Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/9LbWG0-TJ0YcmhTWKfDB0t8H9oo.roa
File: 9LbWG0-TJ0YcmhTWKfDB0t8H9oo.roa (raw, json)
Hash identifier: TPN42/fVY4Dk3s1D1DZhv/Mz7CoMtAo8HrGpBpxSZrg=
Subject key identifier: F4:B6:D6:1B:4F:93:27:46:1C:9A:14:D6:29:F0:C1:D2:DF:07:F6:8A
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/9LbWG0-TJ0YcmhTWKfDB0t8H9oo.roa
Signing time: Thu 15 Sep 2022 02:40:23 +0000
ROA not before: Thu 15 Sep 2022 02:40:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9311
IP address blocks: 210.201.60.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F4B6D61B4F9327461C9A14D629F0C1D2DF07F68A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dc:6f:50:e7:29:21:fe:52:a2:d2:a4:2f:64:
c9:f1:bb:c8:f6:47:4a:4f:78:66:76:93:bc:bf:61:
f2:63:7f:f7:cd:ba:9a:e9:f6:b4:c1:74:83:8b:ca:
dc:12:69:86:c8:48:56:60:09:f7:11:64:94:57:97:
71:0e:8f:1c:88:53:41:8a:f2:b6:b1:ee:8f:19:9b:
6b:9b:30:81:69:03:5a:10:99:3d:29:45:f7:c0:42:
76:02:f6:8e:03:ec:e1:ef:d5:6e:fd:bc:09:ed:5a:
18:0a:bb:8e:b7:19:35:c5:75:61:c9:e1:8c:70:18:
1d:7e:f9:56:33:90:06:4f:f9:8a:e7:00:d3:fc:a6:
2b:b7:df:c6:be:db:2e:e1:9c:dd:87:96:c0:9f:06:
65:9e:6e:f6:80:c1:c6:eb:56:fa:46:16:d6:a5:49:
12:1c:c8:b3:a0:d3:f3:a8:a8:36:74:20:63:75:46:
a8:00:8c:3b:84:d3:74:63:bd:78:75:fe:45:d9:8c:
01:97:cd:57:7b:84:a9:07:76:73:54:4a:01:e3:d5:
80:8d:96:c2:9b:8c:e6:b2:7e:e7:17:1b:a9:ef:ef:
34:01:e9:57:86:ba:fa:e3:99:2b:82:bd:82:d2:33:
7e:47:bd:25:16:f6:ce:48:76:d9:ac:2d:70:ca:79:
00:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B6:D6:1B:4F:93:27:46:1C:9A:14:D6:29:F0:C1:D2:DF:07:F6:8A
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/9LbWG0-TJ0YcmhTWKfDB0t8H9oo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.60.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:14:6a:88:1a:17:ab:64:8f:99:b4:57:98:37:fe:3a:67:ab:
d7:0b:44:ca:82:c3:c5:4c:bf:60:83:6e:69:bb:a4:ab:c1:eb:
12:92:72:49:66:23:1d:14:04:a1:12:8b:72:b8:e4:0c:91:9f:
58:86:a1:0b:ce:84:99:7b:9a:e1:45:97:1a:e0:8f:bd:83:73:
38:55:0f:35:00:40:7f:1c:c3:be:f8:cf:7a:10:8e:6b:fa:89:
eb:ab:41:3f:de:ea:56:02:40:e8:e4:c4:f0:53:c9:28:04:7c:
f5:14:2c:70:be:55:9e:72:61:22:4c:03:b2:08:52:c5:56:50:
5b:26:6a:52:7a:98:89:c4:d1:06:ac:4b:af:59:24:19:36:c5:
46:55:aa:f5:96:35:00:8d:31:00:b8:72:4d:29:2b:f3:3c:b4:
fa:92:50:ec:89:02:13:e2:1b:94:75:da:c4:17:da:b1:26:8b:
55:fc:f0:a7:da:9e:53:24:eb:d7:81:22:b7:29:2d:a0:d3:7c:
65:10:ab:cc:be:80:ae:32:62:57:f3:ea:1d:d0:d8:ef:19:7f:
82:97:06:e9:34:45:75:de:73:f8:11:cd:7c:de:d1:1e:b6:81:
c3:53:4a:9c:b2:7c:0b:4a:81:39:fa:dd:1a:10:60:ec:d3:85:
9e:40:aa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org