Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/Bj7wrPtNYun4mDu7pB8WbSty58s.roa
File: Bj7wrPtNYun4mDu7pB8WbSty58s.roa (raw, json)
Hash identifier: KKxc7l52/k+fogyt+t8veok5GiDYLViB5DydsyZtaHg=
Subject key identifier: 06:3E:F0:AC:FB:4D:62:E9:F8:98:3B:BB:A4:1F:16:6D:2B:72:E7:CB
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 127D
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Bj7wrPtNYun4mDu7pB8WbSty58s.roa
Signing time: Fri 01 Sep 2023 08:04:33 +0000
ROA not before: Fri 01 Sep 2023 08:04:33 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9922
IP address blocks: 124.218.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4733 (0x127d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 1 08:04:33 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=063EF0ACFB4D62E9F8983BBBA41F166D2B72E7CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0a:7a:f9:1f:bf:84:34:ec:d5:9f:a9:e0:8d:
f8:52:cf:ae:c7:0d:7a:69:b0:73:27:e1:16:dc:7b:
19:68:81:b6:91:04:b7:7e:00:d6:ac:17:57:37:26:
c3:15:96:6b:29:c3:46:1b:48:26:f7:4e:64:ac:67:
de:dd:8b:a5:65:f6:60:a2:49:0a:11:fb:51:45:27:
36:1b:5c:24:9d:e9:ac:e9:c8:dc:ff:af:c3:90:e2:
e6:1f:3b:34:1e:37:70:7d:f4:18:dd:97:ce:ce:dc:
86:aa:cf:79:4e:fa:20:b8:eb:67:c9:5c:b3:e8:e6:
1e:f8:fd:fb:88:fc:3b:63:08:8f:cc:85:c6:09:c0:
e3:03:5d:4e:37:fb:45:99:71:dd:f5:e8:7a:be:3c:
0d:2d:49:75:17:0b:03:6f:ca:93:d3:cb:25:9e:4b:
e2:71:ad:fe:2a:8b:26:ad:94:9e:ec:55:71:02:d2:
89:3a:7f:64:86:2e:1d:3b:c9:da:8a:c3:0d:26:7f:
23:5a:8e:b3:16:7d:72:77:85:9a:25:09:c4:99:e3:
e5:dc:58:5a:31:82:61:46:85:f0:9d:32:a4:d5:e2:
12:4f:e0:8f:9c:38:cb:36:61:30:95:b6:33:b1:41:
c2:ba:eb:06:b4:11:0c:6b:39:f4:7a:33:5c:4e:9d:
1f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3E:F0:AC:FB:4D:62:E9:F8:98:3B:BB:A4:1F:16:6D:2B:72:E7:CB
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Bj7wrPtNYun4mDu7pB8WbSty58s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.128.0/18
Signature Algorithm: sha256WithRSAEncryption
ae:db:9b:cf:00:0d:e7:c7:72:63:84:42:32:14:6f:c8:d6:4b:
f0:a2:3a:26:f3:ce:d3:77:a8:da:c1:f6:8c:95:02:a5:5d:a9:
7b:1c:48:44:1a:c4:36:b3:e8:c8:37:3a:de:8b:af:55:95:29:
74:f7:1a:c4:a1:81:f2:d9:10:91:32:f1:f0:64:d1:a4:ca:3d:
aa:1e:68:31:fc:01:c1:1d:9d:ed:79:65:72:be:d3:22:62:f5:
a6:5e:fd:81:1d:d6:a1:b3:59:c9:f9:0d:2c:36:6a:3b:e9:88:
43:f5:7a:91:ca:df:28:8a:42:b4:51:a5:4e:9e:22:29:dc:62:
41:8a:3a:05:2c:c7:84:7c:a1:30:ca:4f:71:a3:f8:d2:b2:75:
8d:8d:bc:d6:17:70:18:8c:ae:dc:7c:fe:8a:13:ac:80:d3:1c:
e3:a6:f3:e8:34:01:23:a2:88:44:e6:a1:3d:88:6f:62:62:87:
97:dc:40:a3:de:ab:56:8c:a0:8e:3d:4c:a3:a8:51:9b:c6:36:
59:3e:43:c2:6b:c4:e8:71:a3:16:fd:fe:28:ec:46:69:c9:f5:
89:72:32:e4:c2:6b:7d:2a:ed:5d:21:c9:2e:58:2c:aa:7b:52:
db:e2:16:f0:5a:59:c1:c9:5c:bf:44:29:ef:54:e5:e1:fa:9d:
8f:56:c0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org