Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/BgOXIAkVEWcgkAaZn753X8gMUDw.roa
File: BgOXIAkVEWcgkAaZn753X8gMUDw.roa (raw, json)
Hash identifier: mufKLIcE/UWjUZyR+4v0k1BuDW7CjDXjMb+qtO4tKDc=
Subject key identifier: 06:03:97:20:09:15:11:67:20:90:06:99:9F:BE:77:5F:C8:0C:50:3C
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0900
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/BgOXIAkVEWcgkAaZn753X8gMUDw.roa
Signing time: Tue 29 Sep 2020 10:01:21 +0000
ROA not before: Tue 29 Sep 2020 10:01:21 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 210.63.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2304 (0x900)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:21 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0603972009151167209006999FBE775FC80C503C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d0:b1:af:bf:48:bd:dd:d7:79:34:25:7b:90:
e2:80:2b:9b:fe:e8:6f:82:fa:df:b0:61:e7:d8:36:
58:4d:f3:37:40:dd:95:04:86:2a:ca:b3:75:6e:f6:
2a:e8:1a:29:e3:2c:ad:cb:0a:94:dc:d3:b1:fe:ef:
e7:f5:2e:12:ca:7b:21:fa:1e:f5:d1:02:0c:c5:51:
b1:f3:7f:17:c6:d1:4b:a7:8e:f2:78:0c:6b:1d:76:
23:79:a9:b4:44:68:1e:cf:51:57:78:38:df:57:07:
61:a9:fc:5d:a7:76:fd:d8:9c:2e:f3:78:dc:f1:43:
88:04:86:16:2e:45:43:71:07:39:7e:20:1c:c8:89:
c0:37:80:39:b4:31:5d:ff:a5:61:b4:1d:c1:72:48:
d2:bc:9a:4b:e6:ea:5f:28:81:9b:52:b7:da:5b:d3:
7c:e8:8b:da:0d:1a:eb:d1:31:8e:09:e8:e0:28:e3:
f9:06:e9:d5:4f:b6:ed:e7:6e:1e:26:d1:53:f2:36:
6f:07:80:bd:a9:ce:a9:17:13:cf:a1:9d:15:fa:f3:
8a:9f:1a:1e:68:21:0b:21:5b:da:06:23:75:72:8d:
9f:70:00:29:f4:dd:7e:c6:89:37:00:ac:07:29:7e:
cc:b4:30:32:89:e8:a8:d5:41:0c:1f:97:2c:15:08:
32:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:03:97:20:09:15:11:67:20:90:06:99:9F:BE:77:5F:C8:0C:50:3C
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/BgOXIAkVEWcgkAaZn753X8gMUDw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.216.0/22
Signature Algorithm: sha256WithRSAEncryption
69:2a:b5:35:4f:5b:cc:5a:3d:b9:fc:20:f7:8c:b0:3c:9e:20:
75:05:1b:ca:d9:33:ed:0b:4a:5e:32:21:02:6b:5d:67:aa:9f:
0c:00:d2:ff:4f:b9:c2:a9:f8:84:d7:a6:b1:02:e8:40:92:81:
79:5d:b7:26:65:23:bf:9a:7c:bd:9a:31:67:22:57:d9:a1:54:
47:3f:f0:73:a2:19:77:45:0c:78:85:c1:c5:0a:d6:22:e3:c8:
86:b9:db:62:d7:62:2d:9a:27:3c:28:69:75:09:50:f5:03:35:
21:ef:e3:06:4f:00:2b:ed:55:57:e8:f0:49:15:a9:d2:35:87:
54:30:5d:b3:b3:f0:56:62:61:da:39:4d:ca:28:02:69:ca:d8:
f2:9b:32:be:7b:29:44:b0:61:9d:c9:5b:24:f8:6e:39:07:aa:
e1:d5:0a:63:bb:1c:7f:fb:e4:3f:d9:cf:2d:03:f8:d3:d8:d7:
d1:a1:12:06:ae:76:5c:1e:1c:e7:d9:42:fa:e2:0d:25:c4:11:
05:b9:5b:8a:87:cf:29:5c:06:71:54:64:e3:fd:de:aa:a3:ee:
0c:12:75:ed:ef:e9:dc:6e:5f:f1:7a:99:03:b7:ec:1e:f9:4b:
7d:33:3b:dc:e3:f9:93:de:b1:07:f1:38:b2:f2:56:9f:fc:c2:
ca:cc:8a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:39:05 2025 by rpki-client