Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/9zxZa6cppszwSw7ZI5Zp74fkU0M.roa
File: 9zxZa6cppszwSw7ZI5Zp74fkU0M.roa (raw, json)
Hash identifier: NfVWXfN6paZA2obS8aSFEgr+AwA4q/EM0uPJVNWk7CA=
Subject key identifier: F7:3C:59:6B:A7:29:A6:CC:F0:4B:0E:D9:23:96:69:EF:87:E4:53:43
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/9zxZa6cppszwSw7ZI5Zp74fkU0M.roa
Signing time: Thu 15 Sep 2022 02:40:02 +0000
ROA not before: Thu 15 Sep 2022 02:40:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 60.244.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:02 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F73C596BA729A6CCF04B0ED9239669EF87E45343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cb:52:c6:39:cf:b4:89:88:6e:19:23:08:bf:
99:2d:76:64:8d:89:c6:0e:0e:27:56:53:23:57:21:
2d:ce:5c:80:67:1b:5e:4a:7b:e3:1f:58:11:9b:af:
2b:19:24:4a:fb:50:6d:e1:88:6c:bf:7a:d6:b0:19:
c8:16:0c:92:1a:45:ec:bc:40:a3:20:1b:b6:51:22:
6f:de:17:a9:8f:b0:64:7b:24:ef:e5:39:77:f0:36:
bc:13:34:d8:2f:6b:35:41:75:78:e1:3f:57:b3:95:
4d:c8:bf:10:a4:dc:27:37:11:e5:fb:6f:50:57:88:
17:3c:f1:20:21:b4:f9:7f:c1:ca:33:ad:ab:0e:c0:
6c:2b:ea:27:7f:fd:42:c6:08:6e:6d:9d:3b:a9:e3:
19:fd:8e:e5:5c:2a:35:63:ee:b3:a8:2f:e1:05:d6:
85:2c:b6:67:f6:05:98:f7:24:59:89:fc:33:f0:3c:
cd:87:32:97:d7:07:0a:b1:78:60:91:97:a3:7a:ab:
6f:dc:84:37:a6:67:5c:c6:53:a3:46:26:79:28:9c:
d5:19:52:a4:8b:8a:3b:87:ce:81:c5:17:4d:4d:cd:
40:c1:8d:f6:5a:0e:c7:98:d7:13:6c:f3:d4:5b:7b:
22:37:35:c7:a2:71:36:a4:b7:a8:a6:9e:0f:c7:6a:
3a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3C:59:6B:A7:29:A6:CC:F0:4B:0E:D9:23:96:69:EF:87:E4:53:43
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/9zxZa6cppszwSw7ZI5Zp74fkU0M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.244.0.0/17
Signature Algorithm: sha256WithRSAEncryption
86:0f:db:8c:e8:d7:8c:a9:73:76:53:5f:86:9e:f7:34:77:5b:
b9:3a:3b:67:0d:95:f2:42:62:79:67:df:de:2b:4c:b2:d1:9f:
28:45:98:c3:cd:7e:68:99:5d:74:72:f4:61:5f:71:2d:8a:b9:
39:35:22:84:b5:d4:35:74:c8:2a:12:70:23:13:20:0b:14:52:
2d:2a:d8:df:df:68:04:57:94:e3:fb:22:4e:83:02:ac:23:32:
d0:5f:92:e7:c2:70:a2:d6:11:84:77:6d:76:82:b4:a6:df:9b:
ee:f1:5b:76:96:93:ce:07:9f:f8:3b:26:0e:ce:7a:17:b7:5a:
5b:10:52:bf:4b:46:fb:9c:ae:35:3c:86:e3:6f:16:16:dd:44:
a1:00:38:30:a5:73:e8:dc:a8:5c:d2:f1:72:48:84:ba:c0:e7:
c9:8a:b0:92:7b:4e:6c:56:cf:e1:48:0a:e6:44:42:09:52:cc:
3b:ac:db:9e:60:f2:4a:14:01:bc:46:87:06:1d:7c:9b:bc:7c:
59:74:9f:86:26:1b:0f:a6:fe:5f:33:71:9e:26:dd:0b:bd:18:
db:84:26:98:aa:c5:07:c5:be:8c:6c:e3:72:8f:ff:27:a2:83:
76:e0:3a:ae:2b:ae:9f:11:a2:de:c2:bb:35:45:37:6c:df:64:
be:c8:b7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org