Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/BidewdPVc8uU6jbLcSOrFySjCdU.roa
File: BidewdPVc8uU6jbLcSOrFySjCdU.roa (raw, json)
Hash identifier: cCUfqWux5BADm2Z2WP9HBDiZzgMfAal6WA60N4ELtVQ=
Subject key identifier: 06:27:5E:C1:D3:D5:73:CB:94:EA:36:CB:71:23:AB:17:24:A3:09:D5
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0925
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/BidewdPVc8uU6jbLcSOrFySjCdU.roa
Signing time: Tue 29 Sep 2020 10:01:31 +0000
ROA not before: Tue 29 Sep 2020 10:01:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24154
IP address blocks: 2404:0:5000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2341 (0x925)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:31 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=06275EC1D3D573CB94EA36CB7123AB1724A309D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:c3:89:5a:1a:ad:35:7b:42:bd:60:d2:ba:
1e:55:92:67:82:d1:78:f5:c4:4b:4a:96:a8:c3:48:
f4:3f:77:57:ab:55:5a:5c:94:24:f2:04:78:90:19:
cd:0f:43:c0:77:ea:5a:bc:1e:50:91:42:69:e1:21:
5d:7e:db:cd:82:29:51:60:7b:e9:f3:a5:6c:07:b9:
a6:9f:39:84:48:b7:a3:a0:05:f8:4a:ab:15:e3:3f:
5b:35:25:1d:12:f0:ae:86:f1:a1:70:2c:a6:56:a0:
d2:de:f9:96:83:04:9e:13:42:56:ac:4c:c5:9d:b0:
6a:77:5a:3c:d9:12:d8:0c:03:bc:d8:1f:02:b8:97:
9d:dc:13:51:b1:37:f1:68:c6:a5:6b:59:71:e9:cb:
e6:51:33:7d:11:91:20:35:a6:31:9c:dc:1e:07:56:
c3:49:25:b9:8f:ee:08:73:79:11:bf:a1:a1:b2:10:
de:7a:8f:db:7d:84:41:61:2f:67:5d:9a:2d:8b:5a:
77:cb:42:90:9b:36:6a:94:68:2f:e3:24:f5:47:07:
3b:a0:cd:60:e5:c2:5f:d7:3e:dd:ef:5f:28:b2:8d:
3d:fb:b5:28:d0:28:a2:73:0b:50:1d:b5:72:4e:cc:
6a:c6:f9:95:65:bd:05:23:e5:d8:45:cb:2c:87:db:
2b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:27:5E:C1:D3:D5:73:CB:94:EA:36:CB:71:23:AB:17:24:A3:09:D5
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/BidewdPVc8uU6jbLcSOrFySjCdU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:0:5000::/36
Signature Algorithm: sha256WithRSAEncryption
a4:9f:af:f9:ee:6f:5d:77:8a:b9:ae:a6:15:ae:c9:8b:08:7f:
e2:34:5a:c0:d7:1e:85:27:a4:32:8d:9f:43:a1:cc:35:ab:2e:
58:de:5f:a8:db:af:18:f1:eb:88:ea:37:28:23:de:91:cc:ad:
1d:bb:f7:45:29:1e:29:88:75:93:16:ae:64:d3:ee:cd:ce:1d:
32:aa:cc:14:25:8f:db:c9:76:82:a9:5c:d2:43:0f:1a:ee:5b:
7a:01:e4:44:99:9d:c0:f6:88:a3:2b:3d:79:b3:6b:02:d5:5a:
cb:82:50:0c:ad:c0:1c:e4:a7:0f:b4:ff:7c:6b:4e:59:5f:96:
21:aa:28:f8:fc:07:8c:c6:33:82:40:2c:13:c1:eb:67:aa:79:
85:78:02:d9:a1:0f:75:ba:3c:c3:1d:db:df:a7:b3:0c:10:ef:
b9:60:ff:95:4c:1b:04:bd:fc:4a:78:4b:c8:b0:b3:23:91:04:
07:f3:eb:6b:ff:e7:c7:63:78:89:d8:a5:42:94:0f:2b:b2:f6:
fd:e5:86:fc:aa:7f:ef:22:53:bd:7d:51:62:87:3c:c7:b9:5c:
ce:64:9e:ec:37:f7:ce:80:62:56:d3:22:62:cf:a7:f9:d0:4e:
68:94:55:d3:54:58:ce:ec:be:24:14:18:4f:ec:bc:a0:72:9c:
91:86:87:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:58:43 2025 by rpki-client