb:2f:74:1f:
f2:4c:a0:30:b6:49:22:2c:7f:f2:11:27:83:c5:6b:08:a3:e6:
b1:0a:a3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org