Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/B0KjcemW-VoNa6ppFQGW3h76RU0.roa
File: B0KjcemW-VoNa6ppFQGW3h76RU0.roa (raw, json)
Hash identifier: n9DcFngicYhGc6WFNMYeJVDXkZYAK+wIJPAEibxtfOk=
Subject key identifier: 07:42:A3:71:E9:96:F9:5A:0D:6B:AA:69:15:01:96:DE:1E:FA:45:4D
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 10AB
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/B0KjcemW-VoNa6ppFQGW3h76RU0.roa
Signing time: Tue 16 May 2023 08:36:29 +0000
ROA not before: Tue 16 May 2023 08:36:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9311
IP address blocks: 210.203.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4267 (0x10ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:29 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0742A371E996F95A0D6BAA69150196DE1EFA454D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:8d:cd:86:97:9f:68:7e:78:35:af:c4:88:
32:d7:15:9b:58:dd:cf:a1:97:a4:d1:b6:1c:42:7f:
42:94:69:89:2a:d9:89:57:b7:47:fc:c6:38:69:51:
3a:68:07:10:32:76:1d:ed:b9:0f:3c:21:db:c8:b2:
19:cc:45:ce:8a:62:c2:ab:60:4c:be:8d:e9:77:bd:
c5:0a:3a:e7:60:65:8c:96:19:98:af:02:cf:71:80:
ce:c0:19:8e:d9:98:5f:5b:04:f9:26:e6:a1:89:ff:
f8:08:3d:b1:f7:ed:bc:1b:f1:12:f4:97:02:50:3d:
05:b1:bf:73:98:2e:95:c4:72:5a:0f:ab:27:9f:4a:
98:41:0d:a2:6a:20:d1:14:4d:f1:e2:d0:de:f1:c4:
b8:94:ed:57:a8:1d:93:cd:d3:b7:37:18:62:2b:aa:
91:46:d6:0f:c2:6c:f6:d2:a6:78:4c:66:56:57:6d:
80:02:b2:6c:3b:86:e3:9f:30:24:d3:7d:78:e0:3a:
38:a7:a0:e9:0f:7c:4d:fa:52:9f:87:d6:53:f4:79:
15:a3:c2:7b:11:46:20:10:0f:4d:11:d3:7d:68:97:
ae:95:cd:17:e8:24:7d:21:54:5c:a2:37:8c:26:4a:
48:3d:e6:39:62:79:36:7c:2d:31:74:fb:cf:ce:ce:
97:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:42:A3:71:E9:96:F9:5A:0D:6B:AA:69:15:01:96:DE:1E:FA:45:4D
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/B0KjcemW-VoNa6ppFQGW3h76RU0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.203.0.0/17
Signature Algorithm: sha256WithRSAEncryption
17:5a:ee:a8:8a:7b:0a:6a:67:7f:77:03:54:5b:38:fd:f3:82:
6b:62:71:c0:b2:a2:a6:21:71:e5:db:02:fc:39:19:56:e9:c6:
9b:2d:b8:b7:83:1b:76:90:54:2c:4c:61:e5:09:16:84:71:e9:
83:e4:30:de:a3:4d:4a:eb:49:03:01:85:bc:3a:8b:8e:5e:69:
cb:fa:ff:a7:18:83:05:a1:15:57:50:e1:42:2d:d3:d0:1f:d3:
cc:9d:ad:d9:99:e3:eb:4d:2e:7a:70:48:81:17:ee:c7:ee:ab:
53:f5:98:89:5b:fc:1b:c8:f6:07:89:47:a1:05:92:f7:bd:56:
6d:2f:21:c7:63:3d:c1:89:27:7f:64:e7:69:2a:45:bc:10:60:
c5:33:77:fc:31:3c:25:44:4d:c1:eb:b7:79:44:4f:c6:d6:ea:
d3:91:c3:2d:aa:6e:cd:17:72:3c:61:8d:33:3a:d4:80:2c:a9:
fe:7b:1f:90:0b:dc:c6:69:16:9f:2c:8b:3b:a2:fc:02:90:8d:
e2:d7:83:bd:9f:cf:20:91:7c:81:bf:d2:e1:04:21:bb:8a:50:
45:98:a2:49:f4:4b:b2:8d:5c:d4:76:32:cd:d7:cf:88:1b:b5:
c9:6c:0c:99:14:eb:b0:bd:45:4b:06:51:89:4f:db:f0:c8:d6:
0b:ae:e5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org