Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/9Xw90w9oEeD811Mqa5Wj8BQvtcs.roa
File: 9Xw90w9oEeD811Mqa5Wj8BQvtcs.roa (raw, json)
Hash identifier: s1Yyyum+SsSjj0h3Ljtf8buA+OLCRAIBrXrUcHUTrEI=
Subject key identifier: F5:7C:3D:D3:0F:68:11:E0:FC:D7:53:2A:6B:95:A3:F0:14:2F:B5:CB
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DD4
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/9Xw90w9oEeD811Mqa5Wj8BQvtcs.roa
Signing time: Wed 29 Sep 2021 02:39:37 +0000
ROA not before: Wed 29 Sep 2021 02:39:37 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 7482
IP address blocks: 210.200.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3540 (0xdd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:37 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=F57C3DD30F6811E0FCD7532A6B95A3F0142FB5CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:90:e3:2d:41:9e:aa:ba:38:16:05:e3:43:bc:
fe:23:91:d5:37:ac:3f:a0:a7:4b:e6:df:a2:2c:4c:
09:9c:f5:07:89:af:70:19:e7:ba:0e:94:79:e8:25:
6d:ac:07:72:41:ba:71:8c:12:ee:78:b3:92:e8:df:
03:51:9d:40:f1:fb:d5:16:1f:39:32:ad:d9:9c:11:
fa:f1:33:65:10:d2:bf:23:a8:8b:c3:5e:fe:f2:a5:
07:7e:72:e7:d9:29:8f:80:4d:63:7c:6d:56:11:4e:
a7:45:8c:ce:ef:85:cd:4a:4c:7e:25:77:72:35:6b:
f1:55:9a:6d:27:b9:2f:b8:6d:dd:c0:09:91:e8:db:
cb:81:b6:ce:34:b0:16:1e:6a:1e:11:c4:42:b3:f9:
cb:41:cd:06:b1:87:4d:ac:75:b6:34:86:f3:35:ed:
38:2f:d7:6c:16:53:4a:40:52:87:83:94:8b:a8:93:
f9:31:9a:54:c5:e8:fa:7a:43:df:bf:cf:41:c3:ca:
e7:9f:2a:87:63:9f:fe:38:f9:b7:32:07:ce:bb:7a:
26:1e:db:dd:0f:9e:d5:10:27:7b:23:41:5d:89:e0:
27:f7:94:fe:a5:9e:4f:c3:a8:21:be:57:f6:33:ce:
d9:3f:3d:66:a3:c0:88:85:8d:0a:e8:e2:98:75:c0:
49:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7C:3D:D3:0F:68:11:E0:FC:D7:53:2A:6B:95:A3:F0:14:2F:B5:CB
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/9Xw90w9oEeD811Mqa5Wj8BQvtcs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.128.0/18
Signature Algorithm: sha256WithRSAEncryption
38:e7:29:27:0c:81:bc:25:72:62:05:0a:47:68:26:7a:0c:9a:
5f:24:9b:9d:88:b5:02:d7:39:af:25:10:d4:c3:6e:8f:e1:33:
d6:91:82:d6:87:03:00:00:65:1b:de:72:8b:ff:96:e6:4a:1f:
5b:f4:48:5b:9d:a6:38:49:43:92:e6:07:cb:e4:5f:42:2c:51:
af:fe:93:43:a0:3d:de:67:a2:43:66:44:7a:e4:b7:54:fe:17:
4c:d0:74:fa:c3:54:bb:92:f5:2b:94:8c:d3:0f:32:2a:1a:da:
52:b8:f9:80:fc:9f:42:09:92:5e:e6:c7:1b:1d:64:40:3c:de:
97:3f:d8:2f:eb:e5:7d:23:b3:a2:c1:88:80:69:71:b7:1d:a6:
4c:0c:67:a5:04:db:9e:44:cb:60:76:44:27:b9:69:15:21:e5:
80:bb:05:1d:53:31:8d:e5:6e:d9:ec:0a:a1:d1:93:ef:20:f7:
60:08:fc:81:c9:bf:14:e9:d4:16:39:b2:24:56:7b:14:f7:90:
70:5f:01:ec:b8:b9:d5:07:4c:cb:95:79:27:de:cb:2e:56:fb:
09:f4:b8:82:03:21:8b:cb:aa:f7:8d:a4:e3:80:0c:5b:d4:2d:
58:01:2d:69:f4:a0:08:1f:1f:ec:7c:51:84:93:48:02:25:bc:
1e:f5:63:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org