Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/8YGxbA7TM4VkG0lqlFMQVvgjHKU.roa
File: 8YGxbA7TM4VkG0lqlFMQVvgjHKU.roa (raw, json)
Hash identifier: w7huWLuJKbFMXOfSZBEBvW7JyBNKUw+8Lsd/5lfDY1o=
Subject key identifier: F1:81:B1:6C:0E:D3:33:85:64:1B:49:6A:94:53:10:56:F8:23:1C:A5
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1286
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/8YGxbA7TM4VkG0lqlFMQVvgjHKU.roa
Signing time: Fri 01 Sep 2023 08:04:35 +0000
ROA not before: Fri 01 Sep 2023 08:04:35 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131597
IP address blocks: 218.35.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4742 (0x1286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:35 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F181B16C0ED33385641B496A94531056F8231CA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:ad:00:ff:2e:54:6c:41:9c:98:39:ea:a2:
09:b6:08:7d:19:14:ac:7c:6a:af:3c:1e:17:e1:22:
89:14:de:52:74:06:7f:a3:78:08:2a:07:8b:77:d7:
9e:37:e4:ca:7d:28:44:40:8f:fe:aa:a5:cc:84:03:
be:ab:62:26:29:54:41:84:e7:43:c7:a5:08:35:83:
cc:ac:ff:31:8e:a0:47:6a:e6:5a:64:c4:90:00:9a:
02:c2:10:9d:8c:ba:3a:b2:12:49:7e:db:3d:25:07:
89:21:83:af:82:d2:a5:70:02:d2:5f:cb:a3:35:93:
aa:56:6a:6a:4e:a0:6d:67:c8:c5:86:16:7b:b4:a4:
fe:08:fa:a9:ae:7b:68:e4:9d:40:eb:57:54:61:bb:
8e:98:ff:a4:a5:67:0a:3c:7a:cf:69:4f:bb:fd:02:
80:ac:d4:da:d6:9b:31:47:e5:d2:a9:9d:b6:54:3a:
f9:6f:07:b8:ee:b6:ef:74:ef:7b:83:73:48:dc:97:
0d:88:17:23:70:5c:dd:e8:d2:75:f4:1f:18:2f:d2:
fc:24:9a:1b:72:16:3f:56:6c:fe:a0:ce:e0:43:39:
e9:1c:ec:f2:93:6b:46:dc:03:aa:3f:05:80:ce:2d:
b2:2e:b3:7e:ff:aa:0c:68:93:7e:e4:db:9e:b7:63:
e6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:81:B1:6C:0E:D3:33:85:64:1B:49:6A:94:53:10:56:F8:23:1C:A5
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/8YGxbA7TM4VkG0lqlFMQVvgjHKU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.35.32.0/19
Signature Algorithm: sha256WithRSAEncryption
80:52:fd:62:23:7e:65:6a:17:ef:c5:47:1c:fe:48:61:c4:9a:
b5:6a:01:0e:5d:b0:58:53:c4:7b:10:2f:c6:bd:31:a2:24:29:
7c:cb:0f:1e:67:c5:fc:b5:6a:d7:17:2a:3c:d0:a7:b0:04:8a:
a1:34:7d:be:c2:48:8b:14:c7:75:87:68:28:e5:dd:5a:c3:52:
cf:22:06:1e:25:4d:dd:49:e4:d7:20:96:16:fe:59:51:d1:ff:
47:ce:a3:3d:66:c9:59:6a:d9:81:c4:01:0b:84:d0:d8:b4:3c:
cb:a2:1b:a5:f3:92:9c:a4:9f:4b:e4:f5:81:dd:74:fc:f5:68:
ab:30:4e:4e:43:95:dc:23:05:86:55:c9:a1:62:0d:d3:08:86:
d6:e2:cb:ff:d4:81:c4:63:1d:4e:ea:f4:6f:a5:c0:fe:25:a3:
0d:00:ed:10:34:e3:ff:6f:89:f8:46:14:f2:b7:27:96:80:78:
1a:c6:a1:3c:fb:1d:81:5f:bc:6b:0d:6a:8d:66:75:b4:37:67:
7b:9a:27:38:f4:7e:f7:09:8e:26:06:0c:86:d8:f1:10:99:31:
28:7d:26:e2:2c:8e:cb:bd:65:02:58:63:79:d6:09:49:79:b1:
cf:7b:d0:a5:7a:59:c6:05:4c:84:63:64:32:d3:31:46:72:3e:
6e:a8:40:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org