Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/AjvYBZjxMtd9mMtwyPgJvT_55PE.roa
File: AjvYBZjxMtd9mMtwyPgJvT_55PE.roa (raw, json)
Hash identifier: a+HrT4xwpJTVNjQVdtKhx5xwe4SlBPqKGUbIv8kqZFo=
Subject key identifier: 02:3B:D8:05:98:F1:32:D7:7D:98:CB:70:C8:F8:09:BD:3F:F9:E4:F1
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/AjvYBZjxMtd9mMtwyPgJvT_55PE.roa
Signing time: Thu 15 Sep 2022 02:39:54 +0000
ROA not before: Thu 15 Sep 2022 02:39:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 210.200.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:39:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=023BD80598F132D77D98CB70C8F809BD3FF9E4F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9e:21:cd:57:0c:ef:f3:4d:42:16:14:eb:6c:
f5:1f:2d:eb:d3:25:7f:08:98:5d:94:f3:97:84:7b:
7d:fd:7f:6d:93:b6:ae:53:48:e7:69:dc:53:45:b9:
a1:22:8d:75:48:a9:36:da:d1:97:fc:01:97:62:dd:
a8:d6:2f:43:76:b6:80:fb:2b:f2:02:12:b1:b8:2b:
4f:d6:12:e4:67:64:f5:bc:2b:ad:93:72:f1:e6:2c:
0c:46:05:7f:b4:5e:c2:2b:49:f0:fe:74:f5:0b:6b:
75:7f:d3:a7:d8:27:f2:25:e5:5d:20:9b:c6:f0:ac:
37:1d:bd:1f:b5:8e:66:57:11:d6:a7:a9:48:66:ad:
7d:e3:8d:f9:ac:4f:09:79:b1:5b:ff:7a:5c:b1:0f:
2d:99:3f:f0:18:f2:5e:5b:6c:3d:8e:1f:41:8f:87:
8d:77:91:b5:36:1f:88:ba:54:5b:db:37:c1:d8:6c:
ff:13:11:fc:70:ae:ef:79:01:03:7d:d9:3f:3c:f0:
48:2f:6b:a1:60:4c:1f:48:a2:f1:f1:44:68:37:17:
12:70:6f:aa:c4:80:26:ad:7d:41:a9:6c:ea:ba:50:
56:1d:9e:16:c2:e5:9f:7e:7b:dd:b9:36:ae:d0:08:
d7:cb:02:6e:03:7e:49:2b:f2:f2:2f:ed:4b:64:4e:
d4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3B:D8:05:98:F1:32:D7:7D:98:CB:70:C8:F8:09:BD:3F:F9:E4:F1
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/AjvYBZjxMtd9mMtwyPgJvT_55PE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2a:aa:e6:8a:3c:63:87:c4:2e:72:b8:5e:78:ee:b7:ed:03:e1:
0c:fd:da:7d:e8:2d:00:71:5e:25:2b:70:05:a6:98:08:6b:11:
1b:20:d3:82:a6:c4:7a:0c:a2:ea:59:8f:d1:6e:45:d2:e5:6d:
97:84:1b:e9:4e:35:44:da:cf:b2:d3:60:a1:55:dd:19:5d:89:
60:f7:3c:27:33:9e:f4:16:0a:26:dd:83:5a:88:29:aa:45:cb:
43:44:85:e1:68:17:26:60:bb:c8:2c:6b:38:81:36:dd:fa:b3:
18:da:d3:67:17:8a:89:b7:68:43:11:6e:9c:aa:bd:87:90:9c:
98:9c:44:2b:3e:a2:ed:02:c0:12:3c:e3:33:ab:b0:85:81:c6:
7f:87:b5:50:7d:48:48:f5:6e:f0:16:0d:01:bd:d1:b0:5e:82:
98:1e:52:72:c7:86:0a:2f:d0:2c:06:b0:eb:86:d3:3d:66:83:
77:2e:a6:3b:92:a7:cf:22:7f:5c:01:57:3e:ea:83:aa:ac:84:
0f:34:a5:bc:8a:c4:ad:aa:be:49:cf:65:14:06:6d:29:03:50:
ee:ec:1b:a9:c4:db:c3:20:62:33:82:c0:e6:a1:3b:54:ff:64:
ca:2a:76:00:de:dc:e6:6a:ce:fe:dd:56:57:61:a5:27:20:69:
54:7d:7e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org