Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/A6txit9hUoXAoKQ40a4KtBBM7PU.roa
File: A6txit9hUoXAoKQ40a4KtBBM7PU.roa (raw, json)
Hash identifier: AH3Zf8fwt3stHyw9MziOgd7D64vcyknbKNfTv3sjlUQ=
Subject key identifier: 03:AB:71:8A:DF:61:52:85:C0:A0:A4:38:D1:AE:0A:B4:10:4C:EC:F5
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 096D
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/A6txit9hUoXAoKQ40a4KtBBM7PU.roa
Signing time: Tue 29 Sep 2020 10:01:49 +0000
ROA not before: Tue 29 Sep 2020 10:01:49 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 124.218.0.0/16 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2413 (0x96d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:49 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=03AB718ADF615285C0A0A438D1AE0AB4104CECF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8b:7d:bd:ee:51:23:0e:89:3d:2a:05:77:d4:
0a:22:39:37:35:24:25:91:d0:8a:34:f4:7d:75:f5:
46:f0:93:84:9d:92:42:c8:11:bb:7a:09:79:6f:17:
53:50:65:71:39:ed:80:95:e8:db:74:73:92:66:48:
05:a8:49:1a:2e:da:4b:28:3f:36:f9:15:cc:55:3c:
57:b5:0c:c0:c5:77:e1:b3:91:0a:64:da:4f:74:70:
c3:cb:a8:96:06:aa:94:8d:0e:f0:a0:c7:c0:c8:fd:
40:d0:90:fd:a2:aa:7e:0e:22:36:72:18:c2:72:9f:
25:4f:f1:05:c3:38:94:9c:9d:f0:04:84:b0:41:fc:
60:7a:b7:8f:91:4d:e0:d6:0d:5f:80:b8:6a:96:64:
29:94:db:1a:0f:ef:d4:22:e9:b9:9e:0c:6c:bf:6e:
2f:18:cd:2f:a9:b4:b1:2a:0d:55:9f:cc:07:67:b0:
fd:9d:31:d3:ea:a4:1d:fb:ea:79:d3:a6:6a:89:b4:
32:2b:12:4a:71:ae:e3:2c:8a:05:28:ee:63:b4:37:
8c:9f:e6:bb:79:c9:97:20:c3:7b:56:3b:ff:49:07:
95:6d:e8:c9:02:ef:7c:32:ee:f6:10:5e:6a:2c:58:
50:9d:f1:62:f7:03:de:f6:5b:24:29:a6:d5:4e:50:
87:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AB:71:8A:DF:61:52:85:C0:A0:A4:38:D1:AE:0A:B4:10:4C:EC:F5
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/A6txit9hUoXAoKQ40a4KtBBM7PU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:fb:76:84:44:34:b4:0b:59:9c:17:40:7f:72:e3:01:d4:17:
b8:e7:4c:96:5c:f9:3c:41:de:16:93:fc:3a:dd:b0:ca:ef:64:
43:2d:7e:44:b2:80:54:f3:75:b4:f9:ae:eb:3a:03:a3:59:21:
08:d7:01:fa:e5:48:e9:86:fe:5e:5d:b7:95:4f:4e:79:17:5d:
33:4b:03:20:49:0d:68:fc:fe:fd:af:ca:db:79:51:e8:83:a3:
99:5c:b6:d4:5b:44:7d:c9:74:58:59:29:58:22:42:3c:bd:33:
9f:9b:d1:27:55:41:9c:bc:b7:01:2e:2c:c3:54:6c:5e:84:68:
ef:24:40:d1:95:b3:d1:1c:44:f0:47:b9:44:31:f5:4a:a4:e2:
d5:59:38:c1:4a:0c:53:14:6c:62:58:0c:52:9b:a5:f2:b1:66:
bf:4b:84:ca:58:cf:38:e9:a2:b8:5b:b5:35:33:79:00:8d:ad:
02:0c:13:2b:7c:58:9b:4b:dd:ef:65:02:35:76:5c:7a:27:7f:
a3:b3:db:71:25:1b:4f:b6:26:00:f3:55:47:ee:f0:0b:17:6f:
70:c1:7b:c3:03:8b:55:19:9a:39:66:a5:be:b7:a8:87:eb:97:
38:a2:5f:ba:5e:0b:36:11:6f:b1:ab:cd:c6:d2:64:64:c1:fe:
03:91:70:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org