Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/BJsnTAj8FaahScPzZPuGyccGH38.roa
File: BJsnTAj8FaahScPzZPuGyccGH38.roa (raw, json)
Hash identifier: mIOPCC/MFhVZV9SQ181KljZTTrlNLMhEkg9krim7SUw=
Subject key identifier: 04:9B:27:4C:08:FC:15:A6:A1:49:C3:F3:64:FB:86:C9:C7:06:1F:7F
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0E19
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/BJsnTAj8FaahScPzZPuGyccGH38.roa
Signing time: Wed 29 Sep 2021 02:39:58 +0000
ROA not before: Wed 29 Sep 2021 02:39:58 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 7482
IP address blocks: 124.219.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3609 (0xe19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:58 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=049B274C08FC15A6A149C3F364FB86C9C7061F7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:3a:1e:de:07:dc:45:04:48:46:5d:6c:08:
da:df:06:00:37:01:b1:c5:ae:ff:7b:43:34:9c:5c:
e1:fb:c9:f3:3e:89:27:07:05:0f:fd:69:02:92:44:
d7:dd:4e:a6:da:07:0b:90:cd:df:40:63:89:c4:e4:
8d:a8:aa:db:bb:32:c9:57:1a:df:7f:54:37:f1:6f:
ed:e1:82:84:b3:97:1a:c6:a5:a8:d8:b1:ed:c0:6c:
54:e0:f5:de:a7:93:8a:01:75:ae:88:71:0d:5e:6b:
88:9e:f9:6d:6f:9e:ac:98:cc:41:7f:41:46:c1:f6:
9d:66:e8:94:e8:ff:d4:f7:b9:c4:73:18:b6:50:eb:
26:70:d0:d6:28:96:54:a7:93:a6:0a:31:da:42:e0:
d8:27:4a:61:d0:9f:77:c2:34:83:49:57:11:30:17:
02:c1:dc:a2:76:28:0c:5a:10:7f:fb:c5:38:de:f9:
c8:cc:8e:5b:28:6a:d6:c0:78:cf:60:ad:f2:b4:96:
35:fe:8e:6c:e7:90:52:1f:b7:d8:2a:1c:1e:60:a9:
7e:44:78:c5:84:25:48:2a:18:31:fa:33:54:75:05:
d4:19:63:60:d4:43:de:ea:45:f4:15:3b:2a:58:ba:
8d:18:8e:f9:34:74:4f:10:8e:f1:ba:4c:63:a8:37:
47:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9B:27:4C:08:FC:15:A6:A1:49:C3:F3:64:FB:86:C9:C7:06:1F:7F
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/BJsnTAj8FaahScPzZPuGyccGH38.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.219.0.0/17
Signature Algorithm: sha256WithRSAEncryption
53:e4:23:e7:7b:d5:fd:99:44:78:41:b8:3a:16:98:ec:08:de:
06:7d:5f:9f:b8:7f:0b:29:5c:fb:7f:8d:96:cb:fd:2d:33:b1:
e7:fe:c9:4a:d8:1e:12:e4:94:47:f8:98:96:67:c3:38:70:c0:
a1:6c:9d:64:35:0b:95:5f:fc:1a:d9:e6:3c:3e:37:a6:f4:4f:
58:e0:13:f3:b3:41:bc:21:2b:a8:61:37:d6:6d:3f:24:ca:2f:
2a:74:09:aa:5b:37:61:12:c2:e7:1b:fc:2a:6e:7f:42:b2:3a:
1b:96:3c:69:56:6c:dd:8f:e2:cf:a1:29:b4:f4:39:20:b7:d7:
ee:37:ac:5e:9f:26:1b:2a:3c:9c:cc:cf:18:0c:1b:1d:f8:a1:
31:ea:1a:38:52:fa:88:a1:a3:b6:97:0b:91:d4:b3:cd:c6:fb:
22:2a:20:32:5f:80:a8:72:f3:12:3c:b4:39:34:f0:bb:44:8b:
08:89:53:7d:55:b7:79:26:a1:27:ae:60:fd:e9:f6:d9:ba:c2:
4d:d0:f6:3e:9d:d4:e6:e9:d0:f6:ad:fc:cd:a6:dc:c6:af:03:
93:77:ed:6e:ac:64:f0:11:a3:fe:b3:82:0c:d9:7f:2b:7c:78:
37:a5:b4:a6:64:f2:32:67:2d:9d:c3:59:68:90:53:0e:20:cf:
79:96:76:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org