Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/8w_1nhaLfPO7g2w5dIXbQJZuFAs.roa
File: 8w_1nhaLfPO7g2w5dIXbQJZuFAs.roa (raw, json)
Hash identifier: EVVwZ9T8iFPgVt6wuTsuYSyU2oais1u6PUyzs+3Qq6Y=
Subject key identifier: F3:0F:F5:9E:16:8B:7C:F3:BB:83:6C:39:74:85:DB:40:96:6E:14:0B
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 109B
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/8w_1nhaLfPO7g2w5dIXbQJZuFAs.roa
Signing time: Tue 16 May 2023 08:36:23 +0000
ROA not before: Tue 16 May 2023 08:36:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 210.202.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4251 (0x109b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:23 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F30FF59E168B7CF3BB836C397485DB40966E140B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ae:0f:92:28:9e:b7:49:12:95:ad:be:1b:ea:
c6:f9:44:d0:12:9f:7c:2e:3c:39:dc:db:39:71:18:
2c:92:94:42:62:3b:d0:a2:bc:f7:76:09:29:c5:6c:
85:a0:11:b6:a7:7e:87:55:b9:c5:e8:30:3e:13:39:
38:eb:7e:6b:9e:38:59:9d:3a:db:5f:cf:51:2a:d7:
ee:d4:b5:3d:81:aa:40:c2:2f:ae:84:e3:8d:64:4e:
0b:a1:54:9e:fb:dd:42:73:1f:20:39:ac:af:eb:72:
4f:70:e2:88:02:40:8e:89:2d:43:7f:8d:dc:3d:46:
14:19:37:5c:30:e2:02:48:3a:9d:07:2e:0c:69:8a:
d9:e5:6b:5c:eb:9f:93:ea:a3:43:28:79:03:0f:3d:
36:95:a5:91:2c:a2:ed:9b:0d:4a:d4:d7:ce:12:c9:
9b:cb:4b:56:12:ae:4f:55:6e:cd:98:1c:b4:13:94:
86:94:ec:76:aa:11:be:a3:e1:e0:c0:c4:74:26:61:
6c:4c:91:0f:81:48:68:a9:62:c0:ba:33:45:f1:c8:
9a:6b:61:1e:0e:0e:77:2f:5c:a8:7f:d9:26:24:aa:
dc:ac:20:1a:bd:f9:9b:c0:af:49:13:55:59:3e:5a:
0a:c5:46:1f:a3:a3:2e:52:53:ff:c7:f1:ce:4d:fc:
5b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0F:F5:9E:16:8B:7C:F3:BB:83:6C:39:74:85:DB:40:96:6E:14:0B
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/8w_1nhaLfPO7g2w5dIXbQJZuFAs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.192.0/18
Signature Algorithm: sha256WithRSAEncryption
61:83:b0:af:63:c2:e1:70:ce:24:e8:00:67:65:31:0f:1d:1c:
50:45:42:67:75:45:62:1d:dc:dd:fd:bc:5e:ae:c9:4b:b7:2d:
84:00:1f:bd:e2:e9:49:b9:2a:c0:3f:27:4e:b2:97:b7:eb:25:
b8:bf:9a:5f:93:d9:10:e8:66:83:7e:3b:92:91:19:92:dd:2c:
28:b4:69:7f:81:95:ff:01:c5:6c:4d:cb:41:cc:2d:bd:4a:d6:
9a:50:69:35:26:a8:55:25:52:7c:a9:15:c6:7f:03:c2:eb:23:
97:fd:6d:dd:e0:da:88:19:1d:20:8c:6e:17:38:b1:5b:a2:41:
a4:bb:80:be:9a:20:43:7c:39:65:c1:3d:40:ff:4b:33:21:0b:
ac:7a:46:44:38:92:3e:32:8e:84:b9:7e:72:39:09:7b:ca:b3:
47:bc:51:e2:87:a7:69:3f:3a:70:31:d5:bd:64:96:cd:dc:fb:
4f:a4:b5:92:ca:c8:5b:cd:e1:42:b9:14:dd:0a:81:a7:65:8e:
f1:9b:45:75:b8:3b:81:28:8f:5e:09:04:7f:24:41:65:68:ed:
f5:6d:85:65:6c:75:ab:f8:ef:2d:39:43:03:28:5d:31:b0:b1:
cc:75:76:dd:fd:e7:ab:05:c5:44:a0:a1:50:84:36:7f:7b:c5:
43:38:25:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org