Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/ATazJUvx0RNAUdaRHkSZLvRQeCY.roa
File: ATazJUvx0RNAUdaRHkSZLvRQeCY.roa (raw, json)
Hash identifier: V6QmcMh8ND6sPsQPZ4+6Sg80ref/EcpZxb247V5n9uo=
Subject key identifier: 01:36:B3:25:4B:F1:D1:13:40:51:D6:91:1E:44:99:2E:F4:50:78:26
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DD2
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ATazJUvx0RNAUdaRHkSZLvRQeCY.roa
Signing time: Wed 29 Sep 2021 02:39:36 +0000
ROA not before: Wed 29 Sep 2021 02:39:36 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24154
IP address blocks: 210.200.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3538 (0xdd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:36 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=0136B3254BF1D1134051D6911E44992EF4507826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:63:2a:df:b9:38:3a:10:f3:44:13:4d:f5:4d:
8f:77:cf:ba:fb:3c:4d:f6:97:aa:03:c3:a4:1e:02:
8a:52:d6:4c:42:3c:d1:86:d5:0a:05:c4:0f:7e:49:
67:e7:9e:b2:12:d2:09:6a:88:e0:73:46:03:2c:e8:
19:bb:ba:c8:cd:9b:c2:5a:6c:fe:26:ae:64:0a:11:
73:2e:dc:33:49:b2:65:8e:ae:31:8a:cc:4f:47:01:
37:20:50:d4:df:68:29:42:bb:9b:b9:a0:1f:c0:c0:
9e:de:0e:33:83:da:74:89:6c:01:86:ce:fb:ba:15:
90:f9:33:c1:85:67:4a:b6:69:c5:4c:49:6f:9c:c2:
c6:5e:45:76:3e:89:81:99:71:fc:63:b2:1f:b9:b3:
e5:05:ef:14:de:9d:c7:25:76:05:62:89:b0:15:63:
62:34:92:d5:4e:cd:12:5f:b8:6d:28:48:ac:14:10:
6d:a1:ff:01:92:48:c1:1c:1d:1e:2d:6c:f3:a2:57:
53:0f:b6:cc:0c:f3:af:a5:c5:3b:23:21:09:1c:14:
02:13:ac:e9:3f:5c:b0:b2:84:cd:69:a4:84:4d:05:
6d:d0:c8:7d:29:0c:b0:4b:29:15:f4:2e:ec:e5:a2:
a6:1f:a7:74:4e:c5:e7:93:b1:43:c0:df:06:71:dd:
1b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:36:B3:25:4B:F1:D1:13:40:51:D6:91:1E:44:99:2E:F4:50:78:26
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/ATazJUvx0RNAUdaRHkSZLvRQeCY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.85.0/24
Signature Algorithm: sha256WithRSAEncryption
94:f7:bc:82:a5:30:50:11:56:7d:f6:82:e3:54:27:ad:be:ac:
f5:d6:31:53:f0:5a:b9:f3:0a:1c:f0:ea:9f:19:da:ef:70:35:
78:c2:3a:0f:76:f5:f5:66:a7:95:ae:9f:b4:7e:d1:49:7b:0b:
53:5c:80:34:fe:48:4f:08:6a:0f:b1:47:29:6f:b8:06:01:fa:
d6:a1:a2:5b:0e:7f:d3:6d:19:6d:2f:02:6d:69:df:fe:30:62:
04:59:29:85:a2:da:80:40:e4:fb:18:5d:67:11:61:fb:a5:ca:
bc:2d:6a:76:3d:dd:c8:e6:41:24:14:a0:0c:01:ff:7f:f3:fe:
2d:a0:88:25:06:37:be:17:89:8b:e8:b9:82:ff:0e:db:45:32:
ad:9a:f0:40:7f:dd:90:49:d7:7a:6a:3a:0f:8d:84:df:2c:4f:
40:71:57:77:33:f5:df:da:93:bf:dd:d8:c9:70:79:fd:30:10:
11:44:3e:61:b1:b6:21:15:6c:47:6b:f4:83:ba:af:fa:7c:2c:
37:41:13:4b:c3:c3:bd:91:70:0f:3d:81:b8:4f:e2:ba:04:2e:
5a:fb:d0:e5:83:d8:b9:39:43:02:25:ea:df:d3:9a:fb:8d:ce:
e1:16:50:10:e7:24:9b:33:07:b2:02:f8:de:cc:9a:c0:23:49:
c3:09:14:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org