Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/B5aJIfVL-_UYjlFoBGs1wKYFncg.roa
File: B5aJIfVL-_UYjlFoBGs1wKYFncg.roa (raw, json)
Hash identifier: m19JGXw3b94qP7IE9RXnf31ThGv02dHdNpkUnXUoLT4=
Subject key identifier: 07:96:89:21:F5:4B:FB:F5:18:8E:51:68:04:6B:35:C0:A6:05:9D:C8
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/B5aJIfVL-_UYjlFoBGs1wKYFncg.roa
Signing time: Thu 15 Sep 2022 02:40:18 +0000
ROA not before: Thu 15 Sep 2022 02:40:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 210.202.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=07968921F54BFBF5188E5168046B35C0A6059DC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b8:ec:25:85:09:21:64:b6:81:8b:20:4b:55:
ce:f3:6b:8e:09:de:aa:54:1b:0c:f2:ff:f3:a2:d2:
a5:cd:61:66:4b:dc:ab:11:3b:7b:1b:b2:ae:ee:e7:
d0:8e:c0:7f:29:1a:ed:0d:98:e7:96:6b:91:09:a8:
92:05:f0:ec:c7:13:e6:b3:4a:f7:0c:61:a0:83:01:
85:ad:a5:c7:01:02:72:21:37:65:b0:08:06:12:92:
52:36:3a:52:ba:82:e2:6b:76:5a:3c:0e:fc:fb:f5:
cd:e1:5b:bf:02:6f:64:2b:f0:dc:d6:5f:5a:f3:13:
e0:b7:45:91:1a:ef:8d:cf:a4:43:b4:e4:b6:8f:29:
ad:27:f3:78:99:e2:a3:2a:ae:c4:49:34:8f:8b:a9:
fd:dc:79:8f:72:54:d3:9a:3d:d1:9f:ae:7a:3e:84:
1b:a4:5e:1e:e6:7e:ad:0c:96:c5:ec:d3:a9:d7:f1:
43:f7:0b:3f:aa:9f:02:36:81:3f:d1:53:c1:17:93:
05:c4:31:86:11:9f:dc:8c:f5:50:82:12:1a:aa:e4:
5f:9a:d6:ca:ca:2b:cb:08:3a:e6:5f:fa:84:54:36:
9f:f8:a8:ea:33:b9:fe:d0:c4:6e:b2:24:89:90:f9:
f7:b1:73:95:06:f4:4a:88:86:dd:8d:4a:59:67:e2:
98:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:96:89:21:F5:4B:FB:F5:18:8E:51:68:04:6B:35:C0:A6:05:9D:C8
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/B5aJIfVL-_UYjlFoBGs1wKYFncg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.128.0/17
Signature Algorithm: sha256WithRSAEncryption
36:4e:35:4d:89:6d:76:c9:89:b6:8a:3d:49:96:6d:29:cf:65:
f1:86:11:9e:4c:a1:67:d4:fb:5e:e2:eb:7f:7c:f2:99:ee:be:
e1:0d:83:85:e9:ff:15:b9:7d:8c:4a:9d:86:fb:fe:57:62:12:
ef:f7:89:68:d0:ce:6d:48:92:8c:ab:ba:99:1e:3b:81:93:ef:
1e:c0:6a:aa:3c:1a:3d:5c:ef:34:a6:c0:11:b0:31:0b:fa:5a:
ce:4b:78:bf:f2:ab:b6:ec:7b:8c:73:ec:4b:46:93:95:75:05:
ec:d6:a7:d7:07:50:16:00:89:e2:06:d0:5a:0b:ff:2a:f5:ad:
6c:fd:f2:db:d7:dc:37:e9:3c:56:b6:1a:42:cc:69:16:78:59:
9d:e7:21:bd:a6:76:f2:87:6a:df:17:ee:da:61:e5:be:f7:59:
06:f1:5f:bf:ef:d5:27:85:b0:08:d6:e1:6b:f8:d3:73:95:a6:
54:9d:b8:65:e3:08:07:bd:6a:7a:85:10:d0:10:6a:2b:49:be:
62:e6:19:ca:d5:dd:eb:3b:50:e6:d2:0e:04:bd:82:ad:0a:97:
90:52:e3:6e:d4:2d:b5:be:eb:ad:e0:ad:21:6d:91:59:b9:74:
e6:b3:1e:4d:1f:61:09:14:42:5d:cd:95:e3:9b:3f:cd:44:20:
51:f1:44:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:02:20 2025 by rpki-client