Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/Bc5KX5wD7eV1v6hCI46E6iXDEy0.roa
File: Bc5KX5wD7eV1v6hCI46E6iXDEy0.roa (raw, json)
Hash identifier: PBUGJyNw4LoLoL1jWTkFPS8jdXVQrQASjILTN36CWDM=
Subject key identifier: 05:CE:4A:5F:9C:03:ED:E5:75:BF:A8:42:23:8E:84:EA:25:C3:13:2D
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0DCF
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Bc5KX5wD7eV1v6hCI46E6iXDEy0.roa
Signing time: Wed 29 Sep 2021 02:39:35 +0000
ROA not before: Wed 29 Sep 2021 02:39:35 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9311
IP address blocks: 210.200.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3535 (0xdcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 02:39:35 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=05CE4A5F9C03EDE575BFA842238E84EA25C3132D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d1:3c:e7:8c:63:f7:b5:0c:04:5f:39:a2:e0:
55:dc:a2:e5:25:63:43:70:f0:45:57:42:c1:05:ea:
30:33:f7:c2:4b:dc:e6:66:81:06:e1:7a:cb:dd:3f:
e0:07:02:6b:11:cf:0a:84:3c:42:a0:ef:37:7e:f0:
c8:43:88:94:2c:a8:bd:02:d8:5d:e0:c2:31:5f:45:
27:32:f6:47:25:41:63:be:90:96:fe:b1:32:9b:60:
0e:05:a7:42:48:05:12:b2:9b:13:68:a2:db:4a:4c:
50:a0:ba:71:f3:4b:71:71:95:9f:88:e5:22:91:39:
9b:a0:20:9a:47:d1:ab:1c:06:72:06:e2:2d:83:ed:
95:77:45:0c:67:db:ce:8d:5c:d6:65:d1:14:40:2d:
9a:fc:5a:a4:34:a5:2c:ac:8e:ed:75:94:d1:8d:ac:
f9:74:35:c3:41:1e:0d:35:1e:f7:aa:d8:8b:75:66:
3b:6b:e3:9a:b8:87:f8:4a:ae:1f:bb:32:4c:2c:eb:
d8:32:99:fb:ec:10:f6:3e:8c:69:f9:ac:93:1d:b1:
f8:28:4d:7f:07:f0:19:9b:cc:b7:fa:17:6d:2b:4e:
b6:ba:42:be:20:b0:d1:b5:0e:f3:5e:cf:b8:a8:fb:
5d:41:3f:4b:71:1e:89:18:09:10:1c:2b:2a:28:6f:
27:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CE:4A:5F:9C:03:ED:E5:75:BF:A8:42:23:8E:84:EA:25:C3:13:2D
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Bc5KX5wD7eV1v6hCI46E6iXDEy0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.79.0/24
Signature Algorithm: sha256WithRSAEncryption
29:6f:8d:0e:8e:90:38:fa:fc:9a:80:7a:6a:8a:e0:a6:e0:23:
63:cc:3c:d5:05:2e:44:fd:e1:e1:60:d3:cb:f8:2d:71:1c:36:
1d:9e:ac:16:3d:d1:64:6f:df:8a:cb:90:31:7b:a5:cc:d9:51:
2f:75:8c:a2:4f:3a:37:79:0c:99:9c:fa:cf:6a:a6:39:34:10:
2d:90:3a:ea:ee:67:c6:c2:b8:b7:7f:54:71:1e:db:92:89:64:
ea:ba:99:49:ae:a6:a3:15:ee:d3:41:93:a7:83:c3:c5:80:9a:
ae:17:6f:97:90:6b:80:50:3e:a1:55:34:7c:06:03:ed:7d:7c:
89:fd:b3:36:6d:e0:23:f8:95:d5:59:c2:dc:6c:3e:58:ae:7f:
cb:5d:8e:ac:87:8a:69:6c:83:99:35:a1:64:09:dc:fa:4d:32:
af:c5:ad:b1:ff:dd:80:2c:73:6d:b3:54:2a:64:32:81:34:9b:
c4:5f:94:44:65:74:3d:54:9a:46:43:d6:4f:9e:0d:db:99:fe:
a9:72:5a:65:6a:de:70:78:27:19:79:60:1d:50:55:71:c9:24:
c3:16:b6:f6:e3:fc:c9:f4:ca:33:c4:0e:41:2b:20:c1:d0:42:
18:46:c2:b8:e6:7b:88:f6:be:a7:14:98:cb:43:df:57:31:fc:
ea:d6:8a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:00 2024 by rpki-client on console-ams.rpki-client.org