Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/BsMlN71EkFVC47Msok08sbOJXT8.roa
File: BsMlN71EkFVC47Msok08sbOJXT8.roa (raw, json)
Hash identifier: WgwNKLJ4FCFCCRd870hTH8bkT804edoSLKF5NPPHYrc=
Subject key identifier: 06:C3:25:37:BD:44:90:55:42:E3:B3:2C:A2:4D:3C:B1:B3:89:5D:3F
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0967
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/BsMlN71EkFVC47Msok08sbOJXT8.roa
Signing time: Tue 29 Sep 2020 10:01:48 +0000
ROA not before: Tue 29 Sep 2020 10:01:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17709
IP address blocks: 210.202.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2407 (0x967)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 29 10:01:48 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=06C32537BD44905542E3B32CA24D3CB1B3895D3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:63:ad:84:f6:c7:3b:35:9e:2d:e6:db:76:13:
0e:de:f0:0c:47:33:20:68:4b:08:9f:c5:1a:11:a4:
e0:4a:72:06:3f:53:32:7c:3f:53:c2:05:c4:28:d4:
7f:ee:9e:70:80:79:a9:23:e5:e6:75:71:57:c0:85:
c7:c4:89:5a:59:31:84:cb:fa:dc:51:54:6d:fd:a1:
b0:8d:9a:36:6f:9f:5d:bf:23:3d:04:fc:13:62:57:
3c:e1:4f:16:8c:c9:1a:20:c2:0e:99:a7:90:08:cd:
f4:ee:6d:5a:49:f1:0e:4b:65:42:dd:9f:fe:35:a5:
2f:09:51:05:46:5a:20:8d:63:15:e0:e3:3f:ab:7e:
94:43:42:e6:c7:ca:bb:45:3b:86:89:58:b3:82:58:
dc:d7:46:3d:ec:b6:a2:66:03:77:aa:e9:a3:ba:06:
00:48:c1:56:30:34:8e:61:bb:71:8a:82:56:08:4f:
15:72:c5:23:35:2c:02:01:b6:91:5f:3e:5c:9a:91:
78:a7:64:09:7b:eb:04:69:b3:58:b4:2c:2b:ab:5f:
73:40:1f:e5:6d:0b:4e:91:06:9d:44:87:94:c3:b1:
a6:e6:47:07:9a:3b:20:95:59:a4:fc:64:19:e8:b2:
08:6e:20:1f:cb:65:c6:a7:ec:bf:76:16:ab:1f:8c:
90:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C3:25:37:BD:44:90:55:42:E3:B3:2C:A2:4D:3C:B1:B3:89:5D:3F
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/BsMlN71EkFVC47Msok08sbOJXT8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.202.192.0/18
Signature Algorithm: sha256WithRSAEncryption
3e:20:ce:e6:aa:25:ef:74:70:8d:39:2d:63:f5:c0:72:19:5b:
49:ea:ec:6a:07:91:9e:4f:60:f3:d1:43:90:3c:b3:af:0d:c7:
47:91:e6:88:08:68:50:7d:9e:16:b5:2a:e9:5a:68:52:d3:ba:
c4:55:c9:75:4e:9f:7f:35:92:4f:a9:32:6c:ab:2d:c0:33:b1:
7c:cd:36:9c:13:f7:d0:b2:f7:3b:02:1f:0c:4f:11:fc:fe:8e:
a4:05:5f:7b:1b:a2:d9:2e:d0:6b:04:cf:ca:3f:9a:4b:fd:8e:
02:b7:79:77:1a:46:51:8b:45:2c:67:98:b9:fe:a5:7f:a3:a0:
c3:0d:1e:f1:09:b9:7d:5e:fe:65:c2:c6:21:e2:a0:d7:6d:64:
79:16:34:8e:65:71:6e:d0:5e:17:8b:c8:97:73:a7:71:68:a1:
ff:e4:97:4f:69:5d:39:6c:4b:7c:cb:89:7f:cd:37:5f:df:e9:
de:a0:ed:e2:ea:30:6b:50:f8:b1:7b:bb:06:88:31:a7:ea:0b:
20:d6:36:a4:10:f3:55:43:76:d2:d8:36:91:ae:13:22:69:b0:
93:4b:df:8c:4c:f9:b7:ec:4c:6d:90:16:89:4b:1f:31:e7:9b:
25:cc:df:4c:7d:b7:ad:38:59:43:23:9b:51:7c:e9:f7:da:ca:
f4:e4:c9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:31 2024 by rpki-client on console-fra.rpki-client.org